Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D1F8184574611F1A410BBABCE1D38B0.roa
File: 6D1F8184574611F1A410BBABCE1D38B0.roa (raw, json)
Hash identifier: DwOFP/abD0+MNiFts0YoyG5O5NbcTRSa+k6xrX2Vojs=
Subject key identifier: 59:80:0B:51:28:DC:17:58:54:AB:E6:6B:1F:4D:36:20:82:4B:CE:0A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CEB1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D1F8184574611F1A410BBABCE1D38B0.roa
Signing time: Sun 24 May 2026 07:59:02 +0000
ROA not before: Sun 24 May 2026 07:58:57 +0000
ROA not after: Tue 30 Jun 2026 07:58:57 +0000
asID: 40779
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118449 (0x1ceb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 24 07:58:57 2026 GMT
Not After : Jun 30 07:58:57 2026 GMT
Subject: CN=6a12afc6-f2b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0e:25:8a:bf:44:3d:3d:60:a3:d6:81:e0:d9:
d4:6c:45:3a:2d:60:79:32:18:03:8f:60:29:85:a9:
12:7a:06:02:74:8a:3b:b1:47:7a:a2:7a:6d:93:5f:
07:0e:7a:7c:dd:c7:61:74:1b:54:99:28:f9:c4:c0:
6a:92:0c:b2:0d:71:f3:e0:9e:54:5e:2f:92:65:8d:
7a:c9:44:f7:ab:5e:54:68:1b:ef:c6:0f:b5:87:4a:
28:b1:c0:11:a8:da:a2:3d:6b:69:d7:4d:00:12:c8:
98:a3:27:0e:24:63:5b:02:2c:7a:06:fd:44:31:1b:
a2:19:3c:ab:3f:9c:ca:d4:a0:7b:f2:e7:77:12:a1:
47:89:f2:53:5b:97:f9:df:4d:4f:fe:fa:10:08:5d:
87:e7:03:ff:82:96:8c:16:79:ed:ba:39:36:83:b2:
ea:0a:4d:7d:78:f6:2a:94:5a:3d:b2:47:db:39:e0:
c2:2b:ce:6a:67:58:da:63:a7:04:c7:18:73:a5:a7:
70:98:85:19:b0:f3:75:f7:b7:a9:e7:b1:d0:c6:5b:
89:80:0b:d8:1f:ca:14:d6:6f:de:ba:cd:14:54:de:
26:16:09:5e:06:4f:cd:cb:92:77:a6:8f:5c:78:26:
45:53:a6:f9:c4:0f:3d:fd:8e:09:de:89:ca:d8:ad:
1d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:80:0B:51:28:DC:17:58:54:AB:E6:6B:1F:4D:36:20:82:4B:CE:0A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D1F8184574611F1A410BBABCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
45:bc:16:a8:21:34:f5:ba:36:26:2c:61:a8:84:5b:f7:78:d8:
78:68:aa:12:5a:1f:09:21:39:dc:16:b3:dc:a4:86:f6:0f:71:
da:44:da:a7:ee:98:fd:83:a1:1a:0a:53:7e:8e:90:ac:2f:45:
1e:99:12:c0:e3:c9:65:e8:11:66:90:93:43:22:21:f3:6d:0a:
6e:c3:e5:46:51:21:a5:44:83:49:59:09:0f:64:8f:0a:03:54:
d5:92:e5:bd:a6:c4:66:a3:6a:14:38:9e:5e:d9:fe:79:7d:46:
e1:5c:e4:8b:44:76:24:06:c9:df:1c:5d:98:b3:40:1d:23:f5:
79:36:3d:73:35:e1:20:9e:d1:41:15:47:fd:0a:f3:f2:15:64:
bf:51:e0:67:69:6d:af:08:94:db:a8:73:43:4b:61:10:ca:b0:
ea:30:b7:d0:41:b9:11:c2:cd:0f:b7:38:a2:8b:0e:84:43:0d:
bd:23:11:a8:7a:e1:21:5e:ea:72:d0:2e:20:79:d2:e0:54:3a:
85:b0:ff:d1:e6:89:7a:22:34:0d:fb:df:3a:f5:06:0f:37:02:
bf:fd:6c:5c:e9:a2:05:92:4a:e3:4a:b1:9c:2f:05:52:23:ec:
da:bb:b5:ce:4f:2c:f7:b1:f8:82:6b:1b:80:0c:ef:b6:1d:73:
ed:7b:90:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:21:43 2026 by rpki-client