Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCBD6DBA64AF11F18B4611AFCE1D38B0.roa
File: CCBD6DBA64AF11F18B4611AFCE1D38B0.roa (raw, json)
Hash identifier: Z7zLl2NZwf57vS0jziLnXAug9qGIG6AevGAKVA78qC0=
Subject key identifier: F3:4E:74:54:EF:C2:B2:65:0C:50:2C:66:7B:73:81:29:52:FA:23:DB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D268
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCBD6DBA64AF11F18B4611AFCE1D38B0.roa
Signing time: Wed 10 Jun 2026 09:36:04 +0000
ROA not before: Wed 10 Jun 2026 09:36:00 +0000
ROA not after: Fri 10 Jul 2026 09:36:00 +0000
asID: 139646
IP address blocks: 154.86.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119400 (0x1d268)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 10 09:36:00 2026 GMT
Not After : Jul 10 09:36:00 2026 GMT
Subject: CN=6a293004-3d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:67:5e:0e:27:53:fc:9f:48:72:fa:91:f2:53:
23:a6:77:9e:7c:e5:20:e8:9a:c7:74:72:74:10:ec:
7a:17:a5:20:a2:f8:23:02:63:4b:fd:c3:bc:c4:fb:
75:fd:7e:61:24:ea:48:1a:80:6c:e6:78:09:a4:18:
34:31:af:ca:78:d4:6f:1e:a2:0f:01:01:9c:a5:8f:
f4:90:5b:6d:7f:f9:3f:b6:f5:ff:73:97:5d:9e:de:
53:a3:46:76:7c:b6:44:27:c7:26:f0:c3:99:5e:f1:
48:8f:2d:38:0e:29:46:cf:3b:97:84:df:7c:77:98:
68:f4:7a:fb:f1:d3:3f:6f:d1:6a:e0:d2:33:d0:4c:
c2:5b:d0:b0:9f:e1:e6:a5:fd:94:19:42:aa:66:21:
59:f0:d8:b5:5c:ed:d4:71:56:4e:91:3e:2e:e3:41:
95:e1:8a:66:1c:bd:80:27:a7:dc:78:d3:e8:e4:1f:
c0:1c:98:f3:4f:35:e5:f5:4f:92:9a:92:6a:37:49:
7e:73:24:19:c1:40:f4:cd:8f:44:ed:fe:5b:ed:48:
1f:50:54:48:63:2d:ac:07:95:36:fc:db:de:6d:98:
61:3f:d6:25:4a:e5:02:cd:16:46:71:c5:5b:cc:44:
73:4e:58:2a:cc:db:1b:aa:0e:ca:ed:61:94:3e:1e:
1c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:4E:74:54:EF:C2:B2:65:0C:50:2C:66:7B:73:81:29:52:FA:23:DB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCBD6DBA64AF11F18B4611AFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.0.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:25:90:c9:6f:96:b6:77:02:40:73:59:50:e8:c8:c3:7d:c1:
7f:45:04:55:ca:4b:67:3b:28:e8:f5:ea:01:85:08:c8:48:fd:
f5:28:76:41:03:de:5c:2d:bc:45:2c:4b:f0:60:59:63:05:bd:
a8:fd:e4:25:e5:34:85:20:f4:c0:b6:2f:ea:10:a4:ef:7f:20:
15:2d:ba:32:25:20:ea:53:41:8f:69:04:57:5b:39:1f:77:8e:
92:9f:7b:03:f7:b2:92:03:20:bc:c8:5e:f1:4e:ab:1e:b6:b9:
55:39:f0:a6:a2:59:dc:7a:c0:ba:9a:de:85:26:66:2d:86:a2:
32:8b:08:63:58:8a:bd:9c:13:f5:54:f7:0d:ff:54:b9:1f:a7:
e8:fc:cc:5a:2a:18:a8:d1:35:34:4a:e0:00:53:80:dc:82:38:
e6:74:08:ff:3f:b1:27:29:d0:43:96:0e:c6:3c:88:c2:ae:f9:
73:f9:a7:97:7e:f2:40:04:35:37:a8:ac:a6:56:6e:70:e4:b6:
09:a6:eb:21:e5:9c:5b:a9:95:42:44:22:da:da:38:fd:92:59:
a2:bb:11:4b:2b:ba:47:93:10:07:15:9e:51:a9:74:25:ef:25:
a2:ab:95:e7:65:98:eb:f4:f1:f4:4e:80:9b:81:87:41:56:b5:
4c:67:47:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:29:45 2026 by rpki-client