Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4286B9E64D011F1A8BF4CF0CE1D38B0.roa
File: B4286B9E64D011F1A8BF4CF0CE1D38B0.roa (raw, json)
Hash identifier: iGRw28P6aQfBnIVlNHYHVS5TqeyQ2S6EYbYHudoZCZ8=
Subject key identifier: C7:8D:E6:DF:44:D0:71:DA:FB:CE:1C:88:E5:50:E3:D5:27:5C:08:A5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D288
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4286B9E64D011F1A8BF4CF0CE1D38B0.roa
Signing time: Wed 10 Jun 2026 13:31:37 +0000
ROA not before: Wed 10 Jun 2026 13:31:32 +0000
ROA not after: Fri 17 Jul 2026 13:31:32 +0000
asID: 54801
IP address blocks: 154.81.61.0/24 maxlen: 24
154.81.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119432 (0x1d288)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 10 13:31:32 2026 GMT
Not After : Jul 17 13:31:32 2026 GMT
Subject: CN=6a296739-cc87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:2f:af:b7:30:81:18:5b:53:ac:7a:7d:1f:f2:
7f:7a:2a:ef:1a:95:c4:65:24:d9:0c:3d:eb:97:a9:
f0:de:63:21:49:20:da:0b:49:5c:ca:54:49:c3:c3:
de:89:86:50:9a:ea:3f:a5:d6:f8:8d:ce:80:ff:37:
35:42:bb:0f:ef:d6:64:42:88:86:da:d5:c8:f2:50:
f0:44:40:a3:42:7b:eb:b7:f6:17:97:46:86:ee:26:
4c:b2:e8:a8:cf:0d:c8:c3:cc:91:0b:79:09:e8:71:
cb:f4:58:f9:41:e3:cf:d5:88:60:af:06:23:1a:96:
c4:28:c3:72:39:a3:9c:30:06:d4:6a:84:d6:39:1b:
cd:06:4c:94:b5:f6:ca:25:1a:95:18:7b:20:e2:3f:
9f:37:91:fe:8f:6d:55:c7:d7:77:0c:17:c0:34:dc:
ea:6e:a2:04:8a:29:0b:6e:e3:62:2a:de:4b:e9:d8:
76:ea:6c:7f:97:ea:2b:d1:bc:e9:37:bb:fd:16:8a:
42:b3:d7:d0:7a:10:59:c1:62:8b:6e:b2:ba:7e:8a:
f2:f8:7b:15:b0:dc:3f:bc:59:4f:fc:8d:df:04:d7:
d1:88:4b:a1:97:c1:af:17:d9:be:ce:35:d5:7d:3b:
d6:b0:48:77:35:51:43:8b:df:be:8c:a4:ff:a6:22:
d7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:8D:E6:DF:44:D0:71:DA:FB:CE:1C:88:E5:50:E3:D5:27:5C:08:A5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4286B9E64D011F1A8BF4CF0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.61.0/24
154.81.161.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:d9:f4:7e:90:0b:1a:fb:1a:6e:3a:4f:72:3b:6f:30:3a:af:
71:ba:7a:5c:a1:37:12:ec:0c:f3:6b:87:72:cb:03:5c:f0:3c:
20:1e:21:4b:3f:9d:42:94:5a:fb:26:98:61:e3:8c:f1:dc:81:
d4:d0:5b:79:a6:46:1d:1e:23:94:cc:ee:11:d0:8d:51:42:75:
ba:73:e2:0a:78:6e:df:84:3f:5c:81:06:7a:4c:ad:2a:4c:e8:
0b:09:cd:55:57:9b:ec:a4:00:86:4e:aa:9e:ba:33:74:6a:5b:
d1:13:8a:d4:19:51:7a:9c:bb:ab:c4:e1:08:ee:b4:ca:d1:72:
d2:e1:f7:a9:c6:c5:ca:1e:33:27:45:80:3d:57:e3:40:dd:11:
e6:9a:14:c6:f7:df:96:76:70:fe:e4:db:f8:5d:87:51:80:bf:
98:6e:2a:7b:ea:32:d0:91:b0:a6:03:4c:b9:ce:dc:8e:02:86:
58:b0:76:c1:b6:55:e8:7e:10:ba:88:71:57:7b:a0:fc:62:0e:
49:3b:62:4b:4b:c7:12:71:52:89:0a:13:f0:28:70:bd:f8:8a:
89:7c:02:b0:ae:1d:9b:4d:60:c9:67:9e:bd:cb:12:3a:11:ac:
17:6f:a2:9b:2e:7c:98:16:19:cd:10:7e:f3:97:db:e7:3e:46:
0e:8a:5d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:02:42 2026 by rpki-client