Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6EF0121C2B4F11F1B5DF2496DAE4EC9C.roa
File: 6EF0121C2B4F11F1B5DF2496DAE4EC9C.roa (raw, json)
Hash identifier: nZM76SKEVzzwLr0ic/65tcFmZ4dnzrSt0wO3HILrTak=
Subject key identifier: D0:71:55:16:B4:28:8B:3A:F0:4C:A1:9A:60:11:32:41:48:DB:EE:1B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C196
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6EF0121C2B4F11F1B5DF2496DAE4EC9C.roa
Signing time: Sun 29 Mar 2026 09:12:39 +0000
ROA not before: Sun 29 Mar 2026 09:12:34 +0000
ROA not after: Mon 06 Apr 2026 09:12:34 +0000
asID: 54801
IP address blocks: 154.90.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 31 Mar 2026 00:06:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115094 (0x1c196)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 29 09:12:34 2026 GMT
Not After : Apr 6 09:12:34 2026 GMT
Subject: CN=69c8ed07-e8b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e1:dd:f5:33:af:fc:32:43:2b:e0:4d:56:cb:
e0:d9:7a:3c:10:d1:63:2e:7b:c2:7b:4d:3c:91:d5:
6f:43:ad:03:05:0c:80:0d:7f:5c:29:7b:26:dc:66:
46:b7:5e:d8:0a:b3:4b:9c:10:34:b0:7f:d9:33:1c:
8e:41:2f:7d:79:02:61:ed:77:06:45:92:05:1f:35:
9e:2b:24:f2:49:7a:0d:73:cb:a5:7a:db:91:07:15:
35:ea:b0:c7:f8:c0:5a:fc:61:33:fe:56:58:df:16:
92:75:f4:ae:08:87:9e:d0:72:43:65:f9:ab:43:ed:
0a:3e:2e:ee:1b:41:bd:83:72:74:a8:0c:46:b1:7f:
a3:f1:28:6a:bd:24:7e:a7:f1:5f:88:ab:1a:a4:3f:
9e:66:a2:11:1f:4e:63:45:1c:a3:88:c3:b9:4f:ad:
27:ae:41:ee:a4:58:ff:85:5a:ba:f6:31:90:88:e5:
23:6c:8b:fc:b1:e2:9c:4b:78:f7:77:f9:82:3c:9b:
a9:3d:b4:7a:ca:f5:66:ac:23:50:93:aa:e9:8b:36:
21:ec:0b:2b:50:ae:08:e7:9a:b3:b1:ce:b2:fc:cd:
f5:69:13:47:65:56:da:c8:30:90:19:89:3f:b7:8b:
2c:71:64:27:16:db:d0:f4:6b:79:ec:42:ed:bc:0a:
fd:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:71:55:16:B4:28:8B:3A:F0:4C:A1:9A:60:11:32:41:48:DB:EE:1B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6EF0121C2B4F11F1B5DF2496DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.28.0/22
Signature Algorithm: sha256WithRSAEncryption
ca:0f:a7:c4:97:5e:43:4a:22:99:f3:70:16:9c:0d:f8:ba:49:
42:8c:50:07:c4:35:c2:0c:80:17:c8:e5:28:39:15:a9:c4:91:
61:1c:5c:06:c6:39:25:6c:06:8d:fb:d6:b5:59:49:57:cd:c8:
0e:c4:86:fe:d0:d4:42:19:bf:bc:51:59:f1:f9:8d:58:c4:3c:
4f:ad:e5:22:e9:cc:b9:1e:13:1e:8d:9a:3b:c1:c2:32:b4:10:
5f:6a:65:53:6d:1c:dc:57:eb:c9:f5:4c:8f:7c:7d:67:27:01:
e5:e9:7a:45:9e:3b:2a:e5:e3:5f:89:20:f6:cf:cf:66:1a:0e:
98:6d:f5:34:c2:10:cb:7b:e5:23:61:b4:64:65:69:87:0e:af:
49:af:6e:98:17:07:be:88:1c:db:98:e7:dd:53:00:dc:fe:cb:
9d:3e:72:9b:0f:16:e9:cb:88:0a:0e:ed:63:76:c1:d8:f4:b4:
60:bb:82:2a:cd:c4:15:08:c8:22:a0:3f:78:75:94:8c:fc:12:
ee:6b:9b:6c:2c:20:4e:b3:e2:cc:5b:f4:cf:13:66:18:c3:0c:
3e:f2:2a:b7:e4:b8:bb:0e:f9:b2:15:99:36:4d:c1:11:18:3d:
94:8f:a4:8e:ed:2e:ac:97:99:11:a2:79:ae:30:83:2d:d2:e6:
31:4e:88:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 30 01:23:12 2026 by rpki-client