Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E0537E66C8211F1A6CE66B1CE1D38B0.roa
File: 6E0537E66C8211F1A6CE66B1CE1D38B0.roa (raw, json)
Hash identifier: KCrt32VgcOVWaQ37mJvVVg9avynwQbXa5VSQve9yibg=
Subject key identifier: 53:19:D9:A4:54:3D:F5:23:25:D3:45:C2:30:85:0E:2B:FB:09:D2:4F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D40D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E0537E66C8211F1A6CE66B1CE1D38B0.roa
Signing time: Sat 20 Jun 2026 08:31:28 +0000
ROA not before: Sat 20 Jun 2026 08:31:23 +0000
ROA not after: Mon 27 Jul 2026 08:31:23 +0000
asID: 63139
IP address blocks: 154.94.86.0/24 maxlen: 24
154.94.87.0/24 maxlen: 24
154.94.88.0/24 maxlen: 24
154.94.89.0/24 maxlen: 24
154.94.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119821 (0x1d40d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 20 08:31:23 2026 GMT
Not After : Jul 27 08:31:23 2026 GMT
Subject: CN=6a364fdf-95cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b3:a4:7a:7e:d7:95:5e:b1:57:7f:13:70:e3:
61:cf:c9:c2:54:d7:f7:15:5c:6c:5c:f4:38:6a:b6:
ec:96:97:f4:2e:14:71:23:c2:39:46:04:c1:a9:ea:
bd:8c:1a:c2:8a:d9:ea:f7:64:e1:c2:58:82:13:93:
55:87:20:f0:6d:27:6d:2e:e9:65:19:de:17:27:ad:
a6:1d:f8:9e:b1:10:d2:af:ad:90:28:bd:e2:ee:53:
86:12:76:40:fc:f3:47:c8:c4:2f:ae:69:87:dd:10:
37:85:06:57:47:83:10:eb:93:ac:cf:d6:22:2a:10:
07:4b:76:e9:2d:05:6d:6d:e1:a5:97:51:b8:f8:d5:
ec:21:80:72:4f:d5:e0:d4:ff:b8:2f:f0:6b:bb:90:
6e:f0:91:37:e2:d4:a7:a2:38:53:0b:18:31:69:36:
42:a5:89:93:7a:a3:00:04:ad:c3:36:ec:46:61:cd:
5f:cc:d2:df:7f:cd:a4:c7:cb:59:fd:1a:c8:56:be:
61:cc:a1:4e:03:e4:d3:fd:9a:3f:e2:5c:9e:5a:86:
05:d8:89:ba:db:fc:81:07:41:70:15:86:79:94:1e:
65:b4:23:75:31:c9:6e:3f:65:cb:28:6a:85:0f:d8:
c5:45:fd:73:62:15:40:74:15:96:8e:9e:a2:aa:d6:
63:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:19:D9:A4:54:3D:F5:23:25:D3:45:C2:30:85:0E:2B:FB:09:D2:4F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6E0537E66C8211F1A6CE66B1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.86.0-154.94.90.255
Signature Algorithm: sha256WithRSAEncryption
6f:33:cd:af:3b:9e:c9:18:f2:43:68:83:5f:a0:d2:ab:d7:b8:
59:a7:5f:2c:c4:39:84:65:d0:e4:e0:80:7a:17:a3:7c:29:a4:
85:43:c4:6c:5f:28:39:c0:12:b1:4b:7a:71:53:36:6e:dc:c0:
6c:37:39:2a:1a:e3:f5:fd:90:71:7e:09:c3:57:df:4e:25:ac:
71:d8:a8:4d:30:35:a7:b9:78:31:2f:6c:4e:16:3c:e2:76:04:
8c:58:76:7f:b2:d5:66:5d:8a:da:c5:e7:ca:e3:d9:b9:f5:43:
ea:29:0f:d9:13:80:22:58:08:44:57:f1:68:72:7e:b1:8c:72:
35:df:d0:5d:12:92:1a:bc:ce:09:b2:80:8e:62:7b:0c:be:ee:
3c:fe:50:99:7c:ee:e8:d6:a5:68:e3:b4:85:e9:d6:71:36:d7:
67:be:24:3f:19:0c:bb:53:e5:08:75:5d:64:60:47:32:56:05:
c4:55:5e:99:c1:c3:e9:2f:86:80:a4:dd:6a:0d:f1:69:c3:71:
51:dd:90:40:b8:e2:39:ff:ad:2b:f3:b1:8a:b4:32:cf:c3:47:
c3:98:b4:9b:11:00:eb:76:55:89:44:14:88:b9:69:e1:d9:b7:
97:57:ef:8b:cf:8b:0c:8f:4e:85:f6:3a:6c:c7:0d:8f:31:89:
6c:70:9c:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:53:55 2026 by rpki-client