Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/671B65F0535411F1926FC214CF1D38B0.roa
File: 671B65F0535411F1926FC214CF1D38B0.roa (raw, json)
Hash identifier: CCJBKLr02uCzhtmgwEvIL6dPiuwEkNdjzS91hEe8iIM=
Subject key identifier: 99:DA:F6:ED:4E:83:BD:60:57:CB:92:F2:B5:6E:8B:99:7C:EB:01:CF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CC58
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/671B65F0535411F1926FC214CF1D38B0.roa
Signing time: Tue 19 May 2026 07:29:00 +0000
ROA not before: Tue 19 May 2026 07:28:55 +0000
ROA not after: Sun 14 Jun 2026 07:28:55 +0000
asID: 147176
IP address blocks: 154.197.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 12 Jun 2026 00:07:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117848 (0x1cc58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 19 07:28:55 2026 GMT
Not After : Jun 14 07:28:55 2026 GMT
Subject: CN=6a0c113c-049c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ba:d5:62:3c:8a:5d:a0:88:be:f5:e9:45:98:
ed:7e:a2:de:7e:f7:77:c3:91:ed:f0:7b:bf:0e:1d:
f6:2a:7f:ca:9a:24:15:32:cb:1e:d5:8f:40:fa:c5:
ae:78:47:6e:50:3b:f1:1c:e8:fc:2b:56:c3:dc:da:
16:b8:37:86:4f:c6:2a:dc:27:dc:87:bd:18:f3:e8:
76:89:03:7d:12:a6:32:bb:ba:8c:0a:1c:80:25:c7:
64:d6:2c:fe:51:29:41:4b:1e:18:06:3e:f8:1d:6e:
ff:34:e1:fb:25:1f:d7:08:38:98:17:68:56:a9:52:
d3:e7:9b:3c:4e:c4:81:39:85:48:64:a5:aa:30:4c:
20:cd:5d:2f:ee:7f:65:53:9a:97:e7:9c:d9:ab:10:
55:6b:c1:23:fd:7c:16:d2:34:45:0e:6e:d4:ca:53:
40:13:38:1e:5c:a2:65:f0:db:94:fa:c7:3d:83:c6:
94:fb:7f:da:ce:aa:77:e4:25:fa:d5:69:e0:70:d3:
a1:91:c2:6e:1c:f7:34:b5:6c:84:66:9e:d8:9c:6c:
cc:83:48:a6:70:11:f1:40:95:cc:b5:1c:ad:97:f7:
78:2e:5c:27:6e:9d:df:3b:42:25:89:87:ce:c6:19:
f0:62:2b:12:d6:b0:7c:36:69:da:5b:db:11:7b:5d:
46:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:DA:F6:ED:4E:83:BD:60:57:CB:92:F2:B5:6E:8B:99:7C:EB:01:CF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/671B65F0535411F1926FC214CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.102.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:a3:24:54:29:c0:a7:e4:6e:3e:59:ae:6b:b3:d8:36:0e:3f:
c0:37:95:93:4c:43:3e:a8:6b:e5:cc:ac:70:25:d0:f8:45:4b:
cb:3c:e1:9a:ca:d0:84:b7:b4:01:34:49:98:dc:7d:46:00:8d:
5e:38:d5:5a:0e:44:0f:58:59:7d:59:5d:a9:7f:e0:4e:87:ed:
e5:97:83:e2:fd:be:b3:d8:ca:49:66:ec:a7:9b:43:2a:8d:01:
87:1f:c4:c1:7c:a8:12:c2:1a:d7:38:98:63:64:a1:10:ba:f5:
69:53:a5:dd:9c:46:1d:8e:5f:24:0b:71:db:99:2b:d1:c1:74:
2f:58:f4:47:1c:1f:00:e7:a0:71:f7:e5:59:68:7b:19:eb:29:
f4:b4:81:60:36:ff:ee:3f:d2:64:36:e6:c4:55:22:f9:c6:33:
90:68:df:3e:32:9d:75:2d:3d:cf:f5:7f:48:6d:18:19:ed:0f:
4d:70:1f:72:72:1a:2b:d3:9d:ee:cb:a0:44:ff:be:db:f3:62:
9f:a3:5e:fd:fc:64:d5:3e:04:9d:19:d1:aa:4b:6f:54:c9:fa:
6b:85:9e:5e:3f:a0:ee:94:47:5b:a7:ea:3a:68:c7:02:e2:c3:
f6:b8:7d:9d:9b:b5:81:19:8a:0d:38:60:b1:e6:ff:a3:6d:e5:
3f:bb:2d:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 10 04:58:41 2026 by rpki-client