Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF0EBB78666111F18E2299F4CE1D38B0.roa
File: DF0EBB78666111F18E2299F4CE1D38B0.roa (raw, json)
Hash identifier: z2HyqWzCMNZUPtA9+x4oH6ElnhPbo97l/YLdD1VGhRo=
Subject key identifier: 56:3B:C7:3F:73:29:D8:BC:41:06:D6:A6:F1:33:DE:CA:87:A8:A9:37
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D2A0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF0EBB78666111F18E2299F4CE1D38B0.roa
Signing time: Fri 12 Jun 2026 13:23:17 +0000
ROA not before: Fri 12 Jun 2026 13:22:55 +0000
ROA not after: Sun 12 Jul 2026 13:22:55 +0000
asID: 29802
IP address blocks: 154.193.34.0/24 maxlen: 24
154.198.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119456 (0x1d2a0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 12 13:22:55 2026 GMT
Not After : Jul 12 13:22:55 2026 GMT
Subject: CN=6a2c0845-5d32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:da:aa:87:2e:31:b5:20:98:c8:13:29:37:0e:
50:1f:d4:29:5c:fc:d5:43:f3:59:40:22:65:2d:43:
14:20:58:36:95:1a:03:6d:d4:f5:a4:73:07:a2:ea:
b5:b8:0f:fb:fb:e3:24:77:2d:9d:7f:b5:a1:80:23:
9c:dd:64:32:46:b1:6c:3b:ff:b2:30:d1:73:20:d5:
54:5b:96:46:6c:74:52:d7:cf:de:49:bb:c6:db:3e:
25:73:40:5c:28:20:fd:cb:07:0f:86:3c:6b:62:9d:
95:93:5b:fb:45:7f:5c:d0:33:32:ad:b6:e1:0c:02:
54:d3:c5:cd:2c:fd:22:79:8a:26:ae:ff:1a:07:ac:
63:41:44:08:da:34:74:a4:46:66:f5:1e:0e:26:e0:
4c:88:91:0a:4d:b2:c9:ec:a6:cc:ed:9f:14:eb:a0:
7d:fc:cd:f3:e3:e3:5f:2d:ca:18:c5:4b:4f:d0:d8:
30:64:68:e7:89:50:bb:c6:74:3d:ab:fa:d9:a2:1b:
43:4c:53:e6:f4:43:bd:b7:40:7a:1c:3a:d8:e1:fa:
fe:cb:a6:58:33:26:bf:a6:f8:e8:11:93:f6:21:b3:
a6:64:32:c1:b6:f9:16:c2:94:c6:2a:22:44:12:a2:
4b:3d:23:d9:c2:d0:a1:c1:40:f7:3d:59:01:10:0c:
51:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:3B:C7:3F:73:29:D8:BC:41:06:D6:A6:F1:33:DE:CA:87:A8:A9:37
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF0EBB78666111F18E2299F4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.34.0/24
154.198.185.0/24
Signature Algorithm: sha256WithRSAEncryption
60:1a:dc:e9:a3:a9:22:6e:1d:b1:d5:5c:1c:5d:c4:04:ba:b4:
41:59:4f:8a:9a:02:ef:b9:3e:3c:b8:03:95:5d:41:c6:b6:35:
e9:db:9b:6c:5e:8a:85:27:1d:48:ea:70:fe:fb:07:da:af:a8:
fb:30:cc:bb:cc:46:b4:61:98:81:57:28:47:41:54:33:f6:83:
b1:fb:95:70:73:6c:91:56:f0:b3:0e:6f:91:c7:0f:1e:f3:c9:
2b:91:8c:6e:98:7b:bb:72:ce:57:36:13:62:d6:d4:e2:ed:75:
74:7c:c0:c7:60:1b:31:cd:d5:8c:c1:70:b5:d8:06:c4:4d:70:
66:a1:cb:2d:97:c3:56:9f:0c:00:39:17:b4:bb:f4:25:f5:ea:
c6:d3:7d:5d:51:54:cd:4b:08:a4:7f:05:7a:bf:1e:54:7f:e0:
4f:70:95:44:55:1b:f7:73:4b:ed:40:33:9c:66:a2:89:2e:b6:
ad:e4:66:65:99:10:dd:d8:1d:ca:0f:3c:a2:9d:5b:18:4b:ea:
60:47:80:5d:59:70:64:92:f0:4a:a7:d9:af:0d:29:52:0f:47:
a8:2f:28:cb:c6:64:1d:f0:22:17:fc:d6:0b:87:a0:8c:03:6f:
3c:d5:dd:62:1c:ea:87:f7:49:8b:53:4d:68:55:05:fc:28:c2:
3f:ba:d9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:01:46 2026 by rpki-client