Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6963E29A4A1411F197E73ED4CE1D38B0.roa
File: 6963E29A4A1411F197E73ED4CE1D38B0.roa (raw, json)
Hash identifier: eJ0ziNQDI4nZrpTPOIk+UHpZfUxPVsLRePhBtjvdzh8=
Subject key identifier: C7:E5:7C:CB:FD:82:0F:67:17:0B:8A:60:A0:88:19:00:15:FD:16:93
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C9DE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6963E29A4A1411F197E73ED4CE1D38B0.roa
Signing time: Thu 07 May 2026 12:58:16 +0000
ROA not before: Thu 07 May 2026 12:58:11 +0000
ROA not after: Sat 20 Jun 2026 12:58:11 +0000
asID: 200213
IP address blocks: 154.222.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117214 (0x1c9de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 7 12:58:11 2026 GMT
Not After : Jun 20 12:58:11 2026 GMT
Subject: CN=69fc8c67-e833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:1d:5f:d1:bb:1d:97:88:06:89:03:8d:c3:a7:
24:5c:74:2b:3f:5b:e4:c9:18:44:a3:02:04:1e:5c:
95:7f:8c:bd:50:1c:b3:c2:1b:18:76:e8:d4:6b:7a:
82:41:93:12:62:8c:92:7e:20:e2:f2:a2:63:fb:cc:
14:45:48:2f:7f:a4:ac:2a:0c:a0:c9:fb:aa:d8:81:
63:44:a6:9d:af:f7:c5:77:21:5f:7a:19:9b:48:33:
e3:87:4b:69:32:28:65:db:5e:47:d2:99:8b:2f:f9:
a3:d6:c8:23:c8:07:92:f8:d1:a2:48:a5:eb:e2:af:
94:0c:00:1b:56:7b:2f:17:b9:5c:11:07:2d:9e:88:
3c:2a:0f:e2:ab:e5:84:1e:59:e3:4e:78:c2:59:ec:
67:7a:f5:95:71:fb:b2:bd:52:4b:85:ca:f0:e6:78:
ea:5c:6e:89:0c:d6:65:f1:3f:a7:83:8f:18:1b:3f:
84:aa:2f:6b:88:87:3b:f7:a8:78:a9:f5:80:a0:2a:
e2:60:53:61:3c:fa:51:4b:97:53:ee:64:03:9d:6d:
8c:f3:c7:2c:ed:96:45:8e:74:e1:b2:1d:5f:ee:27:
d1:19:5c:26:28:44:d6:af:e1:87:70:bd:32:f5:4d:
0a:10:e3:d8:f9:5c:2b:4d:d6:52:f5:a1:c8:7b:93:
57:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E5:7C:CB:FD:82:0F:67:17:0B:8A:60:A0:88:19:00:15:FD:16:93
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6963E29A4A1411F197E73ED4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.79.0/24
Signature Algorithm: sha256WithRSAEncryption
09:e8:8b:91:e2:92:fe:97:2f:5e:c2:24:8f:59:e5:65:d0:1b:
45:39:8d:9e:94:28:7a:4d:d7:53:ff:c8:7c:9b:cd:31:43:5f:
f4:97:1d:e0:3b:e1:1f:2a:ec:42:56:4b:51:d4:95:6b:49:6a:
8a:d1:4f:a0:76:d2:23:36:8e:b4:7f:41:ea:65:37:d5:89:49:
dc:90:07:89:93:8b:69:34:41:29:f9:4f:bb:2b:d9:f4:f3:d2:
82:13:1e:80:88:f4:d2:12:75:c3:dc:23:b3:da:d8:61:78:25:
15:90:d0:e2:08:36:26:3e:1a:45:7f:ef:43:39:a6:6e:28:05:
16:ea:52:1f:9f:57:9a:f5:7b:20:f0:35:86:c7:b6:a7:0d:50:
16:f6:5e:f1:8e:dc:93:4b:e1:3e:cc:6a:06:6c:19:fc:23:29:
b4:83:6d:05:0b:9b:10:d2:d4:2c:5b:ea:30:a0:39:2f:9e:dc:
e5:ed:18:0b:96:fc:b4:30:42:ac:60:a1:f5:75:fe:28:b2:98:
50:e6:de:fb:c5:32:76:3e:62:f3:fd:49:5e:13:3c:93:45:c6:
ba:81:7b:fb:35:92:a1:fd:36:ab:11:fe:e2:db:de:a0:7e:69:
79:3b:7e:78:a8:c3:51:e3:b4:14:94:9c:d8:da:c7:2d:54:29:
b0:aa:6d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:44 2026 by rpki-client