Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75A9A38C630511F19845A114CF1D38B0.roa
File: 75A9A38C630511F19845A114CF1D38B0.roa (raw, json)
Hash identifier: gyIwCVGlshq0tyebNnPIP1MDllOHKWOZg/XvTp8/PfQ=
Subject key identifier: 76:45:3F:7B:08:97:8F:10:5A:6D:9E:B7:AB:72:E9:0D:DA:16:75:0F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D23C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75A9A38C630511F19845A114CF1D38B0.roa
Signing time: Mon 08 Jun 2026 06:44:13 +0000
ROA not before: Mon 08 Jun 2026 06:44:08 +0000
ROA not after: Fri 25 Jun 2027 06:44:08 +0000
asID: 136744
IP address blocks: 154.206.14.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119356 (0x1d23c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 8 06:44:08 2026 GMT
Not After : Jun 25 06:44:08 2027 GMT
Subject: CN=6a2664bd-06f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:06:7e:86:0f:6d:92:41:87:73:91:84:e7:1a:
97:ac:a4:a0:c6:de:e2:d5:65:9b:fd:e4:2d:64:fc:
72:56:02:24:4c:6d:dc:1e:25:75:fe:34:41:c3:7e:
ff:f5:06:71:ec:e3:70:22:b1:af:6c:42:76:55:eb:
2b:ed:0e:ee:df:bc:c0:e2:0a:ac:79:8e:c6:87:9a:
27:48:8e:97:08:fb:fc:bd:b1:b9:5e:91:d2:22:ee:
79:91:b3:fc:92:5f:bf:5b:b4:4f:ad:36:02:69:17:
51:7d:09:cc:32:3b:1c:17:4b:71:c9:ba:26:29:67:
1f:88:19:29:f8:7d:2f:d6:85:b8:33:cb:bf:3b:db:
c3:e2:70:6b:28:c7:a9:93:27:d2:4b:8c:ef:46:f3:
a7:3d:04:fd:cf:e9:c8:3a:44:be:1e:5c:42:fc:d4:
cd:36:97:9a:ee:01:c6:4b:ce:2f:25:68:b8:6f:f6:
aa:79:c0:3f:1d:04:8c:68:b4:0e:ce:71:dc:31:56:
c1:bd:6f:20:1b:4a:3b:6e:9d:c7:7d:22:e6:15:0c:
68:fd:e8:f5:fb:70:84:3d:5e:3c:d6:8c:6f:19:26:
54:15:59:b9:6d:a7:b2:18:ba:0f:fa:05:2e:2e:3a:
5e:3c:bf:b2:c2:c6:01:a9:e1:b6:bb:fa:93:d2:76:
07:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:45:3F:7B:08:97:8F:10:5A:6D:9E:B7:AB:72:E9:0D:DA:16:75:0F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75A9A38C630511F19845A114CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.14.0/23
Signature Algorithm: sha256WithRSAEncryption
50:dd:2e:cd:64:37:91:54:70:bb:e0:ac:b2:21:b5:fa:8b:6e:
38:99:0c:66:f4:a0:58:b0:5c:65:2e:46:96:11:86:60:4c:57:
39:a7:40:f0:54:bb:52:b6:17:78:79:12:9e:aa:ac:5d:6f:c7:
0e:7a:10:cd:8e:03:27:a5:b8:1b:2a:26:91:17:14:6e:ae:bc:
c5:52:1c:10:fa:5d:72:48:38:d2:95:ff:4d:f2:04:38:23:22:
e5:2f:1d:6a:f2:bb:98:f6:16:2b:81:77:6f:1a:89:2d:6c:32:
e2:63:9b:c6:ba:c7:da:7d:ed:ff:21:30:5a:8f:8f:4b:ae:77:
39:a7:a6:6c:74:fc:7e:52:72:05:2d:9f:5f:e2:14:80:56:2f:
32:82:04:bc:95:9e:e9:42:cf:fe:59:6f:9f:57:26:cf:5d:61:
96:05:e6:09:3c:88:7d:03:e7:6b:9b:85:7b:bc:4e:b6:e6:43:
16:a3:c4:c8:3c:7d:46:84:f9:a2:46:8e:72:75:52:43:39:e1:
a1:c0:df:c8:81:0e:54:20:c2:81:c6:39:78:45:34:07:17:5e:
e1:1c:9a:d6:eb:b9:6f:40:9a:cd:22:1e:ee:d7:e1:30:a4:8b:
bf:4b:c0:f6:f9:30:b3:3c:3a:d7:e9:5f:20:c3:3a:7a:79:9f:
8c:b0:c7:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:20:19 2026 by rpki-client