Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1D001FC64AA11F1B5CC760FCF1D38B0.roa
File: B1D001FC64AA11F1B5CC760FCF1D38B0.roa (raw, json)
Hash identifier: 9o7vijGijl9LnIYoDVCjWaTjn4qiLY2Ilze61GF9vPA=
Subject key identifier: 56:AF:A6:37:1D:24:4A:F9:F9:A3:25:82:76:47:CA:11:C1:74:C5:35
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D264
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1D001FC64AA11F1B5CC760FCF1D38B0.roa
Signing time: Wed 10 Jun 2026 08:59:32 +0000
ROA not before: Wed 10 Jun 2026 08:59:27 +0000
ROA not after: Fri 10 Jul 2026 08:59:27 +0000
asID: 54801
IP address blocks: 154.86.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119396 (0x1d264)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 10 08:59:27 2026 GMT
Not After : Jul 10 08:59:27 2026 GMT
Subject: CN=6a292774-402f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:53:2d:c9:51:6e:e6:88:0e:07:a3:cf:2f:72:
0a:fb:ab:ba:6b:03:89:73:a2:c4:46:eb:3d:d5:e8:
b1:08:10:ea:fe:fd:4d:af:3e:4b:36:df:f9:e4:b5:
19:da:79:5e:b7:38:83:31:cb:a6:39:45:c8:6f:39:
18:01:d6:e0:5e:49:b6:92:92:75:af:fa:a4:4c:79:
d9:8b:e9:2f:16:83:db:ce:85:57:1f:1b:56:6f:07:
7c:80:38:e3:31:e0:bb:86:58:27:94:0d:60:7b:31:
72:1e:98:f5:f9:58:af:20:26:a7:ee:66:34:06:b6:
24:93:22:16:b2:f5:ca:f5:1e:f7:a5:ea:74:03:75:
30:78:66:78:fc:6a:2f:69:50:da:03:a8:95:ed:20:
64:9a:97:af:61:d1:d7:f7:6d:55:10:8b:d2:64:71:
55:ea:d4:bc:9a:2e:f0:8e:d0:fb:fc:43:7e:d7:0b:
48:f6:94:2e:d2:1a:bd:99:bf:f3:f6:47:d2:12:dc:
1d:eb:d6:58:b7:98:f3:12:1b:86:22:dd:17:9d:b6:
14:5a:f9:7f:fb:41:0c:b8:79:d3:20:9b:36:1c:bf:
8a:0c:dd:08:c0:ad:59:5d:cd:a1:40:e2:61:78:e1:
e2:09:7c:46:ed:45:27:6c:dc:ac:53:5e:7a:6d:57:
58:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:AF:A6:37:1D:24:4A:F9:F9:A3:25:82:76:47:CA:11:C1:74:C5:35
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1D001FC64AA11F1B5CC760FCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.0.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:15:c0:03:b3:d3:18:08:30:d3:80:27:79:3c:6b:ce:81:af:
89:c5:5c:3e:51:3f:4c:c8:36:6e:c5:07:6a:27:a8:09:e1:22:
c7:c4:b5:61:17:cc:8f:0b:96:71:64:23:f8:18:da:13:70:4c:
a9:4e:a5:8a:e8:79:e8:50:c3:f4:b9:17:99:71:24:2d:62:3e:
c6:0d:23:e5:04:75:83:16:5c:2d:16:8e:7d:4c:19:19:d4:b1:
46:e6:bb:23:e9:4b:13:23:d2:28:1b:66:87:2e:18:00:f6:27:
1a:7f:49:14:73:03:d4:7c:fd:a3:07:61:d2:78:75:5a:1f:06:
de:1f:65:7b:7d:3b:01:f1:2d:0a:0d:fd:35:9a:92:1c:d2:9b:
a8:b1:66:86:32:8d:9f:bf:ca:d5:33:6b:08:40:6d:de:f2:dc:
53:a5:8e:f7:74:4c:c3:f4:d4:22:6d:34:a9:9b:7f:89:51:28:
5f:97:ec:6a:cb:24:d5:0b:ce:79:c2:8b:f2:24:78:07:31:b1:
15:02:2c:e6:27:d4:b1:d6:25:9b:c6:9e:58:02:d4:5b:f4:e1:
f9:63:ac:95:64:c6:1d:b9:b0:cc:8a:da:2d:13:18:2d:c2:73:
bb:18:40:62:ba:61:4c:b9:03:d5:af:de:9a:47:4d:86:83:45:
68:14:7f:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:57:27 2026 by rpki-client