Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/875EEDD451CC11F184401CCBCE1D38B0.roa
File: 875EEDD451CC11F184401CCBCE1D38B0.roa (raw, json)
Hash identifier: lTZrnfi6WeXYt8xIdZCqMaVvDnqO+6JSSrK/AdSB0Kw=
Subject key identifier: 0D:EB:00:F2:B8:DC:E0:5B:FA:61:29:35:6C:81:80:16:99:69:5B:54
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CC2A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/875EEDD451CC11F184401CCBCE1D38B0.roa
Signing time: Sun 17 May 2026 08:43:51 +0000
ROA not before: Sun 17 May 2026 08:43:46 +0000
ROA not after: Wed 24 Jun 2026 08:43:46 +0000
asID: 18013
IP address blocks: 154.89.144.0/20 maxlen: 24
154.89.160.0/19 maxlen: 24
154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117802 (0x1cc2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 17 08:43:46 2026 GMT
Not After : Jun 24 08:43:46 2026 GMT
Subject: CN=6a097fc7-877e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ec:96:43:65:d5:ad:7c:8a:77:cb:b2:e8:e6:
53:e7:34:4e:bf:c2:1f:cb:c7:0e:63:5e:54:8f:5a:
e2:e4:d5:4e:48:1b:63:a5:89:0b:10:2d:8d:a4:85:
d1:1c:b9:15:9f:f3:0a:ce:ed:b2:45:09:0f:6a:40:
e2:44:e1:bd:32:45:72:6b:ab:41:3f:d3:23:25:f9:
86:e4:fd:60:22:78:c5:1a:67:41:02:46:11:42:c0:
b8:ec:cf:eb:b4:d3:96:48:ee:1d:54:df:8d:a4:a2:
8c:08:d1:9c:5c:6c:2f:ae:a5:89:5b:66:1b:6a:96:
b2:bc:17:6e:3a:50:f4:1b:4b:3f:75:72:3a:94:00:
66:1d:12:0a:40:ff:09:de:d0:d7:99:2d:95:40:9e:
e1:1c:38:30:a2:91:f4:42:cd:e2:77:47:92:14:56:
0c:4e:d5:8a:3f:e5:1d:3b:1b:34:51:f3:bd:0a:e0:
31:65:76:62:38:f8:01:7c:0d:5d:a7:18:1b:ca:bd:
30:d9:ff:04:7a:08:6f:4f:b8:36:86:35:00:26:e0:
94:8e:95:04:b3:c9:15:a2:f1:06:21:11:c9:24:06:
cb:7f:16:fc:b6:42:42:f2:5f:9a:8f:7c:24:fd:86:
90:63:9f:ea:11:62:28:7e:bc:98:69:25:0f:0b:30:
6b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:EB:00:F2:B8:DC:E0:5B:FA:61:29:35:6C:81:80:16:99:69:5B:54
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/875EEDD451CC11F184401CCBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.144.0-154.89.191.255
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:e4:46:2f:bb:e7:02:b9:46:ed:8d:78:cb:2f:b9:b1:c9:c6:
83:6f:51:fc:92:1e:eb:f7:87:b7:43:50:ee:c3:77:95:b1:24:
ed:f1:13:52:f1:de:a0:59:0a:85:17:46:95:ea:d4:49:9b:9e:
b6:00:e3:ce:04:74:6e:11:b8:10:a1:b7:1d:33:da:4b:74:e8:
61:cb:67:a9:30:34:2d:25:c7:7e:59:32:90:68:a6:0c:6c:2f:
33:ee:7d:88:bd:e2:a6:b7:e6:57:6c:54:1c:ef:f1:c2:3d:3d:
fb:68:9a:53:be:c0:75:40:b8:97:a3:5e:c6:aa:8c:fd:35:07:
9f:3e:70:95:33:d3:4c:5f:ef:a9:69:4a:5a:f9:64:34:02:66:
d3:f0:f8:cb:44:77:b1:61:fe:8f:bb:46:d4:77:72:a7:5d:ff:
c6:68:d4:bd:1e:6e:25:47:3b:13:41:22:ec:ac:25:35:58:97:
e0:14:ff:6e:8c:83:bd:87:24:76:9d:8c:08:b2:98:d7:96:04:
e2:9f:c7:fe:3b:4f:33:08:3c:5e:0f:75:16:7f:63:92:7a:04:
f6:bc:8b:35:51:74:97:da:dd:01:06:2d:ad:d6:60:53:15:9c:
85:4c:22:c7:77:05:b1:ca:52:89:44:72:28:57:22:de:7d:45:
14:be:a0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:53:26 2026 by rpki-client