Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/570D6E22578E11F1A4ADD2D6CE1D38B0.roa
File: 570D6E22578E11F1A4ADD2D6CE1D38B0.roa (raw, json)
Hash identifier: AKCYukZKIzwOaeDp9mBl/lTqYWc7zprub3gZETwNyYI=
Subject key identifier: 6E:12:2F:5A:7E:39:47:12:57:CF:4D:5B:0F:E4:C6:3F:7C:1C:8C:EA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CEF3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/570D6E22578E11F1A4ADD2D6CE1D38B0.roa
Signing time: Sun 24 May 2026 16:33:49 +0000
ROA not before: Sun 24 May 2026 16:33:44 +0000
ROA not after: Wed 01 Jul 2026 16:33:44 +0000
asID: 139880
IP address blocks: 154.82.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 13 Jun 2026 15:58:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118515 (0x1cef3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 24 16:33:44 2026 GMT
Not After : Jul 1 16:33:44 2026 GMT
Subject: CN=6a13286c-d2b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a5:be:b5:90:6e:dc:0f:3d:92:4a:0a:50:48:
0c:ab:af:b9:79:2b:ed:4a:99:95:79:87:60:bf:28:
45:42:d9:de:4a:68:3d:72:6c:32:f7:a5:ae:be:0f:
b6:f5:74:46:88:97:58:ad:ee:7a:07:38:23:ae:03:
f8:a6:6e:91:79:e9:f2:84:f4:0e:90:24:01:d9:8e:
be:65:bb:4f:14:fe:cd:db:30:f8:f9:f0:d2:db:9d:
93:37:9e:ed:e8:d1:79:24:2f:34:ee:d8:6a:79:9c:
6f:bd:14:15:2f:b2:2e:f2:40:50:87:41:0d:08:2a:
25:50:5c:0f:95:54:29:77:8b:e5:66:1d:a0:41:53:
95:59:46:9b:c7:8d:a0:82:cc:22:7b:b3:82:14:65:
4e:c8:88:a6:24:fe:2d:38:e7:f1:b6:2f:eb:f2:1e:
1e:b7:02:37:22:91:df:06:a6:52:31:ae:90:33:47:
02:62:0c:00:a7:58:a9:5b:df:80:01:ee:43:ae:6d:
06:f0:12:61:bc:53:64:56:fe:b1:39:3b:53:68:de:
11:89:3b:89:d5:2e:d2:ab:f6:d5:6e:c1:b0:9b:c8:
2b:f3:26:5a:f9:4a:db:6a:0d:d7:6e:c0:9b:84:29:
f7:ff:80:3d:8a:79:a1:31:92:82:8c:4d:05:c0:f0:
5d:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:12:2F:5A:7E:39:47:12:57:CF:4D:5B:0F:E4:C6:3F:7C:1C:8C:EA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/570D6E22578E11F1A4ADD2D6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.32.0/19
Signature Algorithm: sha256WithRSAEncryption
35:f5:3c:e3:63:f0:97:fa:23:1c:f7:e4:11:87:0e:1b:d8:8e:
62:0c:35:a7:b6:41:e2:ef:e6:1b:dc:40:5a:f5:66:75:87:7e:
60:7c:77:fb:c2:ca:9b:19:64:7c:50:56:ef:34:ab:7f:0c:f6:
87:56:45:ef:1c:c0:60:b2:2e:f7:fb:63:46:23:87:72:0b:9f:
09:d0:9a:29:59:b2:23:46:5f:89:f0:63:63:80:3f:fc:49:49:
79:0f:56:38:87:98:55:10:1a:10:6e:1c:01:8f:45:63:d6:2b:
3c:bf:93:4f:fd:bd:5b:87:5b:60:36:e2:ae:f8:89:1c:df:3e:
89:f2:e0:f8:d1:d2:e6:00:47:5a:b0:e7:e7:1c:12:e1:1c:7e:
9c:bc:a7:c0:d4:a0:a9:30:7b:4f:eb:82:ad:e6:67:8d:8c:ef:
ab:66:0e:89:f7:bc:d9:68:c9:e0:aa:f4:7b:06:a4:35:22:2c:
d4:8c:a8:4c:84:7d:77:91:11:8f:b6:06:1d:db:53:a2:a4:95:
22:41:09:03:9b:e5:29:73:b1:73:fd:c3:b5:a3:48:fe:3e:59:
d0:a9:31:9e:c4:0f:e7:04:9a:1f:ab:21:8a:a2:84:c6:23:4d:
18:90:f8:0e:78:94:56:0c:46:9a:be:5f:e6:57:d3:cf:e6:d1:
9e:ef:c9:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:25:14 2026 by rpki-client