Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/612F7B2019F911F188A3EEB5DAE4EC9C.roa
File: 612F7B2019F911F188A3EEB5DAE4EC9C.roa (raw, json)
Hash identifier: 7WpQ2Q4crWigluS5kKUaC0yFdN4d2aST566k5Ic5sp4=
Subject key identifier: 6A:E4:92:05:F4:1E:BE:F5:8A:DB:47:5D:A2:05:5E:A0:61:6A:4F:51
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BE2A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/612F7B2019F911F188A3EEB5DAE4EC9C.roa
Signing time: Sat 07 Mar 2026 07:43:49 +0000
ROA not before: Sat 07 Mar 2026 07:43:45 +0000
ROA not after: Thu 04 Jun 2026 07:43:45 +0000
asID: 138152
IP address blocks: 154.92.22.0/24 maxlen: 24
154.92.23.0/24 maxlen: 24
154.94.4.0/24 maxlen: 24
154.94.6.0/24 maxlen: 24
154.94.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114218 (0x1be2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 7 07:43:45 2026 GMT
Not After : Jun 4 07:43:45 2026 GMT
Subject: CN=69abd735-ecd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:35:ab:99:c8:b2:dd:24:82:c2:91:f1:ae:7d:
77:e7:12:f3:55:21:57:23:40:94:6b:4c:e9:8b:f1:
f1:f3:a7:e9:d0:f7:ba:41:2b:2a:9d:b1:f2:43:ed:
ad:c5:e0:1a:8b:4b:d6:8e:d3:61:02:8f:85:e0:ed:
53:a1:8e:94:e5:d4:b6:62:a0:37:51:66:9e:e5:d9:
8e:35:3f:eb:14:72:59:de:33:5c:be:7f:1f:05:57:
17:96:36:43:b8:36:f9:5d:24:25:ca:1f:6c:26:4e:
3e:5b:68:fd:bb:c6:f4:32:8d:a8:64:df:29:cd:a2:
8d:59:6c:2e:b4:98:e3:a7:bc:b9:33:ee:cf:e8:6e:
fa:68:14:f5:83:85:62:3b:7e:ae:c1:9a:57:0f:92:
05:8a:09:a4:27:0e:23:18:8e:c6:31:65:48:9a:26:
6d:f1:86:ad:d3:29:96:26:04:a1:f9:f0:eb:3c:eb:
20:4a:38:20:86:f4:5d:41:f3:72:b6:d5:4f:ee:ee:
e2:a4:b1:77:a4:ae:70:a1:0a:cf:a8:56:b8:e2:53:
43:a0:dc:fc:d5:6b:2a:77:81:1d:35:90:c4:93:77:
be:f7:4a:c2:24:36:ae:d4:2e:2b:59:03:5c:a6:2e:
af:45:d6:b5:f4:91:0c:cc:78:9d:5b:d3:45:44:25:
f2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:E4:92:05:F4:1E:BE:F5:8A:DB:47:5D:A2:05:5E:A0:61:6A:4F:51
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/612F7B2019F911F188A3EEB5DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.22.0/23
154.94.4.0/24
154.94.6.0/23
Signature Algorithm: sha256WithRSAEncryption
33:6c:4d:aa:35:be:81:3d:07:34:b9:af:52:d1:8e:69:65:4a:
ea:e0:e3:c7:95:c9:4a:eb:bd:d1:e9:cd:23:92:92:42:00:8f:
3a:17:de:ea:d0:9f:37:13:f1:14:b1:2f:54:c8:0f:d7:e9:c9:
c3:ec:90:71:db:29:27:7e:c6:c5:06:c6:30:10:ec:23:c9:8d:
d6:62:93:07:d5:67:05:3f:a2:7a:d0:07:bf:82:33:5b:6e:82:
55:d4:e3:59:91:e1:37:5a:01:55:52:95:bd:65:c3:09:05:44:
14:66:a7:91:8d:1e:ce:b0:21:e4:7c:76:82:47:0b:ee:17:e4:
08:24:b2:44:6d:34:ff:21:5b:62:16:bb:35:bf:3c:ba:d2:bd:
d3:c7:94:a7:bf:4d:46:69:fa:f9:67:26:cc:05:38:37:33:6c:
16:92:7d:cb:96:c7:69:97:f9:7e:4d:6b:94:49:ec:a0:9b:dc:
ed:93:26:6e:f1:7c:cc:c5:b4:52:af:54:08:5c:46:e7:72:58:
88:46:53:d9:da:37:fb:e2:c6:a8:69:f2:2c:9d:4e:6e:4a:0c:
dc:00:bd:ee:b7:04:f3:6d:51:70:c2:f1:64:d9:00:c9:d1:fd:
f7:f3:08:8e:20:94:6b:af:32:68:91:b0:af:5f:b3:c4:57:d7:
62:12:21:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:14:49 2026 by rpki-client