Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0529A6D8692811F1A3BFB5C4CE1D38B0.roa
File: 0529A6D8692811F1A3BFB5C4CE1D38B0.roa (raw, json)
Hash identifier: d1Z74k7J8Q+hzjiMhTVIRTisUHAI68Xrx71yXGD5qMY=
Subject key identifier: 67:84:05:20:E9:B5:E2:B9:4F:EA:C4:F0:72:63:A2:02:E8:86:85:69
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D300
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0529A6D8692811F1A3BFB5C4CE1D38B0.roa
Signing time: Tue 16 Jun 2026 02:06:43 +0000
ROA not before: Tue 16 Jun 2026 02:06:39 +0000
ROA not after: Sun 19 Jul 2026 02:06:39 +0000
asID: 11404
IP address blocks: 154.223.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119552 (0x1d300)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 16 02:06:39 2026 GMT
Not After : Jul 19 02:06:39 2026 GMT
Subject: CN=6a30afb3-c4ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:75:b7:fe:f9:33:b1:5a:79:5b:d6:58:4b:ca:
25:88:72:d1:48:f6:b9:fe:79:1c:28:ba:1e:82:56:
2d:48:19:af:d3:09:21:6b:15:71:a1:4a:72:21:19:
49:f9:ac:31:68:7b:d0:d0:19:0c:6d:34:c2:3a:aa:
df:b8:3a:a7:a1:6a:1e:8e:5b:30:65:1d:be:bb:9a:
b6:e2:36:7a:1d:09:6a:f5:73:1e:38:4f:15:58:c4:
e6:cf:60:77:cd:17:d4:4e:86:4b:26:84:f8:94:5a:
a7:34:d2:9e:96:6e:b9:fe:20:5e:28:d4:71:33:e0:
97:9b:03:60:30:0c:b4:d8:b4:16:8a:aa:cf:f5:1d:
f6:d8:8a:45:42:14:f0:58:c2:fc:1f:61:e5:96:d4:
54:bc:7c:43:0c:75:f8:78:88:e7:50:1c:e7:33:8f:
25:96:69:a8:da:da:fe:d6:5a:b1:06:49:69:1e:85:
00:f6:26:6a:a2:f1:d9:52:4c:56:5b:2f:f2:31:73:
3b:5a:6a:9c:e0:83:f0:5f:2e:b8:46:fa:6b:be:08:
78:59:72:de:09:a9:cf:d7:3b:35:d3:6e:05:c5:ac:
d4:21:c5:1e:f3:c6:65:76:51:b6:fd:80:68:8f:55:
01:3d:c6:80:98:41:99:2e:4f:1b:ed:0e:7b:0e:c6:
68:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:84:05:20:E9:B5:E2:B9:4F:EA:C4:F0:72:63:A2:02:E8:86:85:69
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0529A6D8692811F1A3BFB5C4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.96.0/19
Signature Algorithm: sha256WithRSAEncryption
5f:52:db:4e:3d:b2:b8:85:0e:17:4a:0d:0b:e4:7b:fe:d4:37:
e5:cd:3c:dc:b1:69:16:a2:e4:52:32:6b:94:1b:8e:83:c8:77:
c5:86:6e:d4:f0:a0:74:94:6e:6d:33:1e:d5:3c:0a:6c:9b:06:
e6:cc:6f:90:0e:db:ff:d2:cb:52:9f:28:0f:1d:f7:ea:c3:cb:
7e:7e:ee:a2:54:21:da:86:ac:7e:03:3b:55:55:f7:8a:39:e7:
be:97:76:b1:86:de:0f:88:4e:d7:d8:4c:6c:1e:27:e1:15:2e:
ab:73:bd:2d:a0:81:41:25:fc:c4:d8:71:10:a4:33:4f:c0:8f:
d9:0c:4e:d8:0a:f4:80:67:ba:b6:16:de:90:ef:b3:8c:e2:1b:
5c:81:90:0d:ba:99:5a:67:b3:1f:0b:1c:be:53:19:51:c0:69:
7f:e5:87:d2:52:23:a0:c6:8d:b9:f2:81:62:57:ef:68:0f:55:
47:51:db:8b:54:26:00:1a:35:6e:3d:72:20:29:5a:28:2a:e1:
95:73:95:d8:91:7e:39:a4:d9:27:28:fe:9f:fa:b5:cc:95:92:
4d:ff:8a:5c:9e:6d:9b:1f:cc:6d:be:5d:fb:a9:c1:ca:55:ce:
b0:51:17:1a:d8:19:02:f4:37:56:6d:0b:db:7d:a9:1f:87:c1:
ff:25:bc:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:51:35 2026 by rpki-client