Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6CAE668469A211F1B76F10B5CE1D38B0.roa
File: 6CAE668469A211F1B76F10B5CE1D38B0.roa (raw, json)
Hash identifier: 4YQDUlR8a5NDfpeCIhM88cW+7aHmqD3AEuG44W7Q0Tw=
Subject key identifier: 15:88:6A:F5:47:DA:6F:39:F8:C2:25:BB:51:51:CE:6B:9C:8E:AA:F7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D36B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6CAE668469A211F1B76F10B5CE1D38B0.roa
Signing time: Tue 16 Jun 2026 16:42:56 +0000
ROA not before: Tue 16 Jun 2026 16:42:51 +0000
ROA not after: Thu 03 Sep 2026 16:42:51 +0000
asID: 149440
IP address blocks: 154.81.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119659 (0x1d36b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 16 16:42:51 2026 GMT
Not After : Sep 3 16:42:51 2026 GMT
Subject: CN=6a317d10-83e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ee:67:dd:8e:22:6b:88:29:7a:cb:a8:ed:52:
51:b2:67:b8:ef:2a:02:18:35:06:23:37:13:8c:ba:
ac:d3:3c:2b:db:34:79:d1:29:53:7a:1f:6b:9f:af:
3b:d6:ae:92:17:dd:4e:0b:ad:94:b3:30:70:28:81:
21:73:d0:fb:e1:7f:43:c2:bb:f0:4d:51:1f:e1:39:
f4:47:c6:6b:4a:ba:cc:d7:6b:c0:fc:c6:66:fb:7f:
ee:e4:7d:03:c2:8d:41:68:64:ce:f2:2b:f9:3b:97:
56:28:11:2b:b9:4f:68:d1:6b:68:58:3f:4d:2d:da:
b6:e6:c4:4c:56:40:59:5a:95:4d:86:11:c9:a0:10:
b4:7e:b5:70:7b:cb:e3:95:1c:7b:e6:dd:a9:81:64:
16:8c:20:b6:07:bd:35:3d:be:91:06:3a:86:c0:9d:
9d:cd:24:8e:7f:c4:5d:7a:c7:23:d3:92:19:e2:53:
81:99:30:3b:40:d8:d5:c8:00:35:9a:db:dc:ba:fb:
87:ed:b4:55:5d:54:0e:60:e3:ae:9e:0d:d8:8a:91:
65:ff:71:6b:c5:f5:b4:7c:10:03:4e:81:65:70:d3:
d0:0d:e0:54:23:fe:fb:ed:11:ed:5b:d4:e3:cd:73:
cf:e3:db:16:48:eb:db:e2:b8:4c:2b:42:0f:f2:d1:
63:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:88:6A:F5:47:DA:6F:39:F8:C2:25:BB:51:51:CE:6B:9C:8E:AA:F7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6CAE668469A211F1B76F10B5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.220.0/24
Signature Algorithm: sha256WithRSAEncryption
06:38:ef:2e:90:1e:54:c1:ab:38:c0:9d:c9:d7:c4:11:25:bb:
ab:fb:15:b9:14:eb:bf:4f:71:ca:aa:17:c0:5b:ab:46:8e:ff:
9b:79:bc:56:05:6f:b9:28:77:f9:5e:9c:c7:2f:75:92:ba:89:
5b:6f:b8:89:9d:72:50:25:74:dc:c6:13:b0:74:79:9f:c1:4d:
7b:88:b7:35:6a:5b:76:a3:d4:54:aa:ca:86:75:0f:da:1c:15:
86:6b:0a:4e:81:cd:14:a4:96:64:f4:67:cd:bb:f4:5b:2f:d7:
40:98:6e:3c:c9:81:84:9a:8b:0e:4d:45:d2:45:c5:73:50:8d:
21:c8:ec:09:dc:b1:7a:3a:b6:c1:2d:69:4f:06:99:0b:4b:66:
00:56:99:c6:20:da:c4:b9:7e:f8:26:c1:98:51:64:aa:cf:90:
9d:7b:df:18:02:eb:8d:8e:54:97:dd:9b:71:ec:e5:56:51:fd:
c8:07:f0:55:33:f5:53:88:88:f8:84:20:4a:41:81:37:e5:ef:
f5:37:6c:ad:47:77:27:26:c9:ae:36:be:8f:40:29:59:b5:7a:
53:7a:f4:86:83:fd:e7:d4:46:2e:4c:e5:c4:b6:62:b2:4c:a2:
47:96:bc:5a:ee:d2:95:5f:e1:7f:20:d0:87:ff:d8:58:31:84:
15:14:69:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:53:45 2026 by rpki-client