Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C903F54488911F1995D90EDCE1D38B0.roa
File: 6C903F54488911F1995D90EDCE1D38B0.roa (raw, json)
Hash identifier: m0yeF+hfJyN7tZ19hxB2Kx4cC3vcBIP8CHRlkerkp1o=
Subject key identifier: 13:08:0E:2D:AE:02:0B:FB:BB:6C:D2:17:1D:1B:02:0B:B0:77:B3:56
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C95E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C903F54488911F1995D90EDCE1D38B0.roa
Signing time: Tue 05 May 2026 13:50:50 +0000
ROA not before: Tue 05 May 2026 13:50:45 +0000
ROA not after: Sat 13 Jun 2026 13:50:45 +0000
asID: 20457
IP address blocks: 154.198.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117086 (0x1c95e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 5 13:50:45 2026 GMT
Not After : Jun 13 13:50:45 2026 GMT
Subject: CN=69f9f5ba-f89c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:83:f7:e5:71:e5:07:ce:2d:2e:d4:66:a7:82:
d1:8c:70:93:72:fa:f6:b6:f5:d0:3c:e5:52:37:f6:
10:92:dc:a3:5d:ad:68:ab:44:a8:7c:4b:c2:30:2f:
25:40:cf:4d:14:08:50:3a:13:79:59:9e:d8:8a:0f:
b6:6e:e7:e9:3f:f6:c0:1a:25:db:0b:b4:7c:42:64:
4e:b1:83:2e:bd:fc:3e:89:ff:c0:97:e8:50:d3:88:
25:da:ff:9e:92:97:35:30:83:1e:be:88:8c:4f:15:
c4:74:68:fd:e5:8e:b6:00:78:2c:39:8c:b4:eb:88:
78:3b:48:a8:b1:51:23:27:6d:39:52:e1:88:6b:51:
f8:4a:4f:72:93:a7:b1:15:6c:b9:8d:f5:71:ac:dc:
ee:3a:ac:1c:40:51:77:db:ee:26:95:03:dd:e3:4b:
4c:95:d5:4c:f2:a5:94:70:e3:2d:0c:1e:a6:66:4a:
04:2b:df:a1:40:3b:97:92:73:64:b4:1c:9f:7a:38:
ec:db:19:66:ed:ee:6a:c9:b1:57:ce:14:f1:ec:ac:
3e:6d:95:9c:09:e0:b4:aa:e1:c8:06:6d:e2:cb:ec:
f3:02:97:0d:87:2e:0f:9a:b3:c5:80:a2:ea:fa:a9:
44:fa:d5:9a:1d:79:f8:c5:0f:54:09:7f:24:60:8c:
5e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:08:0E:2D:AE:02:0B:FB:BB:6C:D2:17:1D:1B:02:0B:B0:77:B3:56
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C903F54488911F1995D90EDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.11.0/24
Signature Algorithm: sha256WithRSAEncryption
91:ee:0e:ec:3f:af:26:f9:33:cc:61:ea:c9:66:b7:f9:3f:5a:
05:30:3d:dc:0e:4e:ba:40:ca:f8:f1:50:7e:a4:20:48:6e:a7:
29:2a:e0:58:43:7a:ed:17:ca:04:23:54:57:09:45:3c:dd:07:
70:95:65:e3:7a:b2:28:76:9a:e3:12:5c:c8:ff:ae:7d:4f:c1:
29:af:9c:f3:30:23:85:71:3d:94:79:d6:f9:e5:3a:e1:2c:8b:
80:a9:9b:d5:c2:16:7e:86:03:67:4f:32:9b:0f:7a:f4:e2:9e:
bd:80:7b:c7:29:3a:cb:98:16:72:4d:b0:48:e4:5b:ad:9c:81:
09:05:4a:14:c8:e3:ba:3c:3c:3e:9e:60:0b:9e:ad:43:8f:f1:
49:4a:c0:24:c4:2d:a6:fd:43:4f:65:ac:7d:c2:8d:d4:ff:7f:
9c:18:67:88:37:5a:f9:ee:3d:cf:f0:d0:1e:ac:6b:77:60:6d:
ec:99:97:78:40:0f:6a:b4:28:75:78:15:d4:92:1e:ad:43:03:
0e:2d:06:be:d5:b1:f9:a5:0a:84:8b:a0:91:f0:4a:23:04:98:
51:6e:47:08:99:c2:61:38:ce:3d:40:96:ea:14:45:0f:28:33:
2a:d5:31:ac:9f:e9:d2:04:37:bd:ac:1b:36:91:1d:26:05:26:
72:2c:05:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:01:57 2026 by rpki-client