Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6A0A29E5F2B11F1B25DEAA7CE1D38B0.roa
File: E6A0A29E5F2B11F1B25DEAA7CE1D38B0.roa (raw, json)
Hash identifier: a2Mx3bmeUZErqLORmqo78z52ojw/esHoFzZk65GBB9I=
Subject key identifier: 70:9E:B3:03:11:76:D6:4C:90:B2:3C:78:9E:9C:9B:4E:B9:C2:CA:4F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D173
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6A0A29E5F2B11F1B25DEAA7CE1D38B0.roa
Signing time: Wed 03 Jun 2026 09:09:18 +0000
ROA not before: Wed 03 Jun 2026 09:09:14 +0000
ROA not after: Sun 13 Sep 2026 09:09:14 +0000
asID: 211826
IP address blocks: 154.197.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119155 (0x1d173)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 3 09:09:14 2026 GMT
Not After : Sep 13 09:09:14 2026 GMT
Subject: CN=6a1fef3e-b876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3d:73:09:f2:28:bb:3f:96:d9:3c:a4:9e:bf:
0e:f5:05:27:95:65:c9:b9:8b:14:d9:de:20:ee:00:
7a:58:26:43:f2:26:40:8f:06:ea:b4:b4:23:85:ea:
20:af:36:23:45:b1:f3:f7:47:a2:41:25:64:6a:84:
39:48:9a:a9:a7:f8:0c:f0:4c:27:8b:2f:97:cc:5c:
81:80:21:42:43:71:c2:0e:ad:39:6f:cc:b4:c2:58:
b3:c9:a8:ed:e2:66:02:48:a1:02:3c:4f:cf:af:c9:
2f:c2:03:c9:ac:e3:1a:42:f5:78:8c:3e:8f:85:1d:
53:3d:19:60:28:67:5c:a1:d0:03:c0:6e:98:79:59:
f4:45:40:b5:91:3d:4b:48:57:98:75:9e:77:f3:a3:
1f:b9:9f:15:4a:58:c8:54:fb:c4:ae:b3:a2:ef:52:
b1:c0:2e:18:0f:56:19:8e:33:77:1f:87:09:c3:ab:
a1:c8:dc:bf:9c:bb:45:90:7b:4c:b1:5a:05:99:1d:
07:3a:e2:4c:01:e3:b2:7c:09:76:f2:df:00:33:23:
1d:3a:f7:28:05:39:5a:52:d9:fe:ec:c9:97:88:2d:
d7:ff:bc:5a:8e:83:54:01:ba:d4:dc:d6:df:97:72:
f9:24:e9:8c:78:0b:7c:15:93:b8:b7:6b:03:15:7a:
24:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9E:B3:03:11:76:D6:4C:90:B2:3C:78:9E:9C:9B:4E:B9:C2:CA:4F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6A0A29E5F2B11F1B25DEAA7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.91.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:bc:9f:27:88:3e:39:2e:f1:60:a7:91:11:0d:5c:99:3e:ca:
60:fd:71:eb:86:d9:73:35:0a:ce:d3:6e:ca:5f:5e:23:4d:e6:
e3:57:d2:82:6f:43:0c:68:ef:71:da:85:78:8e:bc:fe:bc:51:
a9:ab:b4:98:38:d7:80:89:c5:06:47:f6:22:b6:7e:f8:9a:51:
8b:cd:3d:62:66:dd:fe:83:17:0d:a2:db:d2:7c:6d:b8:87:10:
a1:7f:91:35:6d:31:a8:67:78:9a:12:cc:2f:22:5e:86:26:ee:
44:10:17:2a:b9:30:40:2e:47:12:ab:44:ac:35:ce:52:65:0b:
ad:04:cf:8d:1b:22:3c:f0:15:98:92:c7:ce:83:1d:51:3c:2d:
3d:79:33:9b:b4:9a:07:41:54:d0:52:e5:d9:b5:a9:9a:15:ae:
14:6f:62:b3:5c:e8:21:33:23:06:53:1f:8f:fb:5a:4d:18:7e:
88:cc:0e:01:d3:51:39:e8:0b:a4:a0:c9:ef:8c:b5:58:29:bf:
00:2f:93:c5:ce:87:65:20:b7:e3:1a:93:68:d3:27:c0:9a:51:
ff:f9:24:64:87:f6:42:2b:35:86:45:a5:5b:4f:8f:2d:6a:0c:
70:3a:d4:b6:b0:7e:f1:ff:dc:cd:bd:30:35:5d:94:99:d7:9b:
b3:d5:a1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:20:11 2026 by rpki-client