Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D56683AC618A11F1B7D9DF12CF1D38B0.roa
File: D56683AC618A11F1B7D9DF12CF1D38B0.roa (raw, json)
Hash identifier: tJ6t6uwlP0zB5VMuvGGPHX3BK2pmOZvio3CHaECOQ1c=
Subject key identifier: F5:39:10:70:EE:EB:00:6A:7B:26:66:27:40:4A:B6:5C:FD:74:39:E8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D20B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D56683AC618A11F1B7D9DF12CF1D38B0.roa
Signing time: Sat 06 Jun 2026 09:33:54 +0000
ROA not before: Sat 06 Jun 2026 09:33:50 +0000
ROA not after: Mon 13 Jul 2026 09:33:50 +0000
asID: 10753
IP address blocks: 154.203.0.0/23 maxlen: 24
154.203.204.0/23 maxlen: 24
154.203.244.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119307 (0x1d20b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 6 09:33:50 2026 GMT
Not After : Jul 13 09:33:50 2026 GMT
Subject: CN=6a23e982-4acc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e9:36:4e:f3:ad:d3:dd:d2:0d:4b:3f:63:57:
a3:6e:3c:fe:b6:86:ae:0a:f8:30:05:3e:ac:5f:25:
98:47:a1:b3:39:6a:ad:cd:75:11:c8:8b:fb:c8:ab:
03:4a:fb:b8:44:62:99:1b:bb:58:87:02:88:2a:45:
d7:1f:d1:14:57:b5:99:82:93:a8:ef:3d:c8:e2:e5:
f1:52:00:95:be:3b:91:a6:4a:d7:0b:d2:7a:d6:50:
eb:ed:c9:23:e1:d6:36:c5:4a:a9:66:84:77:c9:de:
9f:59:5f:7a:b7:c8:b4:ef:c7:8b:03:b4:38:d8:09:
b5:14:23:2f:0b:62:5a:5c:75:95:be:53:0d:e1:d0:
58:8a:ba:47:da:34:b0:67:d5:4e:57:a6:58:5f:bd:
a1:91:9c:a7:2c:28:74:f8:bf:f8:bb:bb:aa:3b:fd:
29:be:28:a3:4c:1e:22:8e:78:80:44:ad:e4:1f:d0:
86:4f:95:e7:4c:a9:2c:46:a3:e8:03:92:48:f3:fa:
be:3d:a8:25:69:71:d4:ad:95:01:a5:00:ad:0f:89:
08:13:35:98:8d:28:80:75:16:f1:f8:f9:59:62:fe:
95:8b:c7:3a:6d:67:e4:b3:40:62:86:e3:0d:d7:b5:
17:6f:ba:e1:4a:d1:1a:d5:d3:e3:80:a9:ff:62:69:
d1:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:39:10:70:EE:EB:00:6A:7B:26:66:27:40:4A:B6:5C:FD:74:39:E8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D56683AC618A11F1B7D9DF12CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.0.0/23
154.203.204.0/23
154.203.244.0/23
Signature Algorithm: sha256WithRSAEncryption
af:72:2f:6b:b5:33:11:0f:3d:99:dd:08:a7:51:0a:c0:3a:4d:
54:3c:3e:b5:f8:00:c1:56:12:5d:b1:9c:09:5b:f9:0f:41:03:
2b:fc:a4:69:00:a1:c2:89:60:61:71:50:5d:7f:72:58:2c:4f:
6c:91:71:59:35:1e:49:25:0c:2a:03:c5:d7:94:50:8f:f3:eb:
f2:fc:0c:40:8d:a7:6f:7b:84:da:ef:ed:70:a7:21:0a:60:34:
46:ce:14:42:1a:7f:50:6e:c2:71:6a:86:e0:e3:25:c3:51:e4:
60:d9:eb:bb:18:6d:0e:23:0e:72:c1:0b:4c:5b:da:15:8a:9f:
9f:76:07:b6:8d:1a:74:51:3f:ad:01:fc:cc:1f:1b:1f:04:89:
ed:10:2a:94:f4:d9:84:ad:b2:28:e3:47:d4:20:4b:8f:a5:30:
ca:e0:ca:e3:63:63:f9:12:1a:0b:3d:20:e0:08:28:d4:dd:22:
ec:74:d4:e9:3c:9f:8b:17:9d:04:aa:8d:81:94:fe:ea:7b:91:
82:5e:45:f5:3b:97:15:61:f1:90:23:9e:72:cd:7e:64:bc:53:
6d:0e:fb:34:1d:e9:2d:fa:58:7f:25:2c:39:3a:38:56:11:f1:
e4:b8:b2:5e:51:d8:39:3f:e7:23:f5:3c:00:6d:8c:5e:0b:33:
11:42:91:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:41:43 2026 by rpki-client