Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C0B840C69B911F189A5C3BCCE1D38B0.roa
File: 6C0B840C69B911F189A5C3BCCE1D38B0.roa (raw, json)
Hash identifier: Tfv3QBqZHKNbM58rddOGYL3dG9K1CTVcqcq6cPcFvTo=
Subject key identifier: 3F:39:A7:6F:B7:A7:DA:B1:89:B0:C5:B9:09:A9:13:3C:B6:E7:8E:AD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D391
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C0B840C69B911F189A5C3BCCE1D38B0.roa
Signing time: Tue 16 Jun 2026 19:27:33 +0000
ROA not before: Tue 16 Jun 2026 19:27:29 +0000
ROA not after: Sat 25 Jul 2026 19:27:29 +0000
asID: 174
IP address blocks: 154.214.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119697 (0x1d391)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 16 19:27:29 2026 GMT
Not After : Jul 25 19:27:29 2026 GMT
Subject: CN=6a31a3a5-43a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2b:82:ef:5e:c3:bb:2f:3b:56:ca:22:a8:14:
b3:0c:fa:02:b3:ab:46:b7:9c:54:3c:81:ca:ba:08:
74:ff:ec:b4:11:d5:23:6a:17:3e:32:15:5a:49:af:
72:fc:99:9b:2c:a6:68:2f:da:39:68:02:86:3d:4a:
1c:ca:b4:c6:68:0a:a5:a2:b0:92:3b:2a:f2:e7:f5:
52:cf:88:5e:b7:29:83:63:7d:ec:8d:24:87:74:d4:
39:58:95:f0:7c:cc:be:64:96:23:20:ba:7c:bf:ac:
e8:1a:14:a4:e8:99:f9:5e:51:a5:cf:57:03:db:d4:
f8:bf:8c:95:75:b0:03:7f:b2:80:4b:3d:2e:c4:e0:
82:05:da:16:19:96:b8:ef:c4:27:e4:d7:aa:3a:b9:
dd:94:ec:10:eb:31:40:d7:cc:8a:3d:6a:29:19:8e:
ab:27:55:14:d8:f8:7e:d5:c8:45:5f:33:d0:4b:65:
5b:94:c9:6c:11:e6:24:21:d8:4a:7f:65:bb:21:0a:
87:ec:f4:33:3c:45:a9:b1:5e:47:d1:5d:4c:f4:b0:
a5:9b:46:ae:3c:a1:b7:69:3f:38:52:d4:8e:45:d7:
d3:e2:90:0e:4d:9f:cf:7f:db:23:b7:f1:43:c3:c7:
f2:97:db:a5:4f:70:06:ad:1a:31:74:23:a0:c0:96:
00:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:39:A7:6F:B7:A7:DA:B1:89:B0:C5:B9:09:A9:13:3C:B6:E7:8E:AD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C0B840C69B911F189A5C3BCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.0.0/24
Signature Algorithm: sha256WithRSAEncryption
46:74:4f:05:0d:94:0f:f3:3e:d8:93:e2:55:d7:76:bc:bc:ac:
7a:f2:92:df:0e:3f:88:48:3c:08:6b:af:6f:e0:68:ac:a4:09:
8e:bf:f2:13:45:a9:ab:fa:7c:e5:7d:a4:f7:f5:19:39:2b:d7:
59:2c:3f:5d:e9:f6:61:54:98:82:33:c3:e2:49:92:e6:38:d3:
13:b2:66:e7:9a:ff:f6:db:b5:d2:1b:42:0a:56:e9:09:c1:b6:
1f:20:04:33:66:d8:d1:3e:fa:e2:dc:4a:ac:d1:31:12:7d:26:
e4:7f:d6:d4:90:d5:28:ec:4d:91:b0:3f:32:f8:4b:61:45:e6:
45:ab:5c:51:f5:6a:90:f9:f1:01:5b:7f:a3:7a:34:c6:cd:a6:
89:c4:93:af:f5:ba:75:e1:ba:06:ff:91:53:b0:7b:1b:1f:e0:
9d:50:9d:6f:27:57:c7:d0:59:4a:3e:52:20:05:1b:04:36:1e:
60:60:cc:77:e4:ca:5f:af:00:7c:d0:54:1e:7d:f1:f7:24:62:
68:af:8a:9d:87:ab:43:69:f1:39:a7:34:f5:80:2a:3c:1b:ec:
62:f6:2f:d5:d0:10:59:86:f0:70:c7:03:b3:b9:66:e3:87:c9:
7f:0a:3d:6e:cc:4c:36:8f:23:20:a4:09:08:18:3d:6b:3c:d4:
5a:dd:f5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:53:16 2026 by rpki-client