Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/565BF8646EDA11F18478B7BACE1D38B0.roa
File: 565BF8646EDA11F18478B7BACE1D38B0.roa (raw, json)
Hash identifier: +KU3J3xENHuEUKt+4SkF3KD0dqcUvlWAQCZT24LAYVI=
Subject key identifier: EF:5E:20:7F:17:15:AF:90:E3:27:A1:59:18:D0:D7:E8:25:4A:80:51
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D474
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/565BF8646EDA11F18478B7BACE1D38B0.roa
Signing time: Tue 23 Jun 2026 08:05:46 +0000
ROA not before: Tue 23 Jun 2026 08:05:41 +0000
ROA not after: Wed 29 Jul 2026 08:05:41 +0000
asID: 134365
IP address blocks: 154.198.40.0/24 maxlen: 24
154.198.41.0/24 maxlen: 24
154.198.42.0/24 maxlen: 24
154.198.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119924 (0x1d474)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 23 08:05:41 2026 GMT
Not After : Jul 29 08:05:41 2026 GMT
Subject: CN=6a3a3e5a-0db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:f5:c8:3b:f2:ab:1f:19:26:b6:75:81:01:23:
66:67:c1:84:b2:47:a4:d6:cf:14:db:a7:a6:df:9e:
b0:54:ad:16:64:cf:44:73:b5:34:37:d1:ca:cb:12:
2a:8d:4d:13:3e:84:d3:f8:ae:e4:88:7c:c3:74:d9:
8b:33:46:43:6a:af:af:06:db:90:75:b9:13:b4:8a:
aa:33:33:8e:3b:41:ac:31:bc:93:f9:81:ae:74:92:
ca:1d:90:d6:43:48:d5:7d:6a:a0:9b:e2:14:a4:c6:
c1:f2:32:2e:ca:44:0b:e3:f6:ec:20:16:9f:75:ff:
7e:f0:c0:d7:f7:ff:c9:98:62:78:59:01:6e:0e:b6:
c7:d6:83:9e:7d:0f:3d:c4:23:a8:03:bc:cf:cb:bd:
95:91:eb:65:f2:e0:82:de:ec:14:5d:40:4f:f7:09:
00:b4:f2:0b:79:77:86:f0:b4:dc:b7:5d:f9:1f:2d:
71:98:bc:e9:af:06:79:84:85:72:eb:43:13:3b:7d:
ea:48:3f:5a:de:87:59:91:34:76:21:3c:c5:bd:5b:
23:ee:c7:e2:07:8f:f5:21:28:71:75:00:ae:ad:e9:
40:d4:f0:8a:f1:60:ea:7e:dd:1b:e2:aa:9a:b7:1f:
f9:86:18:f8:e7:a5:b4:39:ac:32:1c:47:7f:01:c1:
1b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:5E:20:7F:17:15:AF:90:E3:27:A1:59:18:D0:D7:E8:25:4A:80:51
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/565BF8646EDA11F18478B7BACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.40.0/22
Signature Algorithm: sha256WithRSAEncryption
10:53:8e:5e:9f:10:b0:10:cd:85:be:68:08:cc:1b:b3:15:db:
73:65:a6:e2:c4:d7:af:2c:98:a5:90:66:44:75:ce:d4:8f:fe:
e8:c2:dc:65:ee:13:83:f5:ac:b6:63:35:85:68:55:0c:95:e5:
8e:38:bc:db:56:7f:c2:9d:13:01:c6:e1:3f:76:bd:5d:43:a6:
ae:51:a1:67:38:62:a2:f1:31:df:fd:b1:0a:b5:c0:6a:0f:a9:
cc:a8:5f:0e:95:77:fc:7f:ab:71:98:49:f1:d4:4c:5f:1e:f9:
fa:3b:25:ff:80:fb:f0:d2:9d:25:70:40:d5:51:83:65:87:b5:
9c:15:f9:46:46:a3:db:ad:30:b3:3b:24:98:24:db:a3:74:4e:
29:3a:68:91:1e:89:8b:d6:10:04:a5:2b:ee:b6:cf:8d:76:ad:
f8:63:11:3a:4a:1b:3b:0e:86:03:b0:95:ad:a4:03:3c:d2:c3:
d6:78:01:3d:8c:fe:1d:21:a3:1e:7e:02:95:d2:fb:ba:2d:61:
2e:7d:ee:3d:e4:1c:52:bf:8d:d9:a7:72:53:26:c1:e2:c8:e4:
c8:14:63:4d:12:f6:c9:25:51:54:85:fd:b1:d0:d5:0c:41:f4:
00:1f:df:41:36:3a:8c:ce:54:7e:9d:ba:c2:f3:ad:15:21:5c:
87:be:ac:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:52:01 2026 by rpki-client