Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19561BD256C711F1838E6118CF1D38B0.roa
File: 19561BD256C711F1838E6118CF1D38B0.roa (raw, json)
Hash identifier: Z84huAS3DhLmuzgpkQ0kW78ol8WcjOovwfZHsyQXEys=
Subject key identifier: B6:13:58:42:0B:5C:9F:68:E9:1E:5E:60:E0:A3:13:58:C0:D3:BE:2D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CE84
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19561BD256C711F1838E6118CF1D38B0.roa
Signing time: Sat 23 May 2026 16:47:35 +0000
ROA not before: Sat 23 May 2026 16:47:30 +0000
ROA not after: Fri 26 Jun 2026 16:47:30 +0000
asID: 55320
IP address blocks: 154.93.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118404 (0x1ce84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 23 16:47:30 2026 GMT
Not After : Jun 26 16:47:30 2026 GMT
Subject: CN=6a11da27-3560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ca:f2:58:8f:f0:01:11:96:e5:18:05:1c:4a:
66:99:d8:b8:9f:73:e0:b3:a9:fe:40:cf:28:64:aa:
f0:6d:bd:4f:1e:cc:1f:80:1d:44:f2:f8:8d:dc:4f:
5c:20:00:48:4b:c8:61:f0:d7:c6:c6:a1:f6:dc:8e:
17:ad:f5:e1:70:58:83:cb:17:20:e5:04:6a:90:a7:
0e:8b:01:2b:84:21:d2:ad:70:d9:ed:3b:b1:26:0f:
d6:88:a6:e0:42:d9:d4:19:50:8b:a8:ec:18:31:1e:
fe:19:6b:28:60:5f:e6:2b:03:05:0c:40:9b:29:d7:
2e:f5:03:d7:37:2f:81:c7:34:a0:11:d4:1c:b0:43:
f8:d8:d0:43:17:2d:22:c0:9a:8e:e4:fd:1b:d9:21:
b2:0d:15:34:93:89:50:ad:c4:4f:54:c9:82:12:51:
fb:a9:fb:60:8d:5d:50:79:14:6d:4e:59:0b:a7:36:
4c:73:df:fb:e0:a0:1a:f3:11:ed:fc:a5:62:a6:15:
b8:b4:08:62:6c:18:31:90:0e:81:b1:8e:01:cc:28:
21:eb:3c:13:67:48:5f:69:ba:75:c1:f2:76:a3:48:
69:a4:30:a0:41:0a:a0:bf:35:ba:2e:da:0c:ac:2d:
a8:f0:9d:e0:f6:6e:e9:f0:14:c9:ce:38:3e:e3:52:
97:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:13:58:42:0B:5C:9F:68:E9:1E:5E:60:E0:A3:13:58:C0:D3:BE:2D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/19561BD256C711F1838E6118CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.98.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:27:e2:cb:70:ae:aa:f4:97:23:82:fb:16:ef:54:e9:ba:67:
c1:4d:61:39:4a:e5:9e:40:1c:e6:02:ab:ba:d2:8f:8b:65:b9:
f3:e2:be:e8:4d:23:a4:11:7d:ac:6a:c0:c3:17:9a:cd:bf:85:
7a:bd:6d:f8:d0:1f:9d:71:d8:8a:11:49:a0:12:37:d8:89:60:
19:ee:b7:99:bf:cc:2c:0b:4d:7d:66:65:1d:97:11:30:d4:49:
a2:9d:7a:04:4d:62:18:34:61:d7:28:45:52:0b:fb:5c:d4:d1:
b3:10:e2:d5:66:c1:e9:8b:76:3f:68:af:4e:b9:4d:12:bf:18:
3e:54:82:93:2e:e0:ef:b0:93:1d:38:fc:ec:a8:35:5c:a3:85:
0e:8b:4f:bf:85:d9:80:7f:0b:d5:95:6e:5d:7b:b4:5b:13:67:
49:6e:f3:57:6b:43:57:80:86:ab:db:d5:3b:be:a4:95:f1:26:
fa:a4:2a:5c:2a:a4:04:41:17:1c:b7:13:63:3a:b8:a2:b2:fe:
f4:80:95:6d:14:1e:76:1d:18:1a:be:a1:e6:27:a8:6c:e4:25:
7d:a2:62:28:8d:23:89:bd:3a:aa:db:de:36:e7:21:bb:7f:5d:
d4:48:b9:9c:ce:f9:29:8f:4f:6c:23:dc:83:86:60:dd:2b:08:
64:f9:ce:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:00:57 2026 by rpki-client