Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE7B0022619111F19D35EFBDCE1D38B0.roa
File: FE7B0022619111F19D35EFBDCE1D38B0.roa (raw, json)
Hash identifier: tKYlhEu+lDZJreX/Qav7M4ChNE12r3kZiVb0N7NcMIk=
Subject key identifier: 0D:2B:D7:04:78:8E:00:95:D4:56:D6:0C:F8:D2:14:CA:FE:0A:AF:D9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D220
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE7B0022619111F19D35EFBDCE1D38B0.roa
Signing time: Sat 06 Jun 2026 10:25:09 +0000
ROA not before: Sat 06 Jun 2026 10:25:03 +0000
ROA not after: Wed 06 Jun 2029 10:25:03 +0000
asID: 17561
IP address blocks: 154.200.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119328 (0x1d220)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 6 10:25:03 2026 GMT
Not After : Jun 6 10:25:03 2029 GMT
Subject: CN=6a23f585-3efe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0a:4f:7a:54:07:8f:23:c3:f9:87:93:e4:f4:
7a:81:30:4f:26:e0:63:20:ff:e6:70:be:1c:00:98:
1c:03:b4:06:40:d7:bc:ca:e4:d6:f8:01:7c:99:62:
6e:77:f7:05:63:11:2a:b2:35:d0:e7:18:9f:92:0b:
ad:21:9d:54:60:f5:86:1e:05:40:e2:61:9a:c3:ff:
34:a8:f2:44:c2:80:3a:ef:e3:86:46:b9:47:f0:02:
9e:c6:0a:d1:4c:98:61:35:c4:59:dc:35:30:c7:09:
47:b0:11:57:36:60:ec:0b:53:98:b6:67:f1:42:b0:
19:d0:bb:4c:d6:d5:a0:4c:87:a8:44:14:5b:e4:dd:
38:30:cf:98:91:e0:95:76:36:cf:2d:93:b5:12:cb:
57:b0:e4:b7:d0:19:ae:a3:52:07:e0:82:44:94:b9:
cc:bb:31:ba:10:f8:da:f2:4a:b8:8a:e0:0f:a9:9e:
88:7e:5f:3a:6c:44:99:73:4f:95:db:32:c5:3b:47:
d9:06:9b:44:b8:b1:f5:f4:5c:5e:c1:32:de:86:93:
ba:be:c2:62:13:f6:50:d0:27:a9:bd:3b:29:fc:3e:
80:56:dc:de:6d:7b:4e:97:7b:fd:f5:6e:ca:87:c8:
b1:2b:02:42:89:86:af:4f:c1:79:0f:45:ee:51:23:
d4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:2B:D7:04:78:8E:00:95:D4:56:D6:0C:F8:D2:14:CA:FE:0A:AF:D9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE7B0022619111F19D35EFBDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.27.0/24
Signature Algorithm: sha256WithRSAEncryption
35:0d:83:21:37:99:e0:51:cf:c8:d1:c5:40:4e:5e:9c:f6:59:
25:4a:46:99:8e:c8:ec:8a:1e:00:8a:6f:af:d2:b2:0d:90:e9:
84:e2:36:a2:7d:78:2c:25:06:95:99:33:fd:9d:10:17:85:4f:
bc:7f:66:ee:05:c6:fc:9a:b8:bd:a0:34:ef:38:0f:0c:ce:a4:
74:e4:b2:89:1f:e5:36:f6:98:f9:c4:b3:46:13:05:c4:3d:51:
0e:51:84:e0:8e:1a:2f:c0:0e:30:e9:f0:5d:f0:e8:0e:84:c7:
c3:38:5c:99:04:80:4d:dc:95:2d:0a:e8:e7:4b:de:d8:4d:56:
32:34:f3:b9:9c:fa:5c:d8:3a:ba:fc:1a:c3:ef:2a:e0:f9:24:
a0:fc:64:e4:39:5f:70:67:13:82:3a:83:5a:15:57:f1:05:94:
88:d3:91:df:9f:42:81:37:2d:4c:a1:7e:08:ed:48:57:70:81:
54:9a:b3:31:3f:ed:0d:f4:93:e5:77:7d:fe:60:99:11:37:4c:
7d:29:7f:62:31:d9:37:43:e9:0a:bc:7d:b3:7a:bc:c3:bd:7c:
1e:88:4c:c1:a4:d2:ed:a6:de:21:a1:92:cb:4e:55:c7:57:b8:
84:d5:c0:4f:86:15:23:c6:04:9b:67:51:d8:e5:70:06:f6:09:
6b:54:93:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:54:38 2026 by rpki-client