Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/612831C05DDE11F19F4C0DB2CE1D38B0.roa
File: 612831C05DDE11F19F4C0DB2CE1D38B0.roa (raw, json)
Hash identifier: 1Cl8xGt9IiUCTbN94dNRcpEMHDlDeTBkIjUo0Ry7P4M=
Subject key identifier: F2:EB:D2:B5:71:F7:C6:2B:B1:EA:99:95:82:0A:94:75:8F:07:2E:38
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D130
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/612831C05DDE11F19F4C0DB2CE1D38B0.roa
Signing time: Mon 01 Jun 2026 17:21:52 +0000
ROA not before: Mon 01 Jun 2026 17:21:48 +0000
ROA not after: Mon 06 Jul 2026 17:21:48 +0000
asID: 64126
IP address blocks: 154.88.187.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119088 (0x1d130)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 1 17:21:48 2026 GMT
Not After : Jul 6 17:21:48 2026 GMT
Subject: CN=6a1dbfb0-5911
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2b:81:32:01:9e:ab:4b:10:f9:83:b6:74:c6:
93:c9:f3:be:48:ed:bc:45:d4:4e:4b:69:72:2e:98:
ad:20:ae:bc:cf:87:7f:0d:14:62:57:38:ee:cb:52:
84:55:74:10:df:1c:db:f1:10:5c:59:56:15:ee:46:
e6:e5:51:fc:4b:d1:ec:e8:32:e6:d1:5f:9c:43:c6:
64:97:31:72:95:ea:fe:5b:96:91:44:d0:63:da:f0:
a4:44:44:4f:e0:3e:ab:d9:ce:61:e7:ae:60:ef:de:
18:f2:0c:80:70:9b:70:12:d8:bf:ed:b4:e2:02:f2:
02:4d:e2:1f:17:67:ed:df:ba:d8:96:e6:c8:41:bd:
a7:d5:c5:f6:37:30:57:d8:5f:9e:e7:4b:0f:e9:cc:
b3:82:3a:5f:a1:1e:5d:bd:ae:67:8a:37:b4:c5:15:
0a:12:79:51:49:8d:e6:74:63:46:8f:d4:19:50:c8:
f7:40:a7:bc:0b:b7:6b:5a:da:db:ea:82:05:5c:4f:
c9:51:43:f1:3d:ce:e3:e7:f4:80:cc:12:13:53:61:
2a:15:d1:87:6d:65:2b:24:c3:86:29:3a:a1:63:38:
12:6d:6d:91:a0:39:68:3b:cf:9f:b3:d7:d6:5a:97:
5f:f0:0b:3d:14:0a:38:72:98:74:c3:43:34:26:d2:
d5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:EB:D2:B5:71:F7:C6:2B:B1:EA:99:95:82:0A:94:75:8F:07:2E:38
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/612831C05DDE11F19F4C0DB2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.187.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:0a:d6:3e:85:2f:06:10:c1:e5:92:cb:ee:09:3c:ad:a2:18:
87:fc:d2:f1:13:bd:7c:46:6e:ca:11:fc:61:80:88:14:15:ce:
af:45:67:d1:02:38:a5:62:1a:24:40:4e:a2:29:9e:91:ed:6e:
57:da:a8:a8:95:1f:c6:78:61:cd:5c:7b:c3:17:73:a7:08:ed:
1e:8f:47:d6:bf:04:50:6b:e6:43:2d:be:77:07:73:ca:71:fb:
89:fd:0a:53:cd:9b:4d:f4:dd:be:a6:74:7a:f5:c3:7f:fe:f8:
aa:81:10:20:07:1f:56:08:7a:3e:99:02:92:7c:5b:e2:e6:63:
c6:c8:c4:ea:d2:59:1f:11:1c:c2:1c:ac:76:71:49:05:29:43:
46:2a:c2:b0:61:17:80:85:8e:f9:d2:06:e4:63:98:a7:18:70:
70:2f:53:ad:58:74:bc:9b:c4:2e:6e:4c:b0:05:12:db:5e:6a:
70:7e:c1:5c:d2:96:d3:18:db:b8:fd:69:ee:06:e8:65:0b:b3:
f4:bf:02:1d:e2:ca:4f:72:ad:5e:7a:48:a7:65:bd:3c:0c:85:
09:0f:a4:28:ab:22:e5:9c:6b:b2:03:2c:ba:ac:49:eb:f3:62:
3d:9e:0e:91:2c:c1:d1:46:94:4b:34:22:6a:35:db:3a:8e:12:
bb:d5:6d:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:18:05 2026 by rpki-client