Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/139A11346A4611F18C99D7A0CE1D38B0.roa
File: 139A11346A4611F18C99D7A0CE1D38B0.roa (raw, json)
Hash identifier: EhsQdJI80bNx5+5Ev1eylYAUHG97W8oByQ1TB6/nd9Q=
Subject key identifier: 34:B5:41:A6:0C:A1:90:19:C7:C7:DA:86:98:2F:71:62:A1:EF:52:DF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D3BA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/139A11346A4611F18C99D7A0CE1D38B0.roa
Signing time: Wed 17 Jun 2026 12:14:24 +0000
ROA not before: Wed 17 Jun 2026 12:14:18 +0000
ROA not after: Fri 24 Jul 2026 12:14:18 +0000
asID: 61414
IP address blocks: 154.217.248.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119738 (0x1d3ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 17 12:14:18 2026 GMT
Not After : Jul 24 12:14:18 2026 GMT
Subject: CN=6a328fa0-2426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:70:3c:dd:f6:1c:8a:9c:2d:2b:5e:57:cd:5d:
37:c7:44:6d:4d:92:84:ed:78:44:7c:35:89:da:e4:
61:9e:aa:28:a8:b5:7c:11:7e:0a:45:2d:d5:50:e0:
bd:5e:98:bc:f1:98:5f:b0:cc:f3:8b:7f:ac:d3:05:
93:b6:2c:95:60:4b:65:c5:61:09:b8:c0:bd:00:d9:
4c:d2:ac:ee:a1:7e:d8:8d:a5:cb:f4:c4:79:a0:cd:
d3:75:cb:c6:e1:a9:4d:c9:80:a1:e8:f9:69:28:55:
39:21:f9:db:7b:e3:ed:20:f2:3b:5d:c2:60:4b:9c:
ba:e5:be:99:44:43:9b:c2:72:bb:4c:68:d1:38:d5:
82:32:fa:44:26:66:93:f7:92:d7:6e:e2:05:94:87:
b8:d1:f5:fc:e3:64:ed:12:53:f7:5d:a4:60:65:f6:
68:8d:3a:5e:a2:2b:af:67:b4:9f:0d:d5:28:a8:43:
bd:a6:8b:51:bf:f8:c6:0b:4a:a1:2a:a0:45:a4:bc:
10:81:7b:91:d9:59:50:03:de:a2:e9:9f:53:c3:dc:
24:3f:15:46:45:b3:b8:2e:e6:82:11:e7:bd:be:50:
b4:93:96:14:ea:23:c8:5b:fd:a0:d4:bb:78:60:bc:
5d:f2:b0:80:2e:e2:3a:b8:21:ca:cc:c5:da:b9:8d:
32:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:B5:41:A6:0C:A1:90:19:C7:C7:DA:86:98:2F:71:62:A1:EF:52:DF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/139A11346A4611F18C99D7A0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.248.0/21
Signature Algorithm: sha256WithRSAEncryption
03:58:37:fe:66:84:e9:45:37:00:c1:21:b8:8e:8a:56:ab:8d:
5f:4a:b0:cb:9d:24:13:05:bf:f7:58:a1:eb:04:2e:b3:6e:4c:
51:a2:86:85:19:44:c3:94:aa:14:f5:4c:02:e1:98:38:19:9e:
39:f2:b0:32:1a:07:59:6c:a9:df:a9:4d:03:e5:f1:ea:e6:4d:
0f:a5:c1:f6:b9:7c:d6:2d:51:26:86:da:3a:15:a6:08:04:89:
67:cc:23:f6:45:8c:1a:d7:9a:07:67:cd:dc:51:b9:03:5b:e0:
30:31:c0:68:19:52:83:15:ad:fa:ad:93:04:18:32:d5:7e:41:
be:94:31:c1:41:e4:0a:18:74:0b:4f:64:30:10:d4:3a:7e:fd:
f3:3e:8e:2e:8a:c4:88:bd:25:0c:27:2c:08:6c:01:0d:7b:60:
f0:ca:97:f4:28:a2:be:93:0d:62:2d:09:89:2c:d0:6a:b7:f1:
2e:e0:8d:00:1e:c0:9c:a9:53:4a:62:7e:be:c4:9e:df:f3:ec:
6f:2e:c5:5f:63:74:8b:3c:77:86:48:b7:39:b9:90:f1:b7:32:
e9:24:47:38:97:f0:11:3c:4f:b9:2c:eb:f1:50:8a:f9:f9:39:
1b:50:07:d2:7e:34:50:42:1a:67:e2:3d:d2:4c:94:01:06:c1:
f7:ea:e4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:54:00 2026 by rpki-client