Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3CBDF91A699511F19CAEB8E6CE1D38B0.roa
File: 3CBDF91A699511F19CAEB8E6CE1D38B0.roa (raw, json)
Hash identifier: ChqKM9mw5P9TJwkYUJXGczbk8LN7pmL5KjFemcWco5Q=
Subject key identifier: 8D:72:BB:66:0A:B9:B2:8F:DE:8D:E9:9C:2D:7D:81:64:A6:1E:1A:57
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D357
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3CBDF91A699511F19CAEB8E6CE1D38B0.roa
Signing time: Tue 16 Jun 2026 15:08:32 +0000
ROA not before: Tue 16 Jun 2026 15:08:27 +0000
ROA not after: Thu 24 Dec 2026 15:08:27 +0000
asID: 24173
IP address blocks: 154.81.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119639 (0x1d357)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 16 15:08:27 2026 GMT
Not After : Dec 24 15:08:27 2026 GMT
Subject: CN=6a3166f0-5499
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:96:78:26:cd:b7:8d:61:d4:a4:53:92:ed:52:
45:c2:79:59:6b:9d:ec:6f:6a:4b:83:5c:51:a6:de:
f0:5f:f1:1d:3d:f7:39:12:e2:f2:f6:b6:b7:34:94:
94:92:be:cf:d4:22:cb:e3:1a:eb:3c:34:e7:f5:3f:
e7:b5:f1:20:34:4a:28:d8:c6:da:d5:a6:0e:99:8d:
1c:9c:45:7e:7f:17:98:39:7c:d7:54:eb:e4:1d:78:
2c:09:82:0e:34:30:36:cb:8f:54:db:ce:69:57:7e:
d6:11:70:49:36:8a:b0:b4:81:4e:a1:d5:48:d4:07:
eb:a0:2a:44:ea:94:29:52:61:27:c5:29:46:f5:25:
f1:89:ab:c0:9f:c9:ff:91:66:3c:45:11:40:70:71:
b1:64:d6:cc:24:a9:be:02:a4:f5:ef:fc:3d:c4:63:
45:ad:da:77:3d:98:5b:66:8e:79:e9:97:78:62:29:
d7:5d:e9:66:69:d3:ab:0f:dd:4a:3c:c5:35:46:35:
1f:74:c7:0a:d0:5f:97:8a:91:95:d2:b7:33:e2:69:
e2:5e:76:7c:21:00:07:4d:2d:7b:73:90:60:a4:41:
22:ba:89:5d:e3:02:50:ca:9b:cd:d2:f7:ea:8c:80:
2d:2f:77:b2:1d:30:b9:41:b0:df:56:a7:f7:35:fc:
97:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:72:BB:66:0A:B9:B2:8F:DE:8D:E9:9C:2D:7D:81:64:A6:1E:1A:57
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3CBDF91A699511F19CAEB8E6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.60.0/24
Signature Algorithm: sha256WithRSAEncryption
11:81:78:5b:7b:1c:c6:64:52:1c:b9:e4:86:2c:7c:58:25:47:
c5:a9:f9:60:d6:d3:ea:17:59:22:e4:2f:4a:41:ac:21:07:2d:
c9:ab:5e:59:04:01:e5:40:b4:9d:7e:0d:34:09:96:6f:ec:44:
ef:3e:61:47:39:28:4e:49:b6:ae:30:bc:fe:f6:3b:6a:23:1a:
04:15:6b:2a:6c:b2:d0:be:63:f2:41:90:ee:3f:2c:31:fd:22:
b1:f9:23:3d:24:9b:7a:f7:c3:06:69:e3:3a:e5:fa:7b:96:b3:
dc:26:f8:15:49:5e:c6:01:41:6b:fa:92:88:9b:5c:d6:57:6f:
52:1a:7f:ee:31:f8:88:9a:3c:9f:41:47:1f:44:8e:2f:84:dd:
15:d1:ac:de:72:eb:da:ff:e0:2b:c6:1a:11:50:4e:06:e5:18:
0a:1e:ee:32:0c:03:5e:4e:60:a6:1e:17:d7:43:cc:46:f8:62:
3a:e7:6e:90:1c:be:5f:a6:b4:62:f1:ea:4a:07:a4:30:ea:49:
cf:2e:df:2e:1b:c2:d3:eb:7d:cd:6b:90:56:ea:62:48:e3:96:
cb:87:62:2b:3a:87:cd:a8:dc:53:16:5e:20:ff:e0:ba:84:dd:
a5:ef:ea:1f:ab:82:0e:77:e3:a1:24:6e:b7:af:cd:02:bc:96:
de:ca:e9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:53:01 2026 by rpki-client