Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3EC12360560611F1AB082AFECE1D38B0.roa
File: 3EC12360560611F1AB082AFECE1D38B0.roa (raw, json)
Hash identifier: 7Tq3NTLws7aUbUPcmvHNyRNVdHPln07SlNsbcXoGtaE=
Subject key identifier: 65:E6:38:DC:42:7C:69:8A:60:06:62:05:E7:68:CC:C2:70:27:CA:6D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CE46
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3EC12360560611F1AB082AFECE1D38B0.roa
Signing time: Fri 22 May 2026 17:47:05 +0000
ROA not before: Fri 22 May 2026 17:47:00 +0000
ROA not after: Tue 30 Jun 2026 17:47:00 +0000
asID: 9304
IP address blocks: 154.211.24.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118342 (0x1ce46)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 22 17:47:00 2026 GMT
Not After : Jun 30 17:47:00 2026 GMT
Subject: CN=6a109699-3d68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:93:38:71:ce:b4:3a:1b:f9:fd:00:85:16:4d:
e3:e2:30:88:4b:6f:10:bf:f6:d3:6e:43:ee:39:ce:
58:6c:cd:90:3c:22:27:8b:17:7e:c0:2f:5d:a1:1d:
31:c3:1e:19:e9:d6:a5:6d:a9:95:8b:14:39:d5:b4:
09:d4:31:4b:e5:e5:df:db:c5:50:e9:4f:0e:3b:1c:
69:89:bd:0f:80:73:7c:2e:1d:34:3c:ad:50:d5:1d:
d8:41:93:86:10:f7:a5:69:b3:8c:5c:ad:43:bb:ef:
1d:28:80:ee:26:b9:bf:4a:96:88:7e:41:49:51:29:
2c:2f:c6:dc:8a:2e:18:02:03:8b:1d:30:ba:24:f2:
13:01:99:88:fb:a5:4e:63:ab:21:fe:82:e6:36:5e:
2c:c6:30:31:31:b5:4a:81:13:39:6c:08:7f:a3:cc:
fb:e2:6d:3a:b2:13:b4:0f:62:a0:fd:55:14:b7:39:
ba:1a:16:60:67:41:eb:0f:44:41:3d:ef:24:78:5b:
a0:81:3c:7e:fb:85:fb:fe:c5:ec:de:3c:c6:d1:c1:
63:b5:a3:e7:ef:d7:57:cd:e7:d5:b4:53:28:55:5e:
1b:fe:ce:27:0c:d8:a1:ae:ed:55:4b:0a:98:c7:77:
f4:af:05:01:78:38:9c:97:8a:f5:4c:d5:bc:f7:9c:
54:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:E6:38:DC:42:7C:69:8A:60:06:62:05:E7:68:CC:C2:70:27:CA:6D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3EC12360560611F1AB082AFECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.24.0/21
Signature Algorithm: sha256WithRSAEncryption
78:8d:cd:77:7f:a7:a3:9c:84:e5:48:20:d1:9d:e8:72:70:bb:
5b:f9:05:a2:6a:71:86:e9:d4:8a:d0:24:b7:d6:3a:31:d7:cd:
cf:d1:b7:88:d4:90:64:de:86:a0:2d:06:33:7f:28:0e:63:0b:
07:46:2c:56:ad:8d:24:a6:7b:bf:db:9a:0c:8d:e6:7e:0f:af:
92:2f:51:43:96:94:67:30:d4:85:62:f2:7a:90:6c:cf:2b:cd:
d4:07:7f:8f:f6:e5:87:fa:97:b3:7c:bf:1c:bf:07:a0:a5:91:
cd:a2:3f:55:60:c6:e9:a7:2c:b5:a4:0d:3d:98:d2:d7:9d:8f:
5a:81:8a:e3:90:8e:3f:6f:c9:92:19:33:e5:d9:3b:7a:26:74:
ea:3a:5c:80:f6:7d:2d:84:ea:69:db:79:b8:3a:36:76:48:b4:
40:a2:e2:26:a3:12:78:0f:c2:5b:42:f9:26:43:36:a7:36:3a:
78:3e:c9:8e:f9:f6:ce:4f:2c:a1:35:b8:d4:3f:a8:dc:69:fd:
f9:56:09:84:cf:c5:57:68:56:b0:d5:b5:ea:3b:12:8b:e8:21:
03:91:5e:e2:5e:32:9d:86:8f:bb:51:16:00:eb:0e:70:00:af:
e4:eb:47:8e:40:70:52:3c:33:3b:11:93:f2:4f:eb:6f:c6:84:
3b:b9:52:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 20:50:56 2026 by rpki-client