Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9DE46D32614D11F1811CDD0FCF1D38B0.roa
File: 9DE46D32614D11F1811CDD0FCF1D38B0.roa (raw, json)
Hash identifier: l0JLdjJLUHP+gUBBBBKanHCVoYG/m1+JiP2h/UONPUM=
Subject key identifier: C0:99:EC:BF:21:9E:84:C6:18:90:F1:61:B0:E9:30:9C:E5:E2:5B:F8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D1D3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9DE46D32614D11F1811CDD0FCF1D38B0.roa
Signing time: Sat 06 Jun 2026 02:15:42 +0000
ROA not before: Sat 06 Jun 2026 02:14:14 +0000
ROA not after: Tue 25 May 2027 02:14:14 +0000
asID: 23764
IP address blocks: 154.85.14.0/23 maxlen: 24
154.209.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119251 (0x1d1d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 6 02:14:14 2026 GMT
Not After : May 25 02:14:14 2027 GMT
Subject: CN=6a2382ce-75a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:db:0f:75:b5:da:2f:7a:2b:3d:ee:c7:13:54:
aa:32:c8:47:df:07:15:58:62:50:b9:f0:dc:b4:ad:
83:69:e7:98:20:63:37:0d:a6:ea:23:ee:e8:29:e6:
72:7a:86:e9:1f:8f:31:8e:c4:17:58:2a:e2:4a:f8:
3d:ba:af:e6:18:3a:53:2b:11:93:73:23:45:f3:86:
4a:f4:4f:62:66:cd:20:12:e1:a3:35:75:e6:b5:de:
00:79:82:b3:16:ff:df:63:f9:bd:dc:67:14:01:1d:
d9:5b:4e:e3:34:25:9c:3a:6e:f9:9f:04:f7:c0:3e:
59:13:d9:c5:9b:26:62:a9:0c:20:8f:47:82:f3:b5:
cd:63:20:cd:fe:91:ee:36:db:7f:e5:3f:f1:52:0f:
2d:1b:c3:68:74:1e:16:4c:f7:1f:23:90:b0:0c:82:
77:aa:68:e7:12:a3:bf:67:64:f7:8e:e2:15:03:fc:
f0:9c:87:1d:ae:e9:12:f6:18:3a:53:bf:3b:e9:57:
12:38:03:37:69:96:f5:b9:a3:66:34:e3:1c:e1:0e:
18:2e:00:a7:33:d7:8e:ee:4e:be:27:40:a8:f5:de:
cc:9f:37:b6:f7:8b:78:04:af:2d:3d:ad:8c:df:a4:
2b:7f:59:fb:df:00:1b:b8:7f:fb:83:f5:58:86:d2:
53:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:99:EC:BF:21:9E:84:C6:18:90:F1:61:B0:E9:30:9C:E5:E2:5B:F8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9DE46D32614D11F1811CDD0FCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.14.0/23
154.209.20.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:0d:f8:48:7e:5e:d2:6d:27:f4:47:d7:73:a9:d1:b3:1d:1e:
b2:47:aa:02:85:59:4e:14:35:f3:96:ee:b6:f8:42:21:d3:21:
88:06:2e:4c:fc:98:57:d9:cd:b2:45:5a:3f:b4:ab:f1:72:da:
b4:58:b2:84:b7:b0:25:a3:14:cf:b8:3d:6a:d1:67:a1:da:9a:
cf:77:5f:ac:1c:23:a0:8a:f4:07:7f:56:18:81:4d:e2:ee:0f:
4b:be:30:3c:71:7b:ce:f0:e0:60:74:09:d8:5f:55:cd:34:cb:
bb:43:1a:0d:e4:e4:d3:b8:a3:5d:0e:9b:50:08:2e:4d:3a:02:
70:05:dc:f8:b6:53:16:46:f4:06:01:a0:45:0e:02:e0:1a:00:
89:59:2f:6a:58:b9:c5:65:47:b6:ab:aa:c2:d8:11:e1:dd:84:
5e:52:3b:57:07:7b:7c:f7:e3:57:2d:b9:dc:eb:e9:38:cb:a9:
2e:e7:29:8b:43:63:1b:83:fa:86:17:b5:64:34:42:c5:79:41:
80:03:5c:75:9b:05:cc:1d:e3:be:bf:f9:9d:7f:cb:a4:2a:8f:
d0:5d:21:f8:5a:ab:66:35:57:25:54:6e:33:1a:48:b2:16:c6:
04:22:66:a2:48:0d:d9:15:4d:e7:f1:98:0d:5e:2d:8b:3f:8e:
67:f4:7e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:38:36 2026 by rpki-client