Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D8A9580707011F1BD849DE1CE1D38B0.roa
File: 6D8A9580707011F1BD849DE1CE1D38B0.roa (raw, json)
Hash identifier: GMREwVeXjs1/BpOVxEToybxaz1Ppx6lIJ6Tmv/wFvmk=
Subject key identifier: 4D:CB:21:F2:99:8C:45:8E:D8:A9:95:79:1D:3F:02:C8:23:22:D8:63
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D516
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D8A9580707011F1BD849DE1CE1D38B0.roa
Signing time: Thu 25 Jun 2026 08:32:40 +0000
ROA not before: Thu 25 Jun 2026 08:32:35 +0000
ROA not after: Sat 01 Aug 2026 08:32:35 +0000
asID: 62240
IP address blocks: 154.223.218.0/24 maxlen: 24
154.223.219.0/24 maxlen: 24
154.223.220.0/24 maxlen: 24
154.223.221.0/24 maxlen: 24
154.223.222.0/24 maxlen: 24
154.223.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 29 Jun 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120086 (0x1d516)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 25 08:32:35 2026 GMT
Not After : Aug 1 08:32:35 2026 GMT
Subject: CN=6a3ce7a8-6588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a4:98:b3:8e:46:f8:a1:11:b2:d6:7f:d0:57:
58:80:d6:ed:8c:92:62:71:01:c0:a1:dc:e7:5b:73:
a9:82:20:eb:e7:6e:6e:f8:a1:3d:8e:ba:d3:ca:94:
f9:ac:e0:fa:1c:3e:a9:53:ab:b4:b9:f7:b0:ea:de:
0f:91:17:b4:db:23:a6:28:41:cb:b4:5a:ec:93:cd:
c7:1a:17:23:3b:20:64:04:a0:e8:b9:09:55:a4:6c:
f0:37:ad:67:32:ab:1a:26:c2:04:61:9f:2b:d4:8c:
25:5f:92:c3:a5:c7:4d:59:89:c8:3a:db:c2:5b:b9:
e3:c7:d5:12:a4:19:75:95:0c:9b:71:6f:d4:2b:15:
88:d6:86:ff:0d:c4:f3:73:31:a8:c7:6f:14:1e:44:
57:f3:f5:d6:90:cd:e4:a5:a5:01:49:44:98:04:35:
2f:21:1c:52:f0:3f:41:38:87:11:cd:6d:45:ae:63:
9e:83:11:23:b8:94:d7:e8:b9:8c:5b:25:a7:b2:38:
06:ef:c1:6e:38:29:d8:fd:eb:86:2d:3a:f3:fd:71:
0d:57:7e:27:bc:7b:7b:ff:5c:ab:34:33:21:8e:f4:
14:b0:81:de:9d:0f:3c:f1:78:d6:f5:42:dd:05:4f:
7a:6e:d6:f8:08:77:0a:b1:12:fc:0e:89:ad:3a:f6:
fa:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:CB:21:F2:99:8C:45:8E:D8:A9:95:79:1D:3F:02:C8:23:22:D8:63
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D8A9580707011F1BD849DE1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.218.0-154.223.223.255
Signature Algorithm: sha256WithRSAEncryption
64:7d:52:c6:0d:cd:f5:80:64:c1:b8:24:8b:2e:e0:0b:6c:01:
b8:33:0c:50:89:d8:7b:2f:c2:8a:46:04:0d:ea:c3:81:56:ff:
17:eb:7f:c3:a4:12:5e:a2:6d:f9:2f:f0:83:cf:dc:10:3d:ff:
cc:12:fb:15:26:5f:e9:80:c1:da:1e:da:0c:93:63:2f:b7:8d:
a7:9a:d1:38:22:6a:2b:27:ee:2e:b6:96:9b:e1:ce:51:7b:c4:
a6:bd:8d:f1:f1:cb:10:45:4b:b4:a5:90:97:c0:a2:15:fd:20:
1e:9f:50:44:cd:4c:a6:32:cd:3b:5c:96:d6:23:10:1e:2c:49:
a5:d7:fc:03:0a:c6:68:e0:ab:de:d4:63:f5:b5:8c:76:6b:a8:
1c:00:fe:bb:60:d2:9b:79:99:9b:98:a6:4c:fe:8c:b3:e3:d2:
10:66:dc:86:1b:2f:be:a4:6e:d7:49:45:4c:67:a0:0a:a5:d5:
8e:05:98:83:57:fc:27:ea:37:28:3d:17:e7:a1:67:51:a4:64:
7e:3c:98:78:7b:ef:a3:fe:33:f8:b2:a9:bc:a9:a9:e7:aa:e6:
ea:ad:77:18:6e:d1:46:ba:14:6e:d9:de:09:47:1c:cf:45:6d:
c9:15:09:47:67:0a:6c:05:4d:5e:99:6a:bf:79:69:19:98:94:
4b:a4:94:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 17:45:45 2026 by rpki-client