Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9436FB4618C11F1BB4450A0CE1D38B0.roa
File: E9436FB4618C11F1BB4450A0CE1D38B0.roa (raw, json)
Hash identifier: x3FpJkpPiUKVMZvPeph7FLCQbiECKPvKyHxwTzMFZDY=
Subject key identifier: 31:5F:77:5E:58:5A:C8:67:67:42:D9:82:2E:07:F6:BE:39:4B:46:BE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D212
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9436FB4618C11F1BB4450A0CE1D38B0.roa
Signing time: Sat 06 Jun 2026 09:48:46 +0000
ROA not before: Sat 06 Jun 2026 09:48:42 +0000
ROA not after: Mon 13 Jul 2026 09:48:42 +0000
asID: 206675
IP address blocks: 154.92.10.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119314 (0x1d212)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 6 09:48:42 2026 GMT
Not After : Jul 13 09:48:42 2026 GMT
Subject: CN=6a23ecfe-a0a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ec:e4:62:fe:60:95:91:e5:f7:6a:8a:13:4c:
f4:a8:b5:ba:e3:e3:df:33:be:8a:13:f1:f9:8a:30:
2c:bf:32:74:82:25:3b:d3:ec:9a:b2:e2:89:d7:ba:
80:57:a9:fd:a3:68:38:70:29:56:e6:43:82:68:10:
ae:e1:21:7c:e2:49:cd:61:48:4f:6f:24:f6:a9:ce:
6a:c5:31:fb:f1:ec:86:bd:4e:ae:5d:0b:3f:de:a5:
53:8b:cf:9c:f0:13:fd:b0:5b:2a:c4:c1:5a:7a:5c:
4f:7e:d3:25:84:4a:a9:8e:8a:ad:f4:d7:f9:cf:15:
46:1a:5e:2c:19:39:23:0b:77:a2:f1:3d:34:58:e6:
8a:83:76:bd:26:79:5d:17:c0:36:ff:f1:6e:df:05:
96:40:c7:2c:2e:d8:7d:a6:67:13:f9:c4:ae:55:8a:
00:2b:54:e2:bd:46:20:98:58:b6:09:f6:8f:c5:b8:
4d:1c:3e:e8:d8:40:84:5f:ee:4d:24:e0:43:98:f9:
a7:33:4e:af:bf:05:9d:25:ab:17:a9:12:cc:07:47:
b8:c2:fa:c2:a5:e9:7f:24:36:95:74:6e:7a:cc:fc:
c3:64:3c:21:73:73:c1:41:0a:de:e3:be:f4:97:7a:
70:6e:45:6b:3b:8d:c5:78:1c:23:72:5d:62:b3:8e:
36:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:5F:77:5E:58:5A:C8:67:67:42:D9:82:2E:07:F6:BE:39:4B:46:BE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9436FB4618C11F1BB4450A0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.10.0/23
Signature Algorithm: sha256WithRSAEncryption
cd:1e:3e:e3:a8:f6:f6:ca:70:f8:46:b1:c7:b0:7f:3b:b6:ac:
44:4f:3f:9e:4e:8d:2d:cb:ab:42:85:17:c8:55:e3:fd:dc:48:
ad:33:3b:84:2f:ea:a0:04:04:9d:6b:9a:67:14:c3:2f:ac:5b:
4b:c6:72:b0:f6:59:b7:57:5a:e5:15:22:fd:a9:bc:9b:7d:8d:
fc:00:83:d1:eb:ea:f3:41:c4:2b:c8:9b:8d:5e:2d:30:20:60:
f9:60:a5:0d:9b:bb:45:54:ea:5e:18:c1:96:73:6f:ee:b2:e5:
27:65:cc:46:82:cf:86:31:11:fa:15:6d:c3:bc:c9:66:aa:53:
18:87:74:0d:60:6b:1d:21:5a:00:18:d0:a7:c4:63:3c:fe:82:
77:57:7a:1b:2d:c5:52:84:5d:83:c4:e8:03:09:b2:85:43:62:
61:2c:05:f2:f1:1a:25:8e:88:1b:0c:94:56:64:83:8a:e0:7c:
74:66:4f:5c:83:f6:f2:35:95:af:c3:dd:1b:26:0e:28:9b:cf:
79:27:86:04:fe:bb:3b:5a:58:1e:b9:f1:db:c9:27:c5:86:72:
8e:9f:fd:bd:2e:2d:c9:06:ba:2a:cb:ab:c0:b4:99:a2:14:22:
30:bd:9b:7b:5f:61:19:fa:aa:65:ed:56:a8:a9:08:fb:ce:cc:
df:57:02:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:20:21 2026 by rpki-client