Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41CE88AA6EF611F183EFEAE1CE1D38B0.roa
File: 41CE88AA6EF611F183EFEAE1CE1D38B0.roa (raw, json)
Hash identifier: GKo84oTVAKrFuD4RZPX8veZviz33JNV1B/vCEjWNTfA=
Subject key identifier: 0E:1D:A2:D7:22:6A:3A:F7:EA:EE:E8:EA:85:74:91:00:D8:01:BD:5E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D498
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41CE88AA6EF611F183EFEAE1CE1D38B0.roa
Signing time: Tue 23 Jun 2026 11:25:37 +0000
ROA not before: Tue 23 Jun 2026 11:25:33 +0000
ROA not after: Sun 09 Aug 2026 11:25:33 +0000
asID: 2914
IP address blocks: 154.83.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119960 (0x1d498)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 23 11:25:33 2026 GMT
Not After : Aug 9 11:25:33 2026 GMT
Subject: CN=6a3a6d31-30dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4c:01:5d:a7:fe:9f:82:2a:f4:48:b8:66:e2:
74:19:32:89:26:7a:ee:ad:46:2d:c3:6b:9e:3d:ac:
ce:4d:7f:cc:13:aa:a4:ec:f2:4f:fb:3e:3d:08:8d:
e4:6d:b4:ff:ef:10:75:fa:b3:92:bd:a0:23:89:03:
bd:cd:4a:91:e0:19:e5:9e:3f:30:15:cb:da:6a:2d:
d6:87:a0:c4:1c:d3:f5:48:8b:5f:96:ff:6f:b8:63:
d6:d8:4e:13:bd:b8:43:d5:33:46:a7:ce:41:19:78:
b0:7e:5c:99:5b:60:c9:57:4b:7c:5c:68:65:e4:ea:
c8:32:e3:37:60:7d:8f:64:41:03:db:47:3c:09:c5:
74:77:c0:25:14:a5:eb:78:35:e4:1a:f9:d9:74:ae:
88:f2:22:fe:84:44:b9:81:86:e6:13:43:c2:c6:f8:
05:2e:b8:15:08:da:21:19:ff:52:5a:13:93:1d:a0:
be:36:74:fc:07:68:65:f1:07:3f:14:38:57:f6:0c:
d0:ff:19:39:0d:ec:c1:42:95:a3:bb:be:a4:ea:03:
9c:f8:f5:93:37:c6:9f:83:c9:f3:88:99:7f:ed:38:
0f:9a:ec:5f:e1:fd:21:bb:e3:1a:e9:0b:51:e9:16:
76:86:10:b2:0b:3f:52:02:4b:be:03:04:a7:6f:49:
98:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:1D:A2:D7:22:6A:3A:F7:EA:EE:E8:EA:85:74:91:00:D8:01:BD:5E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41CE88AA6EF611F183EFEAE1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.11.0/24
Signature Algorithm: sha256WithRSAEncryption
15:1b:e7:fb:87:8e:3d:93:39:b3:27:0c:5c:ff:1f:b5:65:b0:
99:04:98:f8:8f:c0:3b:64:9c:3b:1d:9c:1b:dd:02:db:e6:90:
e1:f6:14:ce:9d:32:34:63:d5:2d:f5:cf:7c:5a:6d:16:0a:fa:
60:2c:0e:3a:a9:db:7a:87:9c:40:da:ef:37:74:ba:df:fa:43:
92:6c:b8:ff:34:f2:96:33:77:2a:44:5b:d8:c7:17:61:51:58:
f9:66:36:a4:d4:43:98:b1:62:0b:d2:e4:2a:e4:59:81:e2:eb:
cb:e2:b5:8f:7e:6d:2b:d3:d5:98:98:08:92:97:06:60:76:3f:
e8:24:36:34:26:00:10:5e:73:e2:5b:82:f5:16:1d:ba:ff:77:
fb:e4:95:22:1f:d1:2d:54:fa:b3:35:ee:4a:f5:1b:f8:8a:20:
96:3b:6e:a3:b0:56:46:92:4a:ba:ac:08:9a:00:5e:f5:61:b7:
50:ad:7c:40:80:7e:85:7b:12:7f:d9:73:fa:ff:d4:5d:40:53:
e5:3d:8b:fe:0e:f7:4f:3d:d2:7f:c1:9c:20:0b:66:22:c4:ce:
18:61:5b:c9:4c:c4:d2:0c:d1:b6:62:4d:9b:c2:3e:4a:0b:6d:
cb:ac:8a:dd:85:63:37:10:6b:74:52:a1:d3:c3:16:dc:43:31:
cc:71:d5:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:53:02 2026 by rpki-client