Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C06700722AA211F18944DAE0DAE4EC9C.roa
File: C06700722AA211F18944DAE0DAE4EC9C.roa (raw, json)
Hash identifier: coAuoJN+FT42kcpM9lMJTluyO+97kD5Xy8MgpQkaZc4=
Subject key identifier: 58:05:4A:CF:CB:D1:A8:C3:B3:F1:9F:1C:2F:C0:6E:73:81:D5:A4:23
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C160
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C06700722AA211F18944DAE0DAE4EC9C.roa
Signing time: Sat 28 Mar 2026 12:36:33 +0000
ROA not before: Sat 28 Mar 2026 12:36:28 +0000
ROA not after: Sat 16 May 2026 12:36:28 +0000
asID: 40779
IP address blocks: 154.222.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 20 Apr 2026 00:08:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115040 (0x1c160)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 28 12:36:28 2026 GMT
Not After : May 16 12:36:28 2026 GMT
Subject: CN=69c7cb51-e4fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:4a:63:e5:ee:50:73:57:a1:2c:00:ea:b6:d6:
75:41:c3:80:02:5b:8c:cf:6d:bf:d1:f1:35:a8:f8:
6b:ae:d3:a0:85:89:d3:ed:9d:56:c2:4d:89:17:10:
e9:34:c2:95:99:68:2d:49:13:77:b5:c6:56:d0:d4:
45:a8:07:3b:2a:09:3c:b7:c2:53:c0:7e:47:34:ca:
57:95:a4:b1:1d:13:e7:7d:ae:4a:aa:d1:55:b2:80:
97:e7:3e:5a:d4:9f:bc:02:ef:24:13:5b:bb:c8:6f:
88:70:34:c4:29:46:8f:f7:96:fd:4b:5a:b9:ee:c5:
19:34:a7:02:26:53:3a:b2:8a:49:0d:2c:c3:ba:e4:
6a:58:0c:b6:b0:53:34:29:c6:b3:92:d3:47:7f:f0:
92:52:fd:82:29:76:70:50:ea:61:c3:81:bd:49:30:
54:b5:19:ce:45:26:29:af:07:a3:82:89:44:95:4e:
f8:7b:15:f8:b9:69:9e:bf:23:7c:87:49:1a:54:10:
72:74:cd:8a:0d:a3:c1:c2:76:03:90:f7:f0:bb:e8:
dc:f7:b3:3e:36:6c:fc:63:8a:0b:21:e7:85:80:c4:
fd:74:3a:79:e2:90:34:34:38:df:dd:de:a6:e8:ce:
d4:27:68:4e:64:b1:8a:d5:0d:c6:df:ed:96:02:19:
03:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:05:4A:CF:CB:D1:A8:C3:B3:F1:9F:1C:2F:C0:6E:73:81:D5:A4:23
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C06700722AA211F18944DAE0DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.16.0/20
Signature Algorithm: sha256WithRSAEncryption
42:b9:bc:87:cb:ec:37:c4:65:36:ce:a5:39:72:f6:32:0a:52:
53:d0:16:ef:6e:46:ab:a9:22:e8:d2:7f:22:62:73:8c:17:d3:
15:00:6a:a3:19:a6:4b:55:8d:83:45:19:2e:10:c1:71:21:bf:
02:f3:7a:fc:8b:fc:fb:7a:9e:4d:d7:0e:03:b2:1a:f9:63:0d:
c4:43:fe:54:5b:60:73:db:41:9e:be:8f:44:2f:90:9b:e9:8a:
d2:d4:fd:4c:48:85:28:cf:7a:b2:db:3c:44:3a:76:77:1c:eb:
4c:4c:e9:79:17:df:2d:fe:74:45:2b:b2:d1:19:47:7c:4a:ce:
d4:97:a4:f9:40:41:79:f6:93:c6:dd:3e:aa:c4:d6:7e:71:15:
1e:ed:9a:41:e2:22:8a:06:c0:4f:e2:ee:a8:c1:13:5b:30:ad:
50:1c:b9:c7:0d:1e:54:cb:c9:cd:8e:ee:54:e0:aa:d3:4e:1e:
32:a3:ab:5a:96:39:a8:c3:d0:be:75:a6:6a:be:a5:25:d8:bd:
12:ca:25:bd:37:f9:d4:af:6f:43:37:99:33:19:6e:0e:0e:95:
ae:2e:96:4f:d1:0e:61:a3:b3:ee:b1:7f:a6:77:7e:c3:c1:c3:
d6:b7:7b:dc:53:af:d0:52:2d:9b:db:69:2f:36:d6:7d:aa:b3:
44:db:a8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:25:29 2026 by rpki-client