Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10B6DC44543F11F1A00379A8CE1D38B0.roa
File: 10B6DC44543F11F1A00379A8CE1D38B0.roa (raw, json)
Hash identifier: cqYfWwusicYiIS1g400xZgyselb6z94oZAxWJW7mOhw=
Subject key identifier: 8E:76:00:24:FF:E1:C8:93:ED:E7:E3:43:D1:DB:6C:7C:E4:77:06:F9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CCC2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10B6DC44543F11F1A00379A8CE1D38B0.roa
Signing time: Wed 20 May 2026 11:28:47 +0000
ROA not before: Wed 20 May 2026 11:28:42 +0000
ROA not after: Sat 08 Aug 2026 11:28:42 +0000
asID: 150706
IP address blocks: 154.223.168.0/22 maxlen: 24
154.223.176.0/22 maxlen: 24
154.223.180.0/22 maxlen: 24
154.223.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Jun 2026 08:36:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117954 (0x1ccc2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 20 11:28:42 2026 GMT
Not After : Aug 8 11:28:42 2026 GMT
Subject: CN=6a0d9aef-320f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:39:1f:45:5f:52:df:71:9c:9d:02:d0:ab:09:
79:3c:de:1a:41:90:ca:df:41:d5:2c:77:b5:53:38:
aa:92:44:26:86:92:6b:0e:ff:69:34:38:52:60:43:
1b:13:84:68:1d:aa:82:a6:4a:46:67:5d:96:e3:b1:
27:fb:7c:f7:df:f5:a2:ca:a3:bc:b4:77:e8:9b:e4:
f8:bc:4c:81:de:04:55:9f:30:48:14:53:2b:f4:86:
e6:b6:ab:37:1a:d8:34:42:53:a6:14:45:86:10:4d:
57:23:57:33:b4:29:00:55:35:2f:33:d7:e1:4f:99:
56:4d:e9:de:ca:07:bb:fd:fb:51:f8:38:d9:3e:bc:
47:1b:fd:10:15:9f:f1:1a:5b:a2:4d:92:f7:06:f7:
4a:39:8d:2a:29:ff:39:f2:9d:35:ae:33:b4:52:f9:
da:ba:63:91:51:6e:40:67:2e:3a:f0:72:1b:f4:af:
b1:90:43:7d:23:bb:ef:40:ac:9e:c6:ae:f2:a2:24:
55:69:8c:cc:aa:6a:81:ef:52:51:f5:1f:27:3f:77:
89:fb:3d:d8:1d:2a:1d:7d:43:5e:26:1a:bb:04:a5:
e4:b2:a7:e1:2f:0f:97:66:c0:49:20:1a:2a:20:e1:
f0:60:bb:5c:f4:60:fe:c7:06:74:b4:ee:3a:87:1f:
0d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:76:00:24:FF:E1:C8:93:ED:E7:E3:43:D1:DB:6C:7C:E4:77:06:F9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10B6DC44543F11F1A00379A8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.168.0/22
154.223.176.0/21
154.223.188.0/22
Signature Algorithm: sha256WithRSAEncryption
61:6c:58:49:f0:ea:f4:4a:e4:41:03:97:36:24:ab:e2:a2:5c:
bb:b8:df:d4:d7:99:c6:8d:57:e8:ba:ca:9d:8c:46:5f:5e:1d:
43:e2:44:9a:a9:47:b5:e9:96:b1:75:30:2f:a0:75:3a:53:7f:
b6:73:0f:5f:4e:3d:b9:a4:6b:ee:62:c3:22:74:24:d4:c1:95:
2f:2d:79:f0:53:16:c1:4c:15:91:9e:0e:6b:e2:72:8a:97:39:
0c:7a:6c:ad:9a:2d:bb:b5:a4:1d:b8:9f:db:5f:55:ad:34:66:
ac:8e:0f:c9:95:91:ed:b5:78:ac:f6:8c:39:18:b3:c3:53:86:
b0:8c:1f:de:b5:b7:46:3a:f9:d5:af:85:bb:35:a9:33:09:7e:
29:19:3c:f6:dc:8c:cf:0c:3d:20:5c:7f:93:75:77:bd:3d:c9:
50:dd:aa:51:33:06:4a:10:ae:f9:84:8f:11:48:5e:f4:d3:fe:
ca:19:0b:fa:da:8d:16:04:4d:47:c5:cf:6c:a1:f0:9d:60:2c:
67:0d:da:9a:e4:b9:55:f2:68:a1:12:73:0d:b5:d4:22:80:a0:
8c:76:3c:c0:55:76:6a:7c:47:bb:b4:c3:00:5d:00:36:73:29:
9e:e2:c2:1a:67:90:c4:19:c1:1a:f5:91:92:f5:c0:0e:c7:8e:
0f:10:a6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 16:09:02 2026 by rpki-client