Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65E884C66A6311F19C9BBDCECE1D38B0.roa
File: 65E884C66A6311F19C9BBDCECE1D38B0.roa (raw, json)
Hash identifier: g6blgknB9xUGN08Zob7qOJIEUxDiK9Qrdm/EjTJ5BQs=
Subject key identifier: 18:0F:F1:C6:8C:D9:FE:64:EE:93:02:9C:EE:3E:77:F2:1D:F3:84:8E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D3DE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65E884C66A6311F19C9BBDCECE1D38B0.roa
Signing time: Wed 17 Jun 2026 15:44:17 +0000
ROA not before: Wed 17 Jun 2026 15:44:13 +0000
ROA not after: Thu 14 Jun 2029 15:44:13 +0000
asID: 17561
IP address blocks: 154.82.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119774 (0x1d3de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 17 15:44:13 2026 GMT
Not After : Jun 14 15:44:13 2029 GMT
Subject: CN=6a32c0d1-751b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:56:1e:8d:94:41:c7:0a:12:cc:f4:6e:f2:e4:
44:75:ed:38:7e:de:0a:2e:1b:18:8d:6d:c1:d3:7d:
8b:68:74:2e:44:ae:ce:56:7d:51:b5:36:cb:fa:3a:
b3:1a:ae:50:3c:d4:7d:eb:bb:3d:49:f8:91:24:56:
e0:05:87:40:74:93:0e:57:3f:c7:2e:db:f8:79:c7:
65:56:e5:ed:a3:5b:0b:fe:23:45:08:1e:16:de:3f:
3a:1a:1f:8a:6b:ad:b1:1b:9c:0f:d4:c5:0d:77:0a:
6a:3b:f7:24:90:85:bb:c2:6c:0f:0c:64:0e:84:3a:
f2:00:04:df:72:ac:f2:2d:b9:88:fb:f6:1d:08:e2:
56:9f:8f:c9:b7:44:2d:5c:9c:7d:52:2b:f8:da:62:
3e:a7:77:f9:f8:1a:cd:ff:51:04:3f:43:0f:43:b0:
8f:34:b7:1b:1b:c7:07:47:2f:d1:b0:28:95:a6:2c:
6d:b1:c4:52:60:14:16:55:0e:e9:59:d4:bd:ec:99:
4c:ed:f3:31:25:83:64:3b:31:63:6e:6b:bc:ea:36:
e5:c8:d8:89:d7:fe:e5:6e:90:b1:82:de:8f:18:9f:
38:6a:a3:9e:5a:23:83:c0:3d:58:8d:5e:41:3a:3a:
7b:79:34:ea:b4:66:e1:77:02:72:93:76:b9:20:9b:
66:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:0F:F1:C6:8C:D9:FE:64:EE:93:02:9C:EE:3E:77:F2:1D:F3:84:8E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65E884C66A6311F19C9BBDCECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.16.0/24
Signature Algorithm: sha256WithRSAEncryption
69:92:55:b8:ef:33:b4:86:04:a8:c6:10:f7:37:df:02:2b:e4:
1f:f2:a9:9c:f0:91:ed:d8:62:4c:3c:56:63:1f:12:22:2b:ed:
93:da:81:64:bd:10:d0:11:33:bb:a8:1b:66:58:bf:33:03:53:
48:99:9f:6b:c0:6d:33:ca:a8:c3:96:db:5b:c1:a3:cf:36:03:
cb:73:51:31:5d:b0:9a:e5:9f:eb:83:76:48:e3:01:ca:1a:db:
a7:81:51:c4:a9:6e:aa:96:1b:29:39:bc:ae:68:98:cd:07:fc:
69:8a:e8:2c:aa:42:5b:55:6a:47:76:38:9f:92:84:97:4e:e3:
1a:16:98:ce:1a:ca:4d:e9:ea:0e:ad:62:aa:32:ff:b0:af:d6:
20:88:05:47:7f:b7:97:fb:8d:2b:14:d1:66:3a:ff:c7:52:bd:
6c:7d:73:a0:1d:37:c0:97:00:52:82:2b:5c:4d:b1:18:16:a2:
a5:a7:e9:49:ed:b6:65:e0:7a:f1:cc:8e:da:03:95:d2:93:8f:
d2:ed:e0:d4:59:73:5a:46:d4:21:27:db:69:49:66:32:3d:6d:
b2:a1:5d:09:7c:ba:3f:e9:a8:0c:69:0a:e2:17:15:35:21:b3:
e5:9c:04:9c:9e:c5:c6:ed:d1:06:fe:e6:ed:f7:68:27:3c:94:
b7:e2:cb:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:53:55 2026 by rpki-client