Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C146EDFE618E11F1AAC99FA9CE1D38B0.roa
File: C146EDFE618E11F1AAC99FA9CE1D38B0.roa (raw, json)
Hash identifier: JKNvJ3qdCAtDFNAhbcBzGCn44wP7+Jy0XGkh6ciEqIQ=
Subject key identifier: 1E:E3:E5:DB:41:7A:3D:DA:A6:8D:59:15:D4:84:95:4F:B6:B9:4B:FD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D216
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C146EDFE618E11F1AAC99FA9CE1D38B0.roa
Signing time: Sat 06 Jun 2026 10:01:58 +0000
ROA not before: Sat 06 Jun 2026 10:01:54 +0000
ROA not after: Sat 13 Jun 2026 10:01:54 +0000
asID: 136970
IP address blocks: 154.92.20.0/24 maxlen: 24
154.197.2.0/23 maxlen: 24
154.197.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 13 Jun 2026 10:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119318 (0x1d216)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 6 10:01:54 2026 GMT
Not After : Jun 13 10:01:54 2026 GMT
Subject: CN=6a23f016-3d2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:60:8e:37:4c:95:7e:df:bf:0e:31:36:af:53:
8b:7b:60:e9:67:ef:5d:5d:70:01:d2:1e:e1:ed:66:
70:80:8c:e2:64:c6:61:a4:5d:a1:42:56:b8:d3:49:
f6:d2:72:7a:fb:a5:99:ac:24:a9:cc:62:b9:db:51:
65:b2:6e:69:d0:76:fc:4b:2c:46:66:f5:6c:a9:65:
1e:10:73:74:88:04:f1:09:e2:f5:e9:d0:7c:e6:4d:
cb:62:e7:be:1d:72:a6:98:f2:3a:7f:ee:de:7e:49:
65:3a:b9:b1:08:7c:d8:42:c1:05:8a:c4:2f:95:19:
07:2d:b3:46:4e:b7:bb:c9:4d:6d:c7:b6:fa:31:92:
dd:09:a9:80:24:b3:a0:6d:90:bf:a1:3b:15:5a:86:
c8:73:59:1d:82:2b:93:d2:64:48:29:d8:81:e4:a9:
01:16:b7:e6:71:73:74:e7:b6:6c:ac:98:7a:85:46:
4a:d4:39:d7:9a:aa:d9:0b:21:ad:f9:ec:d2:d2:52:
21:a4:40:4a:de:29:41:c3:10:c1:02:0d:e1:3c:3f:
df:6b:f8:10:66:a7:ec:ad:d5:2f:ca:ff:fd:28:6a:
bb:4b:98:17:80:81:cd:9f:61:6d:5e:9a:aa:cc:f6:
0b:32:81:43:01:24:2e:28:fc:be:b1:72:6f:7b:37:
d3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:E3:E5:DB:41:7A:3D:DA:A6:8D:59:15:D4:84:95:4F:B6:B9:4B:FD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C146EDFE618E11F1AAC99FA9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.20.0/24
154.197.2.0-154.197.7.255
Signature Algorithm: sha256WithRSAEncryption
c3:e3:57:e2:ba:82:85:79:0c:93:15:8f:5a:ef:dc:a8:0f:55:
51:68:35:c5:aa:d6:05:46:37:1b:be:27:ba:c5:1a:dc:28:24:
e2:9b:ee:47:8e:fa:3d:90:eb:d8:fe:13:c8:84:bf:aa:d7:c9:
09:89:a8:54:c2:7c:ac:fc:62:0c:e8:2e:74:c4:65:7f:6f:0c:
79:07:94:49:65:b7:bd:d3:7f:03:ff:b6:39:a9:70:6d:7e:64:
d7:e0:f2:d3:a0:1a:3b:fd:3e:bd:e3:68:df:19:4c:ce:50:54:
15:e2:d2:59:5b:9d:ee:06:d1:3d:76:68:8c:80:bb:19:97:b7:
e4:4c:08:5a:72:ac:a9:a7:21:98:ee:b1:8d:77:42:bd:8d:84:
3d:b5:0a:58:25:32:1c:85:a6:41:00:c1:48:8c:a6:95:fa:88:
3b:1f:0e:51:8b:a8:30:8e:d1:60:ad:22:76:07:15:18:5e:5d:
5a:70:fa:42:32:2b:47:d9:31:e1:c4:dd:2e:ef:a7:ec:1f:5d:
c4:6b:cd:29:56:99:bb:9c:8f:6e:f1:06:62:a1:5f:81:d1:52:
ee:5a:bf:6a:79:ea:56:55:37:5d:fb:0d:59:76:99:4e:5b:66:
c1:dd:4d:99:a2:15:c4:90:66:e7:34:02:3f:64:7e:29:15:29:
db:a5:3d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:52:49 2026 by rpki-client