Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/169B21E4544211F1A7D61CB9CE1D38B0.roa
File: 169B21E4544211F1A7D61CB9CE1D38B0.roa (raw, json)
Hash identifier: zRBbSzYrQeZLigSqeuM5B2khRdIpzoBk4wjmgnGpTsw=
Subject key identifier: 48:B8:69:C2:1D:31:57:61:D4:16:16:53:DC:FA:D6:BE:A9:9E:37:F9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CCC4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/169B21E4544211F1A7D61CB9CE1D38B0.roa
Signing time: Wed 20 May 2026 11:50:25 +0000
ROA not before: Wed 20 May 2026 11:50:20 +0000
ROA not after: Sun 14 Jun 2026 11:50:20 +0000
asID: 147176
IP address blocks: 154.197.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 12 Jun 2026 00:07:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117956 (0x1ccc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 20 11:50:20 2026 GMT
Not After : Jun 14 11:50:20 2026 GMT
Subject: CN=6a0da001-6545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1d:f0:3d:88:a5:20:9f:13:12:8a:8e:23:b5:
37:ae:30:6f:3e:5b:f8:34:91:03:84:20:30:c2:3a:
3a:a3:5f:0e:fa:60:96:a4:a9:48:10:fa:20:15:2a:
cc:ad:10:3b:73:ad:e1:f8:23:02:32:20:9b:c6:fd:
b5:9d:d0:bc:b1:96:85:81:e6:cc:4b:48:c7:24:c6:
f9:90:61:72:9d:fa:16:79:a7:73:b9:a6:28:61:7c:
67:ec:a8:60:ec:78:31:20:47:8e:55:dc:cf:a6:50:
f6:b5:82:35:ac:9e:29:51:51:ad:d2:d9:fb:40:10:
ff:49:b2:2a:99:16:58:61:ed:a8:a1:4e:61:89:c8:
da:dc:e7:9d:d3:67:a2:ba:fd:f0:50:3c:94:ee:aa:
10:ba:35:76:f1:6a:f4:bb:ec:cb:35:39:66:44:dd:
4f:ca:63:b1:a3:eb:c6:2b:11:dd:73:2c:0e:4b:fb:
1c:82:ab:b4:28:84:7f:08:73:b0:08:76:4f:a9:2e:
7d:3f:db:83:98:3c:3a:cf:2d:31:3e:ff:4d:81:86:
f2:0c:e8:2a:80:6a:1f:24:34:0e:c3:8b:9b:09:ca:
9e:38:c3:f8:6f:fd:21:24:8a:c9:46:32:35:7f:da:
00:8a:6b:80:09:41:6a:f4:5e:e9:d5:14:66:cd:57:
2f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B8:69:C2:1D:31:57:61:D4:16:16:53:DC:FA:D6:BE:A9:9E:37:F9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/169B21E4544211F1A7D61CB9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.102.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:2a:40:c5:04:bb:d0:34:b9:6b:56:02:56:a9:2a:43:b6:49:
7c:af:32:14:35:16:b0:6e:7f:65:61:a3:03:0b:d6:1a:30:9e:
54:77:09:9f:1b:61:26:f1:e0:fb:db:16:c3:61:78:19:4a:2b:
39:b9:30:83:67:4a:ca:c7:f2:ab:8f:fe:13:4c:71:76:db:7f:
98:06:13:25:05:df:2e:ff:4a:2a:0c:f0:2e:48:22:73:49:39:
7d:53:8c:99:68:1b:ab:d8:b6:f4:c6:4c:99:65:d7:e3:42:c5:
ef:38:6c:31:82:58:9d:a3:00:74:af:2f:66:da:37:62:40:56:
28:c1:cd:6b:61:bd:57:85:bb:86:5a:07:da:16:bb:42:02:da:
ed:0b:8e:b7:3c:d1:65:19:04:39:1e:e3:40:5d:98:e5:72:7b:
bf:bd:79:9c:57:a9:d4:0c:b6:bd:50:57:ce:76:f9:07:35:65:
75:aa:ba:32:bd:cf:71:9e:ba:08:bd:01:9b:09:93:20:2c:90:
81:6d:3e:a8:a5:af:91:4e:18:9b:b5:07:dc:ab:ca:0f:e4:64:
9e:d7:f7:9b:cc:b0:03:f4:44:3f:36:60:3a:3c:95:c9:55:bb:
74:e5:3d:db:da:4b:69:53:f6:c4:2d:f2:29:8d:78:91:e7:33:
c8:7f:88:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 10 04:58:41 2026 by rpki-client