Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C00CA5616D711F1923E9BEDDAE4EC9C.roa
File: 6C00CA5616D711F1923E9BEDDAE4EC9C.roa (raw, json)
Hash identifier: daKDBNZWrY4DKgpaSxAjY+ttnQa3zjqF11XREc/k5Jg=
Subject key identifier: 09:F7:24:4C:3F:59:48:05:12:43:35:60:99:6B:66:6B:B3:D4:F3:5C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BD10
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C00CA5616D711F1923E9BEDDAE4EC9C.roa
Signing time: Tue 03 Mar 2026 08:03:11 +0000
ROA not before: Tue 03 Mar 2026 08:03:07 +0000
ROA not after: Sun 15 Mar 2026 08:03:07 +0000
asID: 139880
IP address blocks: 154.206.128.0/18 maxlen: 24
154.209.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 14 Mar 2026 21:34:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 113936 (0x1bd10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 3 08:03:07 2026 GMT
Not After : Mar 15 08:03:07 2026 GMT
Subject: CN=69a695bf-2801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:10:6b:d8:20:82:ed:79:d4:e0:7a:9b:e9:b6:
a6:85:4e:2d:f2:ab:ff:09:1b:f2:e5:4a:30:7b:57:
a6:86:15:eb:76:3e:9b:35:07:21:2d:00:30:0b:24:
24:ed:34:6b:23:c4:49:fd:ed:55:5d:43:da:4a:25:
8c:c2:4f:b4:d1:79:a6:d9:e5:56:fa:89:80:10:93:
be:97:d9:dd:39:4e:e1:8f:a0:6d:29:5b:01:5b:e0:
32:67:5b:c5:3f:2f:d4:d1:2f:c9:83:d0:90:6a:25:
c7:15:d2:65:27:0a:30:40:a0:b6:7c:26:87:73:58:
ab:b9:9a:46:f2:91:a4:ee:d1:75:13:ed:39:9c:11:
81:7b:52:13:f8:dd:aa:fe:d4:ca:d5:d9:a5:0b:a0:
51:09:89:4a:ba:7f:36:45:28:3e:d3:15:f6:64:2c:
66:a2:3b:65:8a:6f:d4:ff:9f:a9:54:88:36:b3:e4:
ba:62:16:0f:62:b8:ed:13:84:1a:72:39:3b:4e:b8:
e2:2c:76:01:a7:4f:84:be:72:4f:5a:57:aa:92:5d:
cd:e4:af:5c:e3:3c:c0:83:0e:80:27:12:96:a8:fb:
02:9b:49:84:3b:fb:2a:fa:07:32:85:16:24:b2:e2:
4b:8b:93:1a:07:d4:11:10:eb:fc:6b:bf:45:0c:76:
06:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F7:24:4C:3F:59:48:05:12:43:35:60:99:6B:66:6B:B3:D4:F3:5C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C00CA5616D711F1923E9BEDDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.128.0/18
154.209.160.0/19
Signature Algorithm: sha256WithRSAEncryption
8c:c3:f7:13:e9:49:0c:74:49:0a:e4:6e:93:b3:5b:69:d4:03:
f5:ac:01:9c:0e:9f:30:6d:38:09:25:d6:2e:48:2b:3d:7d:af:
13:5d:12:c1:1c:92:e9:9b:09:3e:80:01:80:11:c3:17:d9:fb:
53:2e:9f:26:18:85:79:4f:6d:a4:91:8b:b4:1b:81:bf:2b:db:
28:f8:70:ef:55:a8:a6:ac:93:7e:41:b4:27:82:15:26:1f:ad:
03:6d:93:09:a6:1d:61:66:3e:78:74:af:c3:3f:2f:6d:4b:2a:
b2:6f:d5:ef:13:4b:3f:f9:31:42:42:df:69:b8:e9:bb:3c:94:
64:81:be:07:6b:01:49:0a:ca:ec:9a:5d:c3:38:e1:bb:03:77:
1c:9f:c7:3d:d3:e8:c7:3b:29:2b:6e:ee:e7:c6:29:61:fa:5e:
05:19:b1:67:5c:ad:93:56:58:33:4e:f2:7f:60:83:57:da:b3:
45:53:9b:42:52:fa:24:8f:1f:4d:ce:cc:10:21:b9:c0:a6:c1:
a4:fd:c2:56:9c:dd:c1:04:2f:df:77:0d:32:1e:a3:3a:2e:4c:
3b:8e:c4:a9:e0:0d:0b:9f:05:8e:76:e6:16:19:b7:f8:8d:82:
7b:ca:c8:42:99:93:50:ef:e2:2d:eb:ff:d4:c5:7c:96:b3:4f:
65:9f:97:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 01:26:23 2026 by rpki-client