Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D608664454CA11F189BBEAFACE1D38B0.roa
File: D608664454CA11F189BBEAFACE1D38B0.roa (raw, json)
Hash identifier: IhR2eFXSiHiqzaDgO7o/nIJ6ZIawZYDL/cxwcpnIP5E=
Subject key identifier: 5D:D7:75:C5:E9:5F:82:B7:34:DD:1A:1A:36:DD:F7:96:2F:CB:1E:8D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CD22
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D608664454CA11F189BBEAFACE1D38B0.roa
Signing time: Thu 21 May 2026 04:09:18 +0000
ROA not before: Thu 21 May 2026 04:09:13 +0000
ROA not after: Fri 10 Jul 2026 04:09:13 +0000
asID: 63099
IP address blocks: 154.82.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118050 (0x1cd22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 21 04:09:13 2026 GMT
Not After : Jul 10 04:09:13 2026 GMT
Subject: CN=6a0e856e-94b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8e:f5:29:87:8a:47:4a:30:6a:28:4e:42:62:
3f:bd:09:f2:a5:3c:6a:d2:19:59:38:fc:f6:af:33:
3f:f3:48:c9:91:02:64:fb:1c:31:e4:95:44:5a:35:
00:94:1c:45:8d:86:5a:48:bf:d9:a2:1c:29:d8:b7:
56:89:ef:dc:2b:38:76:ea:1f:07:73:4a:76:c8:94:
cd:16:29:97:da:ae:f6:5f:6c:15:19:45:3d:61:10:
bd:aa:13:b6:aa:6a:ad:10:ab:fd:b8:04:b9:0d:c3:
e5:63:06:2e:f5:37:52:19:f1:76:db:38:4e:80:5a:
3c:c1:b6:00:bc:47:98:4c:bd:be:e0:4c:a7:d0:91:
f5:83:23:14:0f:cc:41:35:ba:e2:25:e0:db:2a:1a:
af:71:b2:fe:f8:79:3f:bc:db:0c:0f:06:a9:96:23:
45:c2:6e:03:f6:cf:1e:ce:96:4f:b5:ba:23:20:6e:
55:bf:c3:4d:3d:ce:ac:98:81:ef:87:91:01:01:29:
21:df:cd:fe:73:b3:7c:62:16:d5:92:f0:ff:80:03:
2d:63:02:fe:91:79:af:98:1a:23:32:8e:34:e7:b2:
b8:26:c3:4a:3d:e0:cb:e0:08:ff:e0:07:5a:ce:f4:
cf:2b:a4:b3:0b:c8:9f:ca:94:4a:56:3b:6c:24:e1:
cd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D7:75:C5:E9:5F:82:B7:34:DD:1A:1A:36:DD:F7:96:2F:CB:1E:8D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D608664454CA11F189BBEAFACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.163.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:98:42:10:28:e8:04:82:a0:df:44:45:01:ac:d6:3f:bd:db:
ca:c9:87:b2:43:a9:2c:2c:ef:da:59:f0:20:b2:2e:aa:9d:c7:
1e:c2:d8:8d:76:ee:05:d9:32:81:0e:f5:0a:a3:77:1e:b4:7f:
ca:ac:5c:68:e8:ce:c2:e2:8f:f8:4d:85:a2:55:4a:b8:37:df:
14:93:2f:d1:b0:d0:2b:ad:77:f3:31:1c:77:4a:d0:f3:00:b1:
81:c4:58:a5:5b:40:37:dc:20:57:e4:fb:2d:21:bf:67:f3:9a:
28:8e:2d:88:de:cd:a1:3c:0e:a0:36:00:c7:ce:8d:c2:1c:db:
f5:24:9a:bd:7c:44:71:16:e8:cb:6f:36:b5:ec:88:9c:c1:34:
77:42:77:ee:c5:42:93:12:6c:97:77:d1:00:54:5f:fe:7f:8e:
47:c1:a8:83:cf:be:00:ae:55:3d:e7:8c:e3:d7:71:50:c8:50:
12:d3:c2:e2:81:7b:2d:ba:ba:48:b5:e6:85:97:bd:d5:97:97:
2e:e9:0c:32:e4:0f:a7:05:98:4a:14:d0:cb:ba:a2:03:52:7b:
14:fa:5a:57:4e:bc:13:bd:0e:0e:95:aa:3c:e5:e7:e0:3b:19:
36:dc:2f:50:fa:05:2b:aa:1f:e1:fd:b3:f1:95:8e:06:67:e8:
06:a8:f2:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:53:11 2026 by rpki-client