Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6671E7761BB111F1998A4AB6DAE4EC9C.roa
File: 6671E7761BB111F1998A4AB6DAE4EC9C.roa (raw, json)
Hash identifier: uT9zqJzCsMaVR9R6Fy6HrAf6UJTdAGGvF+F5eEwtuCA=
Subject key identifier: B1:0F:94:2E:DF:3F:D1:F5:AB:27:24:4F:09:53:F7:B9:AD:24:0A:29
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BE8C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6671E7761BB111F1998A4AB6DAE4EC9C.roa
Signing time: Mon 09 Mar 2026 12:13:37 +0000
ROA not before: Mon 09 Mar 2026 12:13:32 +0000
ROA not after: Fri 09 Mar 2029 12:13:32 +0000
asID: 17561
IP address blocks: 154.202.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114316 (0x1be8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 9 12:13:32 2026 GMT
Not After : Mar 9 12:13:32 2029 GMT
Subject: CN=69aeb971-88b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:7a:a3:13:cf:29:7d:d8:32:5d:02:f3:b3:56:
5b:9b:1f:68:90:0a:ad:2d:72:c6:e0:d0:4f:1f:60:
5d:06:ed:90:f6:b5:5c:d0:ee:c9:1e:16:0a:ba:e0:
48:e0:f2:bf:ca:fa:a8:99:57:33:e8:93:48:77:e5:
2c:22:72:e1:6c:ce:2e:2f:d4:e8:55:34:ca:20:de:
35:ce:56:84:26:f2:0b:d3:1d:54:3d:ea:7e:81:b5:
77:82:a0:85:24:26:7d:76:02:ed:8a:a6:cc:9c:99:
5a:a5:60:e7:ac:34:d9:6f:3e:9b:76:65:6b:99:86:
50:62:11:df:b8:67:88:83:26:cb:96:4e:5b:fc:6e:
b9:73:4e:a6:e9:39:fd:37:f6:f6:24:36:07:49:08:
5d:8d:2b:e9:b7:e4:80:82:6e:84:a3:2c:ea:f2:71:
ff:9c:0b:f1:0e:7f:41:4f:07:0c:a4:f7:5f:61:8b:
b3:f4:f4:83:e2:a4:ea:ea:69:b7:80:93:da:57:56:
33:c5:54:b4:6f:a6:4f:26:4e:b2:e7:c3:90:29:af:
ac:ad:4c:2d:62:99:ed:97:92:4d:64:a4:16:5c:2a:
86:80:27:aa:8d:3b:b0:d9:54:40:6d:af:d5:8a:01:
56:8e:95:f3:21:ae:fe:86:f5:95:3b:ae:ab:0b:da:
1e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:0F:94:2E:DF:3F:D1:F5:AB:27:24:4F:09:53:F7:B9:AD:24:0A:29
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6671E7761BB111F1998A4AB6DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.0.0/24
Signature Algorithm: sha256WithRSAEncryption
96:86:43:a0:c2:fa:cb:80:82:8d:f5:73:cb:b5:1e:56:ff:d8:
1b:30:bd:27:bd:87:39:c1:1b:96:24:2f:6f:9b:f8:49:4b:64:
cd:2f:14:a9:2e:42:49:69:97:b9:90:b8:be:16:a9:5d:79:63:
93:b6:4b:f9:33:af:b9:64:09:65:41:65:f3:7f:4f:86:d4:40:
70:1d:14:9a:20:38:bd:a9:c3:cc:86:7b:8d:b9:f0:82:02:a3:
c4:ce:2e:72:24:ae:f3:68:9b:c7:68:73:88:22:5f:8b:ee:ed:
16:f6:fb:18:87:ea:ea:af:c4:38:bd:be:6e:17:6c:3b:47:e1:
f6:00:d9:02:06:25:fa:70:d3:43:b9:62:f9:07:ac:2b:cb:2d:
3e:76:98:c6:05:db:36:09:ed:c2:90:f7:b6:a0:6b:25:bd:f4:
a7:ad:4f:40:4f:67:4b:eb:0f:42:3b:cc:f7:49:1c:76:ca:60:
36:ca:12:0e:ad:04:c3:6c:72:37:34:c9:52:8d:46:7f:36:fd:
e4:6e:34:ce:01:29:a2:ae:19:d4:56:3c:c7:c3:02:06:50:8e:
01:20:15:fa:df:e4:8b:69:9a:f4:cc:f5:27:38:81:d6:17:14:
10:f5:de:87:1b:21:c5:fa:e1:53:77:21:91:da:ad:7d:33:70:
34:e5:ff:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:16:07 2026 by rpki-client