Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7EECEDC551611F18FD81DCBCE1D38B0.roa
File: A7EECEDC551611F18FD81DCBCE1D38B0.roa (raw, json)
Hash identifier: akZTJciZcDRNztRyYPGUUVnKSbBNbwKQup6dtE/F5hg=
Subject key identifier: AF:AB:A9:B8:EB:3B:49:41:13:80:5F:67:02:09:F2:88:E0:BF:6B:43
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CD6A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7EECEDC551611F18FD81DCBCE1D38B0.roa
Signing time: Thu 21 May 2026 13:12:02 +0000
ROA not before: Thu 21 May 2026 13:11:58 +0000
ROA not after: Fri 26 Jun 2026 13:11:58 +0000
asID: 136907
IP address blocks: 154.93.100.0/23 maxlen: 24
154.93.104.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118122 (0x1cd6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 21 13:11:58 2026 GMT
Not After : Jun 26 13:11:58 2026 GMT
Subject: CN=6a0f04a2-c724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:a1:ff:78:40:34:95:6d:0f:b7:78:aa:48:a5:
91:fe:c6:47:93:8d:60:9c:33:6a:dd:76:54:d2:2c:
db:e5:b9:ef:51:0e:08:0c:42:a6:de:90:52:20:fd:
31:da:f9:7a:8d:a7:01:7c:2e:46:74:b7:d3:e3:ce:
8b:de:a0:63:58:51:49:ec:9f:04:32:f2:79:60:b2:
ee:a4:07:61:dc:70:42:e7:60:f3:5b:8c:6b:0d:78:
00:bf:5c:0c:59:02:03:18:5b:35:07:cd:e5:1d:2a:
fd:26:21:fb:78:ab:37:f3:1f:f2:fb:82:dc:75:b2:
c2:20:2c:f3:bc:5e:80:5f:d2:cb:24:6c:7c:ed:24:
a9:7d:16:21:37:5e:8c:d1:32:89:63:64:43:e1:c2:
6a:58:98:16:b4:15:66:19:24:62:92:37:05:b9:04:
fe:7c:af:d7:f6:f4:43:c7:75:2e:ac:c4:55:bc:1d:
d8:f2:84:b8:26:1c:df:b3:4c:fd:99:dc:76:c0:f9:
f4:a3:33:40:2c:45:9c:58:4a:d3:12:ce:30:a8:0b:
bf:ae:7a:40:23:16:a7:75:35:70:33:c8:ff:5d:e4:
88:d0:7a:98:88:f7:3c:36:24:94:30:a4:68:6e:5c:
17:46:9d:a8:ce:c0:14:20:2b:3e:7c:82:0e:57:80:
3e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:AB:A9:B8:EB:3B:49:41:13:80:5F:67:02:09:F2:88:E0:BF:6B:43
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7EECEDC551611F18FD81DCBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.100.0/23
154.93.104.0/23
Signature Algorithm: sha256WithRSAEncryption
c8:1d:6b:01:a0:8d:e3:89:d0:24:04:13:31:3d:0f:93:e4:06:
d7:71:e8:cd:ff:94:3f:7f:d5:24:f1:71:0b:32:ca:15:8d:f0:
b5:53:41:3b:61:14:0a:2d:ef:d9:f6:57:f9:16:88:96:ba:eb:
47:28:e8:35:27:17:06:ea:bc:fe:d1:e0:4e:ff:7e:82:7d:e1:
36:4d:13:61:75:39:12:29:2c:d2:44:40:6e:87:94:0a:3b:f3:
b7:82:47:d2:78:7f:ee:af:7d:72:65:3b:09:04:82:77:09:08:
0d:1a:70:67:ef:c1:47:80:a0:ef:c1:e0:1b:8a:e7:12:ad:31:
6b:b4:b3:93:69:2a:44:da:6d:b2:21:ae:3a:d0:c2:b3:2b:b7:
c6:9d:6c:05:a1:f9:fe:b2:f9:33:78:3a:56:c4:67:85:2f:db:
7e:b2:0d:e5:96:ab:85:fc:06:15:aa:71:31:22:e4:be:2c:d2:
99:83:0c:77:06:cf:59:10:34:f9:a1:b8:97:77:d2:22:c3:3e:
4b:95:3d:d4:13:60:90:34:71:cb:8b:b8:9c:0a:7a:e5:e3:da:
d0:86:f2:8b:3a:5f:10:e2:53:cd:01:55:3d:30:dc:ab:f1:b8:
4e:86:ca:39:b7:0c:fa:6c:f0:4d:54:5d:0d:f0:2b:05:04:79:
ad:43:76:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:51:48 2026 by rpki-client