Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B9AEAC468C611F1BFCDAFF7CE1D38B0.roa
File: 1B9AEAC468C611F1BFCDAFF7CE1D38B0.roa (raw, json)
Hash identifier: OR2EtowG3+XuBLbgc0BUFNLfLMyPsGt1RqBmq9An3ag=
Subject key identifier: E4:E9:76:56:55:1D:B8:BA:A8:93:82:BF:78:1B:E3:88:07:90:41:9D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D2D9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B9AEAC468C611F1BFCDAFF7CE1D38B0.roa
Signing time: Mon 15 Jun 2026 14:25:50 +0000
ROA not before: Mon 15 Jun 2026 14:25:46 +0000
ROA not after: Fri 10 Jul 2026 14:25:46 +0000
asID: 32167
IP address blocks: 154.83.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119513 (0x1d2d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 15 14:25:46 2026 GMT
Not After : Jul 10 14:25:46 2026 GMT
Subject: CN=6a300b6e-9f89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e4:90:fc:48:c8:f6:a9:3f:a1:9e:ce:3e:e4:
c7:fb:51:c6:73:ed:d7:02:30:23:7e:9a:cd:8d:73:
09:9b:26:54:a9:fb:3d:62:3c:ce:d1:18:a1:05:9a:
91:fd:0d:33:be:b2:45:47:72:f7:7b:24:6f:fb:bd:
e4:1e:c1:ce:27:05:df:03:24:61:80:9e:f5:9e:52:
c4:fd:bf:4d:70:ea:ca:21:56:7d:02:69:4c:f7:55:
f5:4b:ce:56:7f:1a:98:f9:7d:5d:82:c0:74:aa:05:
69:12:c0:58:4a:05:19:c7:e6:18:c3:18:1c:e5:14:
55:5c:24:37:32:a1:a4:67:6a:0e:cf:ce:8c:6c:a7:
0c:43:77:1f:20:5a:c8:2d:3c:a6:78:c3:a8:0c:76:
06:40:d4:dd:4f:64:22:70:a8:84:4e:11:87:52:bc:
60:eb:7e:9a:aa:59:85:02:03:4f:be:29:ce:55:bb:
42:03:2a:e2:c8:30:05:20:fe:87:77:45:51:a5:d1:
de:71:aa:1e:38:f3:69:95:fb:be:00:60:c3:36:f8:
cc:0b:1c:ee:fb:75:32:12:2b:19:ee:e1:78:c5:8c:
60:4b:96:53:50:9a:77:71:f7:a0:77:ee:29:0b:78:
92:96:10:08:f4:9c:71:da:83:29:dd:92:0d:2b:e4:
cf:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E9:76:56:55:1D:B8:BA:A8:93:82:BF:78:1B:E3:88:07:90:41:9D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B9AEAC468C611F1BFCDAFF7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.98.0/24
Signature Algorithm: sha256WithRSAEncryption
21:99:c3:67:8c:8e:fb:78:7f:f3:4b:c2:b7:ca:d5:12:4c:a5:
79:7e:f6:c6:b5:06:81:5b:30:bf:3c:bf:89:2d:92:b0:7d:60:
08:71:8e:b3:8d:c1:6d:6a:81:b7:d2:dd:45:28:4a:a7:24:3f:
f5:93:ad:fb:9a:26:2b:f9:83:43:79:4f:a6:03:52:85:ce:36:
f7:ee:7e:19:49:7c:d8:de:a6:1a:78:8c:20:7b:c4:f0:76:00:
1b:88:f0:cf:26:be:9e:0e:e5:1b:c8:53:50:2b:57:a9:6a:63:
b7:c7:6c:1f:40:b2:cd:70:98:11:ac:bf:1b:3c:c2:7b:49:74:
f2:d0:0d:72:3e:86:e6:c5:2b:bb:8f:cc:7c:ab:c3:b2:8a:1a:
ce:82:79:a5:8f:56:c9:fd:fe:90:2f:83:ea:72:35:41:c9:86:
93:4b:b8:b0:2e:ec:e6:74:96:70:70:a9:30:52:1d:68:c2:fb:
dd:a4:4f:cd:88:4c:64:f9:32:2d:25:7a:df:75:20:09:7c:a0:
00:88:9a:7f:90:73:25:1c:c7:f6:1a:ee:36:7c:20:a5:e0:27:
99:05:a4:7b:17:c9:f2:b4:ab:a1:23:5a:5a:5b:1a:f2:9d:62:
c8:f9:40:8a:f7:a4:5b:64:9e:25:13:ee:d6:4b:74:ee:f5:3f:
97:24:a1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:51:25 2026 by rpki-client