Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3FAF456617C11F1B3AD79C0CE1D38B0.roa
File: E3FAF456617C11F1B3AD79C0CE1D38B0.roa (raw, json)
Hash identifier: EjqsvcUI+2CY/dNdDmikSon2pVcbxZPyOe+Od0jO9Hk=
Subject key identifier: D0:F8:74:9A:EF:D2:42:F9:C7:9B:72:38:51:1B:60:63:34:D0:80:FD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D1E3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3FAF456617C11F1B3AD79C0CE1D38B0.roa
Signing time: Sat 06 Jun 2026 07:54:06 +0000
ROA not before: Sat 06 Jun 2026 07:54:01 +0000
ROA not after: Tue 07 Jul 2026 07:54:01 +0000
asID: 395886
IP address blocks: 154.86.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119267 (0x1d1e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 6 07:54:01 2026 GMT
Not After : Jul 7 07:54:01 2026 GMT
Subject: CN=6a23d21e-3b71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:87:f2:92:c3:44:bd:66:ff:9f:55:30:7c:f3:
bc:b0:f2:ed:be:3e:1a:53:8c:9b:bd:b1:16:43:4f:
44:4e:e6:52:a3:4e:c8:e0:1a:fc:27:17:1a:c7:a6:
bd:87:e5:04:a4:a1:f7:cc:87:e9:41:d7:ae:4f:b8:
86:7e:7d:29:2a:e7:05:42:38:ac:76:5d:3c:ab:c6:
2f:d7:d0:b5:ff:51:87:1b:e8:41:20:9a:44:ce:82:
6e:44:75:ea:b5:4b:7c:39:b4:d6:bc:26:6c:85:50:
5c:2b:3b:15:b7:48:e5:b8:f0:8e:35:12:3e:33:30:
bc:d7:e5:95:2a:34:df:47:de:e2:57:e4:fd:44:f2:
85:f5:60:58:d9:90:d4:64:62:30:a7:8c:80:98:a5:
aa:16:61:f1:68:98:8d:a1:c5:92:94:b7:8e:ff:14:
c7:d4:05:d3:aa:c8:68:e1:da:b5:e4:db:b3:76:0e:
5a:4d:92:f8:4a:50:16:5e:c1:77:2c:a2:17:42:a3:
a3:de:1f:e9:d7:6d:b1:3c:72:57:81:68:e3:ca:e1:
66:1a:87:e7:7a:79:2f:32:e7:4e:0a:20:3a:6e:2e:
2f:c9:9f:cc:a6:18:c7:53:04:3d:b1:12:5d:26:63:
7b:bf:06:ba:7f:ce:cd:04:dc:e9:36:8d:d5:01:69:
32:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F8:74:9A:EF:D2:42:F9:C7:9B:72:38:51:1B:60:63:34:D0:80:FD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3FAF456617C11F1B3AD79C0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.16.0/20
Signature Algorithm: sha256WithRSAEncryption
60:23:93:ad:1f:1c:0f:14:d7:0e:1c:02:cf:86:64:78:c9:ae:
e0:22:c4:d1:62:69:3a:33:76:be:5a:d8:8a:28:b9:4a:cd:8f:
35:c0:bc:93:f3:ee:df:65:82:4d:1f:18:c3:a0:7c:68:ae:a4:
cf:0c:06:7d:84:c8:39:38:c2:51:09:60:d0:7d:09:e5:fc:2b:
52:fb:28:07:8d:47:08:b6:2e:50:9c:b7:7c:6e:e1:85:a4:5f:
88:cd:a1:a9:92:fc:80:4c:27:d7:c9:11:56:c7:2e:3d:4d:2b:
20:73:2e:3c:8a:0d:19:10:72:bf:ed:76:95:9f:88:06:81:4c:
cf:95:ce:d7:03:54:3c:e3:e6:62:e6:10:33:ef:54:86:1d:17:
3b:80:78:e0:c8:3b:26:a0:e5:fd:18:03:be:e0:2c:e0:9a:95:
5f:9e:84:9e:b1:19:6a:9e:a1:79:dc:55:7f:eb:85:76:5c:2f:
52:f3:01:c1:f7:7d:a0:68:7c:0a:e9:6d:94:ac:b0:1d:5c:b9:
3b:56:39:4b:6a:ce:3b:6e:01:21:93:b8:10:b7:d0:58:3a:bc:
be:11:75:76:de:4a:cf:95:ec:09:9e:09:0f:82:5e:a6:70:92:
81:61:58:53:c0:6b:da:4f:98:21:98:5e:75:b2:59:87:6e:83:
fd:e7:82:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:41:18 2026 by rpki-client