Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16B318345F2911F19768E715CF1D38B0.roa
File: 16B318345F2911F19768E715CF1D38B0.roa (raw, json)
Hash identifier: 3QiP4LlgW4hpOMC0gSqTsgvVU7NP2uFedKyr/KhD368=
Subject key identifier: 5D:A2:06:77:C6:FE:8F:B3:DE:77:23:BE:2D:8B:01:06:E0:07:50:C6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D16F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16B318345F2911F19768E715CF1D38B0.roa
Signing time: Wed 03 Jun 2026 08:49:11 +0000
ROA not before: Wed 03 Jun 2026 08:49:06 +0000
ROA not after: Wed 05 Aug 2026 08:49:06 +0000
asID: 9294
IP address blocks: 154.88.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 13 Jun 2026 00:07:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119151 (0x1d16f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 3 08:49:06 2026 GMT
Not After : Aug 5 08:49:06 2026 GMT
Subject: CN=6a1fea87-13cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:18:25:22:a5:dc:27:c0:97:f9:09:e3:cc:45:
86:b7:03:28:da:02:cf:dd:fd:3b:67:f5:28:11:0b:
6e:a6:a9:35:23:a1:f3:60:8f:e7:23:c6:09:55:18:
3c:f7:20:82:58:ff:5a:53:11:be:a7:fa:6a:2b:96:
16:af:fd:bc:53:bd:19:85:5a:98:c8:06:ed:28:00:
2e:5a:c6:2c:9a:48:58:ca:99:c9:60:ef:22:f3:ff:
bf:e6:dc:20:e9:85:e4:70:6b:75:05:6d:25:5f:be:
f5:88:72:6b:49:2c:ad:e3:ca:1c:f6:6a:9b:67:45:
07:f2:69:9f:1f:d1:ab:70:0f:de:7e:47:39:f9:9a:
29:94:ae:7d:46:6d:fe:3a:69:19:ce:58:19:76:94:
7b:ef:ed:66:67:c3:59:3e:42:b1:6c:e4:90:8e:ef:
18:75:07:b0:10:be:95:eb:26:a2:c4:d3:a8:c7:02:
2d:6a:fe:b0:c9:0f:36:90:c8:ca:f6:c5:10:a2:7e:
00:00:54:ce:64:4e:6f:f5:34:dd:a7:7e:6c:c1:1b:
f9:f7:a8:6d:d5:db:c3:99:7a:fe:7d:d5:ec:08:a1:
8e:02:fc:40:ea:25:49:fd:dc:49:02:cd:c2:c4:0d:
76:f8:91:09:f5:24:52:e0:49:19:9d:da:2c:28:b3:
6b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:A2:06:77:C6:FE:8F:B3:DE:77:23:BE:2D:8B:01:06:E0:07:50:C6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/16B318345F2911F19768E715CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.96.0/19
Signature Algorithm: sha256WithRSAEncryption
8b:79:e3:75:5e:c3:ab:e4:cb:5b:9f:a8:08:b2:33:21:24:5d:
79:41:0e:60:3a:53:3b:5b:49:3a:30:57:3b:9b:47:0d:6e:e1:
96:4c:75:d7:66:d9:9a:6f:51:b4:c0:24:ee:8a:7e:0e:0a:fa:
93:3f:55:d9:00:bb:ec:7b:1f:95:7d:ed:20:c7:6d:42:4a:04:
27:13:35:19:ce:99:ae:e1:c4:e4:2d:d5:ea:3a:23:6c:9b:21:
79:f9:aa:7b:89:e3:06:22:74:e8:32:e8:98:5d:f0:07:6c:29:
65:9c:65:4f:7b:5a:04:48:16:5d:17:25:6d:ed:e9:f9:04:09:
0d:84:bd:0e:df:19:69:76:e0:f1:5f:e5:ff:69:c3:da:8c:0e:
07:92:66:dc:7a:9b:6b:72:cc:64:bc:e9:d9:50:a7:fd:55:a8:
b2:61:e8:df:5a:46:10:38:82:05:b3:03:73:27:bc:86:f3:3f:
3c:a3:e5:6a:90:96:8f:fe:29:6d:fc:2f:c0:e3:6e:58:29:98:
65:3a:7a:89:40:6d:da:2f:16:33:5c:14:87:75:e5:c4:e2:5f:
5b:90:80:ea:d9:d4:41:8b:cd:d7:04:ee:4e:fe:5a:74:f2:89:
84:68:81:07:5f:49:ec:d9:1f:4e:e0:be:70:99:7d:ee:77:ab:
5c:63:c9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:49:19 2026 by rpki-client