Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03207ED451EA11F19154EFF7CE1D38B0.roa
File: 03207ED451EA11F19154EFF7CE1D38B0.roa (raw, json)
Hash identifier: TG8pgkG1CWo5NQ3fpQ8tx0vKjO8K0UuuvT0LZEcfOM0=
Subject key identifier: 30:8D:4F:39:07:32:52:FE:D5:C3:B3:F2:84:79:CE:A4:99:25:F6:0C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CC32
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03207ED451EA11F19154EFF7CE1D38B0.roa
Signing time: Sun 17 May 2026 12:14:54 +0000
ROA not before: Sun 17 May 2026 12:14:50 +0000
ROA not after: Wed 24 Jun 2026 12:14:50 +0000
asID: 61414
IP address blocks: 154.217.248.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 13 Jun 2026 00:07:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117810 (0x1cc32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 17 12:14:50 2026 GMT
Not After : Jun 24 12:14:50 2026 GMT
Subject: CN=6a09b13e-c690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e1:24:d3:8f:86:e3:fd:ba:d1:94:1e:c3:57:
ed:5a:57:f4:42:6b:21:1b:70:1e:15:54:e8:b4:81:
e7:fe:34:15:48:97:5e:47:e3:fa:b3:9a:41:50:a7:
eb:9c:e8:88:aa:9d:02:7e:7d:6a:9b:a6:ae:6d:df:
1a:5c:87:55:91:cd:56:62:5b:3e:3a:5f:74:44:5c:
34:2e:b0:26:72:7a:eb:14:38:68:ec:db:15:5b:39:
89:4e:c3:48:17:2d:48:fc:8d:35:d3:c8:08:4e:01:
b1:bc:70:39:4c:33:68:77:bf:20:09:11:b0:91:d3:
9f:05:b6:f5:f8:8f:33:59:5b:7f:0b:b3:68:10:e1:
16:53:f3:ee:29:4f:6b:62:6e:6f:07:ec:7b:dd:a8:
b6:31:81:93:17:7e:ec:12:28:0b:f4:e4:5d:4a:04:
33:95:51:a0:2f:be:b3:74:5c:b3:5f:fe:94:fb:05:
ac:89:09:d2:56:b5:8b:f9:bc:82:93:7d:2a:42:76:
40:4c:af:d9:3f:00:b2:68:2f:f7:9a:a5:25:4c:6b:
bc:6a:ab:30:f9:24:69:bb:f7:b3:bc:e0:e3:17:98:
df:24:28:7e:de:35:8b:37:a0:15:fc:43:83:16:81:
23:18:75:87:e7:cd:5c:4a:f3:dd:43:20:28:f2:48:
ee:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:8D:4F:39:07:32:52:FE:D5:C3:B3:F2:84:79:CE:A4:99:25:F6:0C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03207ED451EA11F19154EFF7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.248.0/21
Signature Algorithm: sha256WithRSAEncryption
1e:a1:a6:b1:f3:52:3e:44:fc:eb:27:bc:00:6d:29:d9:a3:45:
8c:8c:b8:75:f2:08:b7:f9:86:9b:f6:7b:69:6e:00:1c:d0:be:
6a:44:2e:15:bf:a4:97:a7:10:11:33:ba:4d:15:24:2a:74:32:
8d:04:15:48:ed:7d:85:34:f7:30:88:77:59:92:f9:e1:47:e7:
57:24:b8:79:60:2b:25:6a:ab:df:d8:77:14:9c:03:a6:b1:cb:
68:26:67:d4:41:5b:4c:db:39:6d:5f:9c:6b:18:bc:85:b2:3a:
84:3f:21:aa:5e:28:fb:ab:b4:77:65:c5:23:23:a6:1c:8b:16:
bd:36:64:3f:7a:27:e3:d0:4f:26:8e:9f:80:c3:29:ad:fb:06:
6b:7e:26:6a:73:10:4f:9a:e6:28:1a:de:d1:d2:ad:49:48:29:
64:9a:89:99:d0:98:02:f0:20:86:74:b6:f7:d8:af:53:0f:b6:
f4:92:39:93:47:b6:2b:8f:8e:2c:bf:e3:ff:b7:73:16:8f:2d:
9c:64:14:d6:00:7b:8b:44:9b:cd:60:6e:3f:1c:2c:fb:eb:9a:
a3:3d:27:1c:f9:02:20:3d:af:e2:2c:84:ce:7a:8e:61:40:05:
e4:d2:8d:61:65:82:da:70:63:6a:fa:74:81:3c:14:03:6a:fb:
d6:93:66:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:19:32 2026 by rpki-client