Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D24126868C511F19B889FF3CE1D38B0.roa
File: 6D24126868C511F19B889FF3CE1D38B0.roa (raw, json)
Hash identifier: yyjlAH+ZFFVQaK5ivVaGsrtCB5WvTvp8ajCJ48H326c=
Subject key identifier: CB:A5:A2:1C:49:E0:71:84:F0:19:89:84:D7:D3:AB:FE:EB:4E:BF:13
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D2D7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D24126868C511F19B889FF3CE1D38B0.roa
Signing time: Mon 15 Jun 2026 14:20:58 +0000
ROA not before: Mon 15 Jun 2026 14:20:53 +0000
ROA not after: Fri 10 Jul 2026 14:20:53 +0000
asID: 401615
IP address blocks: 154.83.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119511 (0x1d2d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 15 14:20:53 2026 GMT
Not After : Jul 10 14:20:53 2026 GMT
Subject: CN=6a300a4a-2fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0c:90:7f:cb:73:86:10:ba:11:f7:e5:83:64:
6a:1a:29:6e:6e:49:46:43:cf:c4:ee:56:49:e4:44:
de:71:d7:1a:c2:2f:ba:f1:de:3b:05:2e:58:74:10:
cd:70:ca:76:0b:b0:75:ac:39:6c:44:9b:a2:31:cc:
c7:96:bf:8a:4a:53:89:a1:6a:1e:d3:9d:44:ed:35:
81:0a:ef:5b:7c:28:14:a9:8e:2a:bd:8d:8e:c7:ba:
ab:c6:63:26:df:8a:db:b7:2c:9f:b6:b7:7f:d2:ae:
50:61:c1:fa:98:f6:cb:3c:b6:d4:71:bb:57:78:8b:
99:36:74:90:69:91:9a:d3:a8:7b:46:12:b2:dc:a6:
08:a1:4d:05:63:9d:0f:ef:fc:c6:30:96:25:6b:a8:
e7:34:2d:50:00:ee:01:ca:a4:90:16:67:78:8b:47:
bc:2d:94:a6:33:ea:9d:71:37:33:87:17:76:9c:ad:
9e:21:ff:80:79:7e:d3:ab:06:30:bb:a3:03:17:82:
ef:58:6d:04:73:c8:68:29:6f:73:3a:24:a7:5a:0a:
61:88:fb:f2:b2:7b:57:32:4c:86:a5:fa:4e:01:35:
07:89:c8:21:50:9b:1b:4a:71:32:20:0c:f0:cf:66:
e4:55:8f:e5:37:cd:b5:73:f3:97:34:68:de:2e:81:
48:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:A5:A2:1C:49:E0:71:84:F0:19:89:84:D7:D3:AB:FE:EB:4E:BF:13
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D24126868C511F19B889FF3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.98.0/24
Signature Algorithm: sha256WithRSAEncryption
01:8e:25:e9:06:f7:da:d0:5e:ac:52:89:e7:4c:23:1d:35:b2:
3e:2b:ad:78:ee:9f:09:48:44:0d:56:16:85:bd:74:8c:5a:c5:
a3:ac:30:74:1e:e6:c9:27:a6:37:3c:46:3a:ee:9a:9b:2f:c0:
df:27:34:a9:33:6e:8f:93:8a:3d:3e:75:14:ba:a8:76:04:74:
6e:92:be:f9:48:76:ee:14:34:a9:e4:77:d2:94:45:bc:a9:de:
1e:7f:ca:e5:cd:ad:03:15:5c:1e:f2:1f:c3:15:d9:c3:af:cd:
a7:23:cc:45:ed:ad:8c:64:a3:6d:32:5c:3a:25:c9:da:f7:52:
9b:6a:4e:10:ad:6a:90:74:c9:33:2f:05:ef:68:6c:c6:23:5d:
f6:a3:86:f0:bf:3a:c6:18:d4:62:cb:89:da:e5:07:63:9d:66:
2c:66:6c:81:94:02:82:4b:08:f5:d8:fa:9b:57:eb:26:79:da:
b3:d1:d9:42:f1:84:8a:03:ff:ff:fa:d4:de:c1:3f:45:0e:e4:
2a:59:38:f2:76:56:a6:46:b2:7e:93:92:d3:e8:9e:b5:63:07:
e9:7c:ac:2e:b1:11:7a:09:6f:18:7e:42:56:a7:3d:b6:8c:06:
f3:db:4e:f7:7d:49:c1:64:2d:21:29:f2:41:14:da:c5:17:78:
b2:53:81:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:51:24 2026 by rpki-client