Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3CF24BFC6E5911F1BF4CEAA1CE1D38B0.roa
File: 3CF24BFC6E5911F1BF4CEAA1CE1D38B0.roa (raw, json)
Hash identifier: VhMJmzMep/tKwZy5pLW/3mWcvznXNEtvL2PqDAtTdE8=
Subject key identifier: 1B:B8:D5:94:0E:FA:A7:FE:D8:B0:BA:B9:69:4C:FA:20:1C:31:B0:66
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D45D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3CF24BFC6E5911F1BF4CEAA1CE1D38B0.roa
Signing time: Mon 22 Jun 2026 16:41:38 +0000
ROA not before: Mon 22 Jun 2026 16:41:34 +0000
ROA not after: Wed 29 Jul 2026 16:41:34 +0000
asID: 54801
IP address blocks: 154.213.176.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119901 (0x1d45d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 22 16:41:34 2026 GMT
Not After : Jul 29 16:41:34 2026 GMT
Subject: CN=6a3965c2-e27a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:87:36:55:a5:eb:45:cf:11:16:b1:c2:53:3e:
37:77:6f:04:f1:6f:8e:8a:19:3e:fc:46:af:0d:da:
08:8e:14:09:21:cc:26:b3:65:6d:f1:18:6e:90:a1:
27:0c:a8:a6:e6:7a:20:dc:33:ca:87:1c:d3:b7:c8:
31:00:08:18:19:85:49:c0:c4:4b:2a:26:78:b7:0d:
da:6f:36:1d:89:a1:64:71:6d:bf:51:98:26:5f:e7:
02:e9:c1:e4:b2:5b:ab:c0:f4:15:53:3b:87:0f:16:
2e:76:0a:db:8e:81:5f:42:12:8a:33:f3:d9:d5:de:
70:56:91:58:c4:83:b8:41:75:25:3c:cc:14:87:b1:
6a:8c:a3:d3:e0:fc:03:0d:d4:ed:ee:ad:99:03:61:
83:79:63:a7:bd:ad:6f:e3:9a:f4:bb:05:00:dc:65:
73:6f:ba:63:fb:01:16:e1:f9:ce:8c:ef:2a:e7:a1:
f1:fc:4d:d0:71:5b:e8:54:9d:4c:2a:86:aa:3b:6c:
ba:08:ab:6d:45:89:1d:36:64:cd:64:f3:0e:89:47:
b9:7c:4c:62:6d:9a:1a:36:73:e0:d3:61:44:0f:30:
2c:2c:cb:64:3f:c2:7c:06:26:e5:f7:56:a4:12:ac:
0f:c4:12:c6:0b:06:ea:ea:e7:43:0b:68:4e:32:f9:
13:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:B8:D5:94:0E:FA:A7:FE:D8:B0:BA:B9:69:4C:FA:20:1C:31:B0:66
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3CF24BFC6E5911F1BF4CEAA1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.176.0/20
Signature Algorithm: sha256WithRSAEncryption
bd:de:e1:b5:8f:9c:3a:61:0d:d4:12:52:9a:1a:5f:6e:73:6e:
3b:32:35:57:98:4e:31:a3:8d:b2:1c:9d:73:4f:11:c6:39:bf:
1e:fe:09:8a:d2:da:db:bf:e6:b7:f3:0b:22:de:25:cf:6a:fc:
01:db:34:93:bc:91:c9:be:03:5f:f9:62:5a:94:93:9f:bd:3d:
c3:43:49:c2:60:a3:c4:d5:f5:6f:fb:ea:3e:3c:a2:b0:0f:9f:
3b:e3:81:3b:b8:a0:7b:8d:fe:59:c3:a4:92:b3:5d:3d:f0:9c:
4e:80:4a:c5:f4:6e:84:9c:21:08:55:07:f6:69:b6:c9:cc:39:
48:dd:16:58:0f:93:09:44:0c:ed:fa:75:94:97:0e:55:0c:bc:
48:89:fc:d8:4f:52:ad:91:4d:d5:30:21:0a:3f:72:e0:e5:ba:
11:b7:f0:d5:1e:03:bc:c6:bd:4b:c4:94:63:1f:55:63:c2:f3:
14:51:00:ee:26:b0:64:1e:7c:ac:a6:a3:4d:85:d7:74:18:3f:
1a:fd:9f:3f:28:0a:26:73:86:d6:b5:d4:e0:b5:48:83:88:c1:
89:ef:24:fa:0d:dd:ed:0c:e1:f1:71:64:9f:e8:47:f9:cf:67:
77:c2:f1:3b:a2:f2:64:7d:49:6d:33:c6:05:12:d8:09:03:04:
89:c1:d7:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:53:00 2026 by rpki-client