Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C122CC24EE211F1A1398004CF1D38B0.roa
File: 1C122CC24EE211F1A1398004CF1D38B0.roa (raw, json)
Hash identifier: tPrkp13pIdHCoJ/tjU47yZy22O5Y6zP7mJrytTkdHnY=
Subject key identifier: 87:AF:AF:8F:E1:41:F8:F7:CA:DE:7F:B7:F8:BA:2F:A3:C9:97:AA:8A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CB7F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C122CC24EE211F1A1398004CF1D38B0.roa
Signing time: Wed 13 May 2026 15:40:47 +0000
ROA not before: Wed 13 May 2026 15:40:42 +0000
ROA not after: Wed 24 Jun 2026 15:40:42 +0000
asID: 9009
IP address blocks: 154.91.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117631 (0x1cb7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 13 15:40:42 2026 GMT
Not After : Jun 24 15:40:42 2026 GMT
Subject: CN=6a049b7f-65f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:07:34:13:c8:81:cc:e1:0b:bc:ff:a5:eb:c8:
5e:ab:9e:6c:14:13:5b:f4:91:44:64:ec:87:4c:84:
5b:6f:e1:bd:fc:05:8e:da:20:27:75:e8:69:49:31:
3f:5a:49:fc:38:e8:45:bd:fc:d6:60:1b:6c:8a:97:
1d:21:ce:8d:5c:4d:79:71:95:1b:7e:86:f0:ae:9b:
bd:16:63:6a:dc:1a:f0:fa:17:a1:e4:ba:02:25:08:
e8:c5:a7:00:36:c1:0b:80:9a:e2:c7:6f:86:5e:a2:
aa:c5:78:a4:c5:d7:a5:5d:c2:9c:ad:35:4a:96:ca:
0d:d7:2f:4a:4b:e3:b9:5c:0c:1b:ea:8d:84:ed:59:
a7:6c:0e:bb:60:e5:dd:88:ad:92:a2:d9:46:5e:db:
dd:93:d2:ac:80:6e:3e:2d:9a:0f:ff:65:58:e5:80:
3c:2c:a4:ae:04:73:82:bb:9a:58:4f:3b:b9:33:d2:
2a:7e:96:dc:33:93:23:c0:28:2d:32:9c:06:ac:62:
e9:8f:f4:82:0f:05:06:6e:e4:b0:11:6d:f3:cb:e3:
34:d1:a4:bc:c9:9d:07:df:84:89:12:de:e3:5d:dc:
e6:fd:d6:17:a2:0a:62:c2:d2:7f:02:a4:e8:f9:05:
ed:81:7a:e7:91:bb:c4:24:57:a3:77:dc:e8:ca:df:
f5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:AF:AF:8F:E1:41:F8:F7:CA:DE:7F:B7:F8:BA:2F:A3:C9:97:AA:8A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C122CC24EE211F1A1398004CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.157.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:dc:24:40:29:9a:0f:3a:62:2d:bd:13:5c:03:b1:e3:cc:17:
d1:cc:82:f3:44:83:3b:fb:2c:3e:9d:66:71:97:72:9c:27:a8:
ec:16:4b:24:27:00:b3:65:12:b8:7f:36:c8:d5:1b:f4:cc:81:
28:74:a7:0d:26:67:10:49:7f:25:9c:d5:54:da:3f:3c:63:3b:
0c:a6:c9:9e:75:9d:dd:24:60:52:55:ac:77:70:ee:c3:b4:ac:
cf:9f:8a:1c:47:d2:56:dd:6d:02:b9:52:ba:b3:87:c1:d9:e4:
bd:3c:e3:a0:eb:4d:21:a5:a0:1c:94:c3:3e:46:af:c2:ad:d4:
ad:a1:6b:61:5a:a4:40:19:de:9a:96:54:ef:e8:cd:a6:3d:31:
4d:cf:60:44:4d:58:13:d2:04:c9:db:5d:c4:2b:3a:88:20:f5:
b5:0b:cd:b1:ab:b5:8d:81:c2:07:21:df:b2:66:0e:7c:ea:a2:
89:13:14:db:34:84:17:8d:ce:52:c4:db:ed:6a:e2:7d:f9:be:
65:4a:57:fb:96:a6:20:57:33:87:f1:77:5b:32:b4:76:17:a2:
f6:20:ed:52:bb:54:ac:d9:8f:21:2b:b1:15:f6:9e:bb:03:71:
64:cc:2f:b6:2a:27:8c:c2:ca:39:c8:f9:dc:7d:69:62:e0:63:
3d:02:09:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:35:42 2026 by rpki-client