Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FD6C2CC38C711F1B25802BACE1D38B0.roa
File: 6FD6C2CC38C711F1B25802BACE1D38B0.roa (raw, json)
Hash identifier: 2FoMS6zoE6gYhTyVBXLgZsFqTUnglptY3W40BLrRstk=
Subject key identifier: B0:A7:B5:BA:29:9E:D9:40:98:1C:92:42:84:0E:9C:E6:A6:79:CB:7F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C560
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FD6C2CC38C711F1B25802BACE1D38B0.roa
Signing time: Wed 15 Apr 2026 12:34:25 +0000
ROA not before: Wed 15 Apr 2026 12:34:21 +0000
ROA not after: Mon 11 May 2026 12:34:21 +0000
asID: 401696
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Apr 2026 00:07:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 116064 (0x1c560)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 15 12:34:21 2026 GMT
Not After : May 11 12:34:21 2026 GMT
Subject: CN=69df85d1-5d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a8:8e:3a:75:94:46:bc:fa:b9:51:2f:02:b1:
6a:42:41:7e:74:a3:ae:c6:67:f1:56:9a:b6:71:f0:
1c:79:dd:50:f9:b2:29:ed:34:79:d7:1f:fa:2c:0a:
d5:86:84:f5:56:16:83:b4:75:a7:56:65:73:4a:90:
d8:68:dc:ff:94:75:f4:0b:01:a2:80:92:9e:82:2c:
45:66:4c:86:f4:3d:a7:53:c5:46:72:66:93:4e:cd:
4d:5a:87:75:b3:ca:73:77:71:0e:20:13:e6:0c:60:
a1:5d:66:9e:58:42:29:ff:be:a8:8c:12:76:9b:87:
45:98:23:8c:16:aa:1a:ce:32:54:fe:41:63:98:68:
5f:f5:ac:c8:b6:e4:e5:be:25:71:a8:ce:c0:fd:af:
86:c8:75:51:45:a9:2b:35:c5:c9:64:47:b6:c8:bd:
1f:b6:53:23:60:95:24:ad:23:ac:24:50:5e:28:f9:
64:3c:08:e0:97:b0:20:e1:e2:14:0d:75:eb:9f:10:
6a:79:a9:8f:61:fd:60:47:cc:3e:79:7a:b0:07:2c:
75:56:30:14:53:64:e0:bf:7d:3b:3b:4b:dc:c8:53:
f8:41:e6:56:62:5d:a4:fb:a1:a4:be:c3:2f:4c:ad:
0c:90:1e:f7:5b:c3:36:36:ba:1d:b4:c7:da:b5:ba:
e5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A7:B5:BA:29:9E:D9:40:98:1C:92:42:84:0E:9C:E6:A6:79:CB:7F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FD6C2CC38C711F1B25802BACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
30:ea:75:54:66:b3:12:7a:da:32:7d:54:ab:aa:6c:8c:28:cc:
e8:d0:f4:86:fb:b1:a2:8b:02:dc:c5:88:4d:5a:e0:00:59:e3:
97:aa:91:89:5b:51:2d:c8:7f:24:c1:21:ea:86:2a:a9:9c:6a:
30:a7:4b:9c:8b:56:b1:fa:42:37:2c:7f:e1:d8:59:a0:3d:fe:
f1:93:da:2a:da:dd:ff:92:b8:46:47:43:4b:2b:7c:f2:39:fe:
51:b6:fb:5d:ad:6b:52:ab:e2:30:a0:35:d9:23:17:53:f3:3c:
f6:37:9e:c5:44:7f:ea:47:d1:d1:4b:9b:63:53:f9:9c:10:65:
61:b7:08:42:af:5e:76:54:08:f1:e5:d7:f7:ad:a3:c6:d7:2d:
d6:7e:46:1b:71:64:4f:b5:92:0b:e9:86:1d:76:5c:20:c4:8c:
8f:58:2b:ba:ce:d0:86:fa:68:0b:7f:54:94:9a:9d:43:ad:86:
4d:ed:5d:23:e3:b4:72:12:ff:e3:27:06:f5:73:9d:70:6c:08:
f3:4d:a0:7f:34:b1:29:c9:79:e7:ea:1c:5c:35:d5:9d:f9:47:
8b:55:0a:a3:71:66:52:29:5f:c2:dd:52:32:7a:9f:f7:be:5e:
a8:8b:2a:e5:fb:b1:44:cd:b4:5f:5d:f3:b7:65:44:ff:fb:a9:
f0:0c:be:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:29:49 2026 by rpki-client