Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3BD9F9E5D9511F1ACA01603CF1D38B0.roa
File: C3BD9F9E5D9511F1ACA01603CF1D38B0.roa (raw, json)
Hash identifier: vM19EaYTQIxQhCzLYsoq5HIwQhJ051WeInJK3el6+Vc=
Subject key identifier: 45:BA:CE:A8:29:58:5C:7C:AA:B6:17:0B:40:94:FD:3B:35:CF:FD:2E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D128
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3BD9F9E5D9511F1ACA01603CF1D38B0.roa
Signing time: Mon 01 Jun 2026 08:42:04 +0000
ROA not before: Mon 01 Jun 2026 08:42:00 +0000
ROA not after: Thu 09 Jul 2026 08:42:00 +0000
asID: 200213
IP address blocks: 154.193.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119080 (0x1d128)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 1 08:42:00 2026 GMT
Not After : Jul 9 08:42:00 2026 GMT
Subject: CN=6a1d45dc-bf05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0d:8b:7d:b0:62:3e:02:19:1a:5d:8a:bb:3d:
0e:da:6d:df:52:6a:b9:d4:a9:ae:0c:ab:71:cb:b5:
98:c5:21:04:8a:c2:ab:2a:21:43:26:7e:0a:18:03:
4b:04:23:d3:99:e2:2a:0b:77:b8:b1:36:70:ee:9e:
3e:63:be:84:e1:fb:17:c9:32:28:8a:c1:87:bc:ee:
56:b6:54:20:29:b1:4e:3b:5b:df:f5:b3:94:2b:f3:
71:5a:4b:b4:b3:ca:d9:65:47:09:f4:f2:ee:d1:2d:
ba:14:6a:9c:31:50:ab:55:8f:f9:43:df:b3:05:24:
a0:33:55:21:fa:3d:c8:c1:22:e8:d2:f5:fc:ca:71:
dc:c5:5c:03:0b:51:3d:58:76:c7:a5:b2:32:b8:a1:
06:ce:1e:e5:65:5f:23:8f:3b:27:23:bb:66:ca:71:
a1:ab:db:61:e6:08:34:6f:2c:7b:9a:6c:29:41:0f:
a6:e2:0a:d0:06:24:6d:bd:d1:e8:bb:3c:86:96:68:
3e:97:c4:68:a6:25:eb:6a:ce:25:b0:08:c3:80:1c:
b3:e2:cc:2e:d3:c0:47:3a:bc:56:40:49:d6:fb:79:
df:fb:fa:03:d7:17:aa:01:89:8b:07:e5:ad:ef:3d:
f8:8f:2f:83:25:29:7f:89:03:16:4c:a6:05:e6:98:
ac:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:BA:CE:A8:29:58:5C:7C:AA:B6:17:0B:40:94:FD:3B:35:CF:FD:2E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3BD9F9E5D9511F1ACA01603CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.128.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:d4:71:7f:eb:cf:f4:5f:e7:b4:b3:27:0d:ce:6c:1d:9f:fb:
5b:80:fe:2e:6b:79:a2:af:61:b2:1f:74:a7:a6:dd:55:10:8f:
45:67:de:92:69:37:1b:4e:7a:f7:5c:46:1d:ce:6d:dd:51:b8:
a3:aa:18:e6:1f:8e:92:50:e3:c6:9e:72:9d:d5:2c:d4:b5:88:
7f:25:67:2c:f0:19:a6:0d:fe:7c:a5:d1:cb:87:42:51:3e:31:
48:3f:61:47:27:09:2f:75:05:24:86:96:3b:ff:8d:36:9b:71:
ad:bf:5a:5d:f5:21:88:ed:e6:e9:46:50:0f:46:87:27:14:39:
c0:28:33:f6:ab:76:ef:38:93:41:ab:0c:68:9d:f4:1b:6c:4c:
14:c6:88:b5:65:f2:0b:83:05:76:8f:45:3f:73:25:91:7f:e4:
6c:c0:ef:f9:0c:ea:29:9a:f1:0b:5e:59:fb:7f:f2:01:35:f6:
58:2d:02:2c:6e:35:33:fe:99:04:3b:42:cb:35:6c:80:3b:7d:
f0:a4:bc:6e:c7:0d:63:b3:04:54:83:47:8a:34:10:c5:31:5f:
57:5f:f7:1e:32:d2:e4:97:4d:bf:20:82:1f:0c:7b:45:83:bd:
a1:4b:3b:83:40:e3:a3:c7:48:76:b1:95:f3:a2:e9:0c:29:3a:
ec:e9:dd:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:02:33 2026 by rpki-client