Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6212CF22310C11F1A00405F6DAE4EC9C.roa
File: 6212CF22310C11F1A00405F6DAE4EC9C.roa (raw, json)
Hash identifier: OWl1BS6jTMwYcM1aOArPKBvpLt+Y2hzKyMrRjTQ9AWo=
Subject key identifier: 64:90:7E:E8:ED:C9:92:AE:80:D5:06:29:A7:46:74:F8:E0:AB:76:CE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C33A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6212CF22310C11F1A00405F6DAE4EC9C.roa
Signing time: Sun 05 Apr 2026 16:27:49 +0000
ROA not before: Sun 05 Apr 2026 16:27:44 +0000
ROA not after: Sun 12 Apr 2026 16:27:44 +0000
asID: 271956
IP address blocks: 154.88.190.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 09 Apr 2026 05:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115514 (0x1c33a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Apr 5 16:27:44 2026 GMT
Not After : Apr 12 16:27:44 2026 GMT
Subject: CN=69d28d85-2180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9b:87:d3:f2:d0:10:f9:40:11:aa:30:12:e8:
18:db:5c:ea:83:83:01:29:cc:0e:cf:7a:ab:27:66:
89:bd:21:4b:07:e1:d8:a0:94:4d:7d:b7:49:c7:dc:
0c:59:eb:02:95:b3:dd:01:92:8b:8d:3c:e9:d5:de:
fd:b1:27:b1:9d:8e:02:06:5b:45:16:9f:38:0a:a5:
b4:51:4b:3e:e0:cd:60:24:29:e1:77:16:89:0b:d7:
5f:1a:4e:49:bd:38:95:f7:1e:07:1d:e7:99:fe:26:
cf:43:9a:43:87:dc:61:d3:e9:26:ed:e4:87:dd:01:
c6:20:a7:bd:18:63:ea:ce:ba:e6:8f:b2:2a:c5:bb:
1c:85:1b:03:8c:80:23:bf:64:7b:27:28:59:12:55:
f7:8a:54:21:24:ad:73:fc:a4:98:01:b1:40:40:b2:
dd:99:29:80:06:df:2a:61:05:ea:c7:02:7b:f7:de:
2e:d4:82:33:b9:cc:80:ef:81:32:c8:68:ee:4b:c6:
4b:e0:aa:d2:60:65:9e:40:8c:f1:1b:d5:50:cb:9f:
2b:cc:e5:2e:6a:7d:fa:f2:18:8b:c5:6d:48:89:f6:
62:f5:01:7a:15:23:27:82:33:58:4c:49:09:27:b2:
d6:61:ef:9d:00:74:68:aa:df:8c:2e:bc:64:e5:ba:
6c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:90:7E:E8:ED:C9:92:AE:80:D5:06:29:A7:46:74:F8:E0:AB:76:CE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6212CF22310C11F1A00405F6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.190.0/23
Signature Algorithm: sha256WithRSAEncryption
9c:ac:31:4e:c2:2c:df:31:ee:39:2a:eb:06:15:ad:5e:2d:b8:
ae:e4:14:fa:95:8c:eb:90:ed:dc:82:6e:73:0f:94:cf:9b:dd:
d2:b9:e0:0f:d5:a5:fd:2b:8c:84:e2:c6:7f:07:e9:e1:8d:05:
79:c2:35:06:9e:75:72:27:88:13:e2:7a:25:1a:be:fe:ca:8d:
20:b4:06:44:31:6e:c9:96:17:e3:ec:97:92:c2:70:1c:a6:87:
43:c4:3b:2f:db:33:c5:57:df:da:04:a4:2f:85:cb:fe:ca:f8:
01:25:a0:9b:c3:ba:ee:f8:ef:32:40:b4:90:3f:32:1d:a3:e3:
1e:fe:0a:20:03:5c:50:c7:88:24:f1:33:e5:c2:f2:a2:19:b8:
15:3c:87:39:d0:8f:ff:12:e4:ea:8d:b7:ac:d1:b2:c4:89:8a:
e9:7a:1c:bb:c4:f9:fb:41:85:7e:9e:33:29:d9:e3:f8:f0:f5:
52:99:f9:5a:03:c8:a8:fd:8f:95:fc:77:ea:ab:18:4d:14:b3:
9d:6c:61:31:d6:d0:06:31:c2:0f:19:a3:97:68:44:98:fe:97:
1d:2b:7e:24:4e:d4:cb:fe:5f:6b:df:ed:10:e1:aa:be:03:9a:
b0:e1:e3:ca:60:85:ee:e7:7f:88:46:0e:0b:fd:b7:7b:99:f7:
2c:34:8c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 15:51:04 2026 by rpki-client