Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55514C6C6CAF11F1A1E8ACBACE1D38B0.roa
File: 55514C6C6CAF11F1A1E8ACBACE1D38B0.roa (raw, json)
Hash identifier: 2AS7miFcywWbZo744OIl8oQR7OdsSH5/PnPs3lU+IhE=
Subject key identifier: C3:F6:90:41:D4:DC:7A:D6:D2:7C:7C:89:71:BB:39:88:69:BB:70:75
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D439
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55514C6C6CAF11F1A1E8ACBACE1D38B0.roa
Signing time: Sat 20 Jun 2026 13:52:53 +0000
ROA not before: Sat 20 Jun 2026 13:52:48 +0000
ROA not after: Sun 19 Jul 2026 13:52:48 +0000
asID: 150000
IP address blocks: 154.82.159.0/24 maxlen: 24
154.82.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119865 (0x1d439)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 20 13:52:48 2026 GMT
Not After : Jul 19 13:52:48 2026 GMT
Subject: CN=6a369b35-244b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e8:3a:a7:eb:0b:f0:26:f7:5b:7c:15:1d:96:
86:32:11:44:11:fd:a4:16:85:53:00:8a:75:9b:c8:
71:e2:70:7d:5d:6b:1a:73:64:8c:4f:2f:6f:ce:65:
8f:be:d9:15:bc:23:57:c4:34:65:e0:c6:6a:89:79:
65:e8:8a:4e:d0:f6:9c:75:d4:cc:c4:60:41:2a:51:
b2:2c:99:5a:19:6c:55:80:66:16:2d:67:a4:1e:89:
25:d7:bc:ed:e5:30:92:cc:68:4c:65:57:93:4e:d4:
94:b9:d9:ab:51:64:55:b4:88:82:ab:e6:e1:e0:b5:
8d:e0:3d:d5:7e:92:b3:da:15:e8:1e:fa:63:68:f2:
f1:cc:c9:51:ab:d3:65:f4:82:80:61:0a:ed:08:11:
ff:41:54:b4:bc:f0:e5:d2:05:4a:a5:51:93:58:92:
e5:b0:86:04:30:d5:fb:99:ac:f0:85:da:b3:1c:a2:
a4:f9:59:c0:1b:77:aa:a8:23:26:35:7f:be:9e:bf:
8b:cf:0e:61:da:b0:93:51:82:00:0d:89:91:5c:a0:
ed:5e:a1:f9:54:e4:5e:7c:54:1c:12:8d:7f:56:d7:
91:87:9c:49:bb:94:88:6b:76:0a:a8:95:e6:7e:d0:
0e:c2:3f:b5:8e:13:ca:5f:ac:4c:41:84:7e:6d:c2:
c0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F6:90:41:D4:DC:7A:D6:D2:7C:7C:89:71:BB:39:88:69:BB:70:75
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/55514C6C6CAF11F1A1E8ACBACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.159.0-154.82.160.255
Signature Algorithm: sha256WithRSAEncryption
80:ac:26:9e:3e:5c:d9:33:c4:9c:1c:9d:8a:37:9d:fd:dc:fd:
f3:5c:da:ce:c3:25:20:28:f7:ff:2d:b8:d6:79:71:65:06:1f:
fe:df:e1:a2:81:2f:c2:4b:e8:3a:d2:e3:fa:ad:39:bc:c6:2d:
38:97:a2:8a:6f:5c:00:7e:b7:42:84:f5:04:bd:0c:af:ba:fa:
e9:b5:50:87:59:1d:b0:79:9d:d0:1e:07:84:34:71:9c:c2:87:
4a:11:a1:fd:5d:4f:b5:51:18:ae:c7:4c:15:85:89:d6:aa:05:
0c:b3:60:df:cc:24:c7:27:36:a4:3d:80:04:a5:04:45:99:b5:
49:7d:e3:90:4e:38:3d:64:72:5b:c6:e5:24:2d:6f:df:70:be:
1b:d5:d6:11:51:45:c9:5e:d5:06:0e:f7:4f:41:b6:c6:bb:b5:
8e:f0:4b:78:b4:57:1f:d5:a9:67:d8:8e:5b:7c:ea:4d:d7:5b:
77:8b:b1:05:4d:fd:35:6b:98:10:88:21:42:dd:30:4b:19:3f:
e3:50:3f:d7:f8:4e:99:02:59:7a:e1:a3:af:5f:8c:98:3d:4a:
2f:52:4f:75:fd:cc:35:fe:09:f0:45:ff:96:02:c6:36:3c:23:
19:78:0b:a7:1e:d1:bb:fb:b0:4a:f7:01:68:68:e5:5e:9d:7d:
c8:86:55:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:53:17 2026 by rpki-client