Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15AD44906F0111F1BC4373A4CE1D38B0.roa
File: 15AD44906F0111F1BC4373A4CE1D38B0.roa (raw, json)
Hash identifier: Ig0rFcrLrDVsOYasV+RMbaB7hD9KaAEAz9QADlC8mIY=
Subject key identifier: 84:34:D2:02:3B:D5:92:05:A8:AA:54:71:7A:F8:8E:E0:B9:9A:A1:55
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D4A6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15AD44906F0111F1BC4373A4CE1D38B0.roa
Signing time: Tue 23 Jun 2026 12:43:08 +0000
ROA not before: Tue 23 Jun 2026 12:43:03 +0000
ROA not after: Sun 09 Aug 2026 12:43:03 +0000
asID: 401783
IP address blocks: 154.83.10.0/24 maxlen: 24
154.83.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119974 (0x1d4a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 23 12:43:03 2026 GMT
Not After : Aug 9 12:43:03 2026 GMT
Subject: CN=6a3a7f5c-a772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a4:8c:cf:66:23:90:a8:e6:37:9a:04:a4:5e:
33:88:43:99:88:87:35:8d:71:41:98:f8:11:68:a6:
71:3c:dc:89:a4:b5:6e:83:e0:c9:b2:91:0a:5f:13:
5c:6b:9a:c9:96:9c:76:00:ce:b2:46:ee:d3:89:fd:
8c:b0:24:f3:29:e8:cd:64:7a:63:54:5f:c7:28:a2:
ec:49:ce:b9:db:a1:91:e5:24:fe:75:08:f5:98:a3:
cf:67:80:65:84:e2:0e:a5:4b:26:06:cc:c1:23:8a:
35:dd:c1:02:68:f6:77:54:83:24:21:e9:41:26:2e:
45:85:ad:b6:4c:53:d4:f3:37:dc:0a:2c:18:93:5f:
5e:08:e2:68:04:27:32:4e:6c:26:b5:36:7e:08:9c:
8f:c2:c3:76:94:f0:60:26:63:68:4b:ce:44:ea:cc:
ca:04:84:d2:61:77:17:5d:7a:dc:a5:23:06:12:a4:
4c:3c:1f:3b:f7:75:75:fb:56:bb:da:f3:cc:76:e9:
fa:f1:32:40:3d:97:4a:fa:ea:e4:45:07:e1:70:4e:
3a:15:de:02:c9:6a:0f:09:09:de:e7:18:de:9b:9b:
ee:e8:9a:33:bb:54:7d:41:e8:83:be:2b:f4:6a:6e:
69:89:9a:f2:7f:ce:93:cf:48:04:87:8e:a6:61:f9:
23:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:34:D2:02:3B:D5:92:05:A8:AA:54:71:7A:F8:8E:E0:B9:9A:A1:55
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/15AD44906F0111F1BC4373A4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.10.0/24
154.83.24.0/24
Signature Algorithm: sha256WithRSAEncryption
78:36:48:8f:54:4a:59:83:c6:5e:33:fd:d5:39:fc:8a:4a:cb:
bf:ef:c2:5e:6d:f8:84:13:0a:58:10:c7:eb:41:54:bb:6d:26:
9c:a3:41:31:1d:d0:f3:2e:d0:b8:7f:d9:31:8d:0e:6a:84:37:
36:71:14:c4:fb:2d:99:16:e1:29:d3:58:3d:0b:3b:15:23:8b:
d6:ce:a4:f7:52:5d:eb:8a:37:c1:71:33:56:b3:16:cc:89:62:
b7:52:1a:cb:4a:09:98:dc:7c:af:28:19:11:c9:c8:76:4c:15:
6e:a5:ae:eb:36:4a:13:ca:63:e5:7d:41:9d:7f:92:d6:44:7e:
1a:4a:5d:89:3e:73:f4:90:36:4a:1f:2d:e4:b4:55:34:4f:da:
52:75:70:37:56:66:d0:29:29:85:89:59:b0:a8:54:a2:80:b9:
89:60:85:b0:d7:26:85:83:f7:b2:ad:9b:0a:b0:c7:57:42:f3:
4e:f9:2b:af:0c:44:45:0c:ff:77:d1:93:32:34:4c:ed:93:77:
97:11:30:fd:19:77:ed:11:1b:d5:6f:5d:14:90:5b:b8:3d:f6:
da:e1:39:43:24:87:7b:ce:0c:96:de:93:e1:ad:1d:9a:35:17:
c1:e2:bf:9c:9c:b3:9f:04:f5:79:12:53:65:bb:8a:37:98:3f:
a2:39:ff:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:53:29 2026 by rpki-client