Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6836DB16488E11F19846CC0BCF1D38B0.roa
File: 6836DB16488E11F19846CC0BCF1D38B0.roa (raw, json)
Hash identifier: aIdhW6+R5sfX+DuZgIwuKdqLWLl9XK2IMaBKx/MNKhc=
Subject key identifier: A3:0C:1C:1E:FB:6B:9F:1A:39:D4:F9:0E:4D:DA:A4:CC:86:20:91:E9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C962
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6836DB16488E11F19846CC0BCF1D38B0.roa
Signing time: Tue 05 May 2026 14:26:30 +0000
ROA not before: Tue 05 May 2026 14:26:24 +0000
ROA not after: Thu 18 Jun 2026 14:26:24 +0000
asID: 395886
IP address blocks: 154.200.128.0/24 maxlen: 24
154.200.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117090 (0x1c962)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 5 14:26:24 2026 GMT
Not After : Jun 18 14:26:24 2026 GMT
Subject: CN=69f9fe16-bed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:87:ca:9a:83:ef:e2:22:e7:35:56:ae:63:f6:
22:68:57:38:07:36:3e:24:34:6f:75:fd:af:42:19:
3d:9c:a5:2a:dd:af:97:67:b8:79:2b:b5:25:6b:71:
a9:0e:d7:cc:16:81:53:42:3d:52:db:0c:ba:8e:00:
b1:b0:ba:08:18:e3:68:f3:da:29:d4:18:ab:6a:a1:
46:84:23:c6:ed:a5:6b:22:fb:69:9e:bd:2d:2c:6e:
02:40:7c:62:da:fe:9a:05:13:f7:a1:17:02:a3:35:
f8:44:64:ec:af:b1:f6:e5:43:aa:b9:e0:30:c1:c8:
69:0a:ef:e0:2e:c4:de:d1:a5:cf:39:d0:59:ad:63:
fb:57:cf:9a:ed:d2:7b:ad:ea:0a:cd:4d:5b:55:aa:
0b:b6:7f:66:2c:41:02:30:94:b6:64:7c:b7:6f:6b:
c9:bb:5c:82:2a:94:d4:b8:4a:cb:9a:75:b3:58:5a:
1b:a5:4e:a8:9d:c4:a9:30:24:7e:c8:b1:70:94:a1:
bf:88:8b:c8:14:8c:75:14:54:b2:57:e6:22:ba:9b:
3b:af:2b:ca:e2:32:b6:cb:5e:32:bf:38:6d:01:f3:
77:e3:10:6f:a3:0e:45:0a:e6:bf:1a:e1:0c:6e:a5:
9a:7c:b3:e8:3f:88:73:38:96:9d:ca:3c:82:53:cc:
46:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:0C:1C:1E:FB:6B:9F:1A:39:D4:F9:0E:4D:DA:A4:CC:86:20:91:E9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6836DB16488E11F19846CC0BCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.128.0/24
154.200.132.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:6c:6f:0e:48:96:d6:5c:c9:d5:38:75:a5:f3:50:03:fa:31:
33:40:19:e7:6b:31:27:93:56:e7:89:7f:8a:1d:e0:65:e7:d6:
bf:2c:e1:f1:ec:d6:20:e8:6e:88:79:9e:99:8c:0d:8e:07:17:
ed:57:73:2e:25:03:ea:80:a5:da:29:cd:97:e0:5f:4a:33:49:
a2:e1:a3:ee:ce:4e:61:13:9a:72:e7:79:6d:68:0f:32:71:c8:
e4:50:43:37:36:15:d6:93:24:32:20:4e:ba:9c:08:a7:15:13:
5c:bd:b0:26:33:45:4d:13:e9:12:80:59:1c:fc:88:1a:6c:a2:
d7:e9:95:af:0b:1d:28:71:21:6f:36:bd:fd:53:c3:c7:61:fc:
37:4b:06:1f:77:23:9d:6b:48:17:8d:05:63:21:13:49:c6:b5:
80:31:07:e5:b7:c8:26:df:40:4e:58:28:d3:65:39:95:98:94:
38:73:75:24:13:56:ff:44:2d:9c:6a:69:61:bf:88:fc:b4:21:
b5:8b:6a:de:ff:18:8b:a7:67:c0:57:e7:50:11:9c:95:74:9a:
49:9f:5c:05:f5:c8:12:f2:2d:bf:a4:f8:19:d9:ec:64:10:3e:
ac:b2:40:51:a0:ae:d7:92:2e:ea:5e:07:f7:c2:4d:fb:dd:2d:
51:b1:ad:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:01:57 2026 by rpki-client