Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08BDD24E567A11F19DBC28CFCE1D38B0.roa
File: 08BDD24E567A11F19DBC28CFCE1D38B0.roa (raw, json)
Hash identifier: natpT2Bmm0UbeA8HBQ+xDJAUkHRqhmbX/hriigOPeEY=
Subject key identifier: 0A:05:18:F1:C5:9C:B5:8E:C6:CB:12:00:7C:7D:2F:EA:79:BE:8B:45
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CE69
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08BDD24E567A11F19DBC28CFCE1D38B0.roa
Signing time: Sat 23 May 2026 07:35:56 +0000
ROA not before: Sat 23 May 2026 07:35:51 +0000
ROA not after: Mon 06 Jul 2026 07:35:51 +0000
asID: 204548
IP address blocks: 154.222.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 13 Jun 2026 15:58:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118377 (0x1ce69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 23 07:35:51 2026 GMT
Not After : Jul 6 07:35:51 2026 GMT
Subject: CN=6a1158dc-9f1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:56:5f:79:11:24:d8:5b:e9:58:25:3c:e6:c7:
68:7c:06:62:27:85:96:2e:2b:f5:d5:11:d2:d9:d2:
be:bf:9f:71:1b:74:9b:7a:09:3e:12:48:e0:df:83:
d1:8f:31:1d:bf:51:59:b5:68:ee:60:7b:33:8a:37:
6f:f6:82:f0:1a:ff:9b:ea:2e:b1:25:c8:3f:4e:16:
69:e3:77:59:aa:74:17:0a:f0:be:db:88:28:19:68:
48:30:38:17:bd:03:ca:f5:9b:7d:13:90:eb:f5:c2:
74:06:aa:33:35:a7:10:cb:0a:1d:73:00:a0:dd:e3:
b0:4f:ec:13:20:16:87:ff:53:c0:29:88:07:dd:cf:
5d:be:71:26:65:93:33:4a:59:7f:1d:7d:3e:58:c6:
a6:54:ba:b4:cc:03:fb:ad:33:5a:9a:56:27:bd:79:
f8:ec:e2:aa:88:0c:a2:6b:06:87:00:b4:49:d0:0e:
c4:b1:20:aa:e4:7b:3d:f1:c9:b6:88:80:2c:af:ba:
ce:c2:af:80:fb:30:6a:66:85:c7:39:a9:b6:e5:3a:
f7:3d:a7:b5:41:87:2c:d0:a9:30:dc:25:ea:27:70:
90:58:0b:07:5a:fa:d3:4e:2c:1b:5b:66:78:0f:a5:
9e:00:84:e5:e9:a1:0f:ee:c9:a4:fa:50:a6:a6:ed:
42:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:05:18:F1:C5:9C:B5:8E:C6:CB:12:00:7C:7D:2F:EA:79:BE:8B:45
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08BDD24E567A11F19DBC28CFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.133.0/24
Signature Algorithm: sha256WithRSAEncryption
21:5a:7e:60:da:a6:41:f2:a0:b5:2d:56:33:b1:d1:4d:74:1b:
9c:9d:7d:e5:7f:ed:50:10:b1:1f:d9:e2:13:82:8a:11:74:83:
85:f2:72:32:e3:d4:ca:99:e4:7a:26:1a:f6:c6:69:ae:26:38:
7c:78:3d:b3:77:de:03:0b:bc:a1:ff:11:94:89:84:eb:cd:11:
2a:80:ae:a4:ba:78:21:88:b7:55:ef:b2:cb:5e:3f:f3:cb:e8:
a5:61:bb:bc:b8:16:53:97:09:a8:31:c9:03:1e:05:c3:ea:29:
f5:01:81:00:44:f3:bf:aa:ea:e0:4a:16:61:a5:2a:9a:00:b8:
10:37:b1:09:12:fe:47:80:45:e4:90:16:a6:08:e1:a3:81:9a:
f0:71:74:a5:ea:e2:3a:80:95:73:29:53:33:31:13:ed:d9:2c:
99:1e:c5:c7:ec:a1:77:d2:f8:59:97:64:3c:ef:95:86:a6:98:
05:fe:ac:b0:69:e6:78:2c:1d:5b:4c:42:95:1d:e9:d8:e6:49:
2e:57:24:bc:d5:4f:4e:0f:bb:7e:09:d7:b5:75:69:76:47:09:
71:d3:57:c2:48:bd:5a:55:63:27:11:9c:c2:0f:0e:44:58:5e:
40:9e:bc:42:10:d7:cc:cd:24:34:af:83:5d:88:0c:57:5c:ed:
40:3a:f4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:46 2026 by rpki-client