Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C8965A82EAD11F18A2F01AFDAE4EC9C.roa
File: 6C8965A82EAD11F18A2F01AFDAE4EC9C.roa (raw, json)
Hash identifier: X9suJqViEiXCp7QQ03wSBzX028ndg57AdfZ0Ei3+p+8=
Subject key identifier: FB:6B:55:E7:73:4E:F6:6B:E9:38:8B:44:7A:3F:9B:24:F1:6E:CF:AD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C269
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C8965A82EAD11F18A2F01AFDAE4EC9C.roa
Signing time: Thu 02 Apr 2026 16:03:01 +0000
ROA not before: Thu 02 Apr 2026 16:02:57 +0000
ROA not after: Sun 10 May 2026 16:02:57 +0000
asID: 138915
IP address blocks: 154.223.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115305 (0x1c269)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 2 16:02:57 2026 GMT
Not After : May 10 16:02:57 2026 GMT
Subject: CN=69ce9335-5101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ba:72:cc:8a:30:7b:ad:a1:42:3c:f3:0f:c4:
0a:8d:4f:ad:a2:f4:e8:29:c9:aa:72:f3:a1:6c:93:
27:5f:6f:af:00:7d:42:1c:6e:5d:ca:a1:75:c0:3e:
c3:88:24:fd:8a:12:d1:1e:e0:22:ad:50:11:0a:a8:
a7:9e:5e:ad:87:3a:63:76:77:ff:42:d8:2e:33:1b:
0d:96:13:a1:8e:a1:68:26:cd:00:6d:5c:3f:82:a2:
cd:a7:85:36:66:eb:7f:2e:23:e0:c3:8f:ac:06:70:
f6:e6:42:7a:39:39:89:3d:5a:95:31:74:15:e6:e3:
81:e9:c8:10:9a:6d:6b:52:22:a5:9a:69:bd:ef:11:
dc:c3:15:54:7f:9b:d0:bb:86:c1:3f:bd:ae:79:85:
3f:73:40:2c:c5:81:d8:0d:50:90:d6:be:0f:c4:dd:
65:e9:72:07:42:cf:aa:c6:2b:1f:c7:41:a9:65:63:
8c:69:53:47:6d:5f:88:de:ea:18:93:ac:e5:79:75:
cb:83:38:db:11:3b:ab:2d:ef:98:71:c6:aa:21:cd:
f3:ea:c3:25:a9:00:12:f2:e8:fa:63:4a:f8:80:e8:
cc:49:6c:03:4d:dd:c5:b4:5e:be:20:7c:9d:66:eb:
61:1a:53:dc:e0:1f:7a:19:8c:a8:d6:8f:60:11:16:
44:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:6B:55:E7:73:4E:F6:6B:E9:38:8B:44:7A:3F:9B:24:F1:6E:CF:AD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C8965A82EAD11F18A2F01AFDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.65.0/24
Signature Algorithm: sha256WithRSAEncryption
53:45:75:22:88:d0:35:1a:7c:d6:ed:31:d9:50:22:dc:26:03:
be:d2:bd:54:39:24:a8:a5:ba:e1:df:3f:f4:cf:ed:83:e4:5b:
26:97:26:87:6d:81:ec:43:73:88:50:7b:8c:1a:80:68:4b:6e:
96:5c:80:75:1e:e0:97:eb:a1:f6:f7:72:c9:bb:50:d7:6f:01:
e3:f0:19:7b:e6:a2:ad:21:9b:46:0b:bc:85:55:43:11:26:93:
e7:a7:75:e8:a3:5f:48:ea:c1:5d:ca:a0:72:7f:e1:83:91:51:
f6:79:57:91:85:78:69:7e:be:bc:60:38:23:50:33:3d:30:2e:
2e:30:e1:1c:05:7f:94:66:92:a5:89:ee:27:a4:67:14:de:d8:
97:d8:39:f2:d4:41:21:e8:54:8a:6e:6c:0c:59:66:5d:6e:e6:
93:dc:1d:86:70:bb:7a:4b:04:3b:18:71:83:24:4a:b5:cf:f0:
8a:1a:25:38:44:fb:da:11:f7:14:6a:f8:20:a2:bf:16:4a:27:
27:70:76:5b:ee:15:22:28:85:53:63:81:3d:b7:07:97:59:d9:
b7:d7:6b:f9:67:fd:0a:a1:83:91:cf:8c:d6:8d:4c:12:26:22:
61:5e:87:f6:89:fd:06:ef:58:c0:3e:e8:3d:09:4d:85:91:5e:
ee:99:42:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:10:21 2026 by rpki-client