Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F12789E76DF11F1A5813FFACE1D38B0.roa
File: 6F12789E76DF11F1A5813FFACE1D38B0.roa (raw, json)
Hash identifier: nzkki5tpMu5f5sYpG3zz2EffLezMdtM4ifnIQXzvdRY=
Subject key identifier: 24:51:AF:83:0E:2B:FD:F9:0F:95:B8:81:05:31:57:B0:79:0B:E8:78
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D6B8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F12789E76DF11F1A5813FFACE1D38B0.roa
Signing time: Fri 03 Jul 2026 13:02:24 +0000
ROA not before: Fri 03 Jul 2026 13:02:20 +0000
ROA not after: Thu 06 Aug 2026 13:02:20 +0000
asID: 8796
IP address blocks: 154.86.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 12:38:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120504 (0x1d6b8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 3 13:02:20 2026 GMT
Not After : Aug 6 13:02:20 2026 GMT
Subject: CN=6a47b2e0-aea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:13:ce:ff:2e:c9:c3:e1:3c:4e:60:5b:a8:eb:
3f:45:79:16:ac:16:91:5c:34:2f:0b:d7:b1:5f:cb:
60:72:f8:34:92:e1:56:d9:3c:23:b9:7b:a6:ce:1f:
17:1b:a4:f9:50:ad:48:03:60:8e:d4:e8:33:cb:c5:
b3:25:da:fb:bc:9d:83:ed:06:cd:fd:32:c9:be:67:
75:8b:72:e7:46:31:f0:19:d2:92:2b:c3:78:77:4c:
84:47:ea:da:c7:1e:c9:45:c0:91:a1:16:c6:7b:4c:
ef:cf:30:5e:9d:ff:cf:b8:66:2f:32:4d:8f:44:39:
22:47:2a:9f:31:d6:8d:f5:b8:a5:db:dc:80:78:2f:
de:b1:0c:b4:3c:7e:35:07:48:66:15:72:9f:06:95:
30:5d:e7:a8:12:c3:2c:b0:af:72:e8:4e:fa:6d:47:
06:20:d0:69:10:30:12:0b:72:da:96:84:ee:9e:14:
56:7e:05:38:a1:35:b2:66:81:18:d4:33:e0:19:2a:
a9:c8:4a:47:c6:54:b9:e7:9d:d8:53:b2:c7:ea:5f:
db:73:4b:60:59:d0:a9:30:ca:48:58:24:32:91:47:
a6:08:4a:50:81:48:0f:6d:38:7c:4c:88:ff:d8:93:
39:d3:c1:2f:fa:08:8e:8e:89:c5:12:c5:f0:ba:b1:
8e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:51:AF:83:0E:2B:FD:F9:0F:95:B8:81:05:31:57:B0:79:0B:E8:78
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F12789E76DF11F1A5813FFACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.16.0/20
Signature Algorithm: sha256WithRSAEncryption
39:4d:b1:00:2c:0e:b6:0f:e0:a0:39:04:e1:4a:21:bd:ff:09:
94:94:a0:f8:a6:91:c9:be:9a:9e:d9:53:eb:c0:6b:01:aa:c2:
85:00:90:1b:98:92:39:1c:de:d2:88:00:c9:52:13:d6:8d:86:
26:7a:6e:6d:67:3c:6c:05:fa:56:3e:ed:dc:c1:3d:24:0c:7f:
df:18:83:7d:11:e2:de:b8:bf:a7:6d:d5:30:33:27:66:b9:ab:
4b:09:d3:97:9f:39:3a:6b:bb:10:6b:4d:a3:77:4d:85:8f:21:
8e:85:dc:b4:81:24:7f:2a:fc:45:f0:62:9b:6a:35:21:0b:6d:
51:47:c1:0a:9d:36:5a:59:48:3c:a7:29:7b:1b:4b:6e:6d:a6:
92:7f:77:0e:6b:9b:10:b4:20:cd:79:b1:69:32:ab:01:94:57:
a0:91:71:e0:70:89:fa:cd:22:65:f5:89:8b:e1:ff:3d:9d:c4:
3d:9e:36:87:b6:fc:a1:4f:7d:af:7e:07:70:50:db:fd:8e:d6:
d3:a7:73:76:74:ee:a2:7e:28:2d:a3:77:f6:56:1d:f8:1b:5b:
06:af:ef:f4:c5:4e:5c:d8:8d:22:24:e2:62:e7:36:ef:7a:90:
3c:d7:37:e1:ac:5e:9f:6b:34:2a:10:f8:4a:b6:d8:ca:fe:bf:
d5:59:3d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:06:29 2026 by rpki-client