Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F4A313E460711F1B62BECB6CE1D38B0.roa
File: 6F4A313E460711F1B62BECB6CE1D38B0.roa (raw, json)
Hash identifier: uQn7uX99KbGiQtIQUCOLO0BicnJsmQ5opQW2HClfX2o=
Subject key identifier: 62:4A:6E:6F:DC:20:DA:92:B4:66:02:99:AE:A6:BC:DB:9C:B8:99:AB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C91A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F4A313E460711F1B62BECB6CE1D38B0.roa
Signing time: Sat 02 May 2026 09:15:17 +0000
ROA not before: Sat 02 May 2026 09:15:13 +0000
ROA not after: Tue 09 Jun 2026 09:15:13 +0000
asID: 138915
IP address blocks: 154.223.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117018 (0x1c91a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 2 09:15:13 2026 GMT
Not After : Jun 9 09:15:13 2026 GMT
Subject: CN=69f5c0a5-8341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:80:95:75:c0:81:65:b3:2a:35:6b:93:bc:7b:
d9:cf:5d:87:66:19:5a:be:04:c3:3e:86:1d:b9:20:
e4:e1:be:7b:31:2e:b9:be:47:b0:4b:fa:71:fb:a3:
f9:f1:d4:f2:7d:bf:99:47:81:4a:b6:24:43:4f:0a:
1a:e8:2d:99:4f:98:37:41:76:39:e6:23:34:ce:8b:
49:4a:41:eb:7d:d2:03:3f:5f:b1:08:f7:db:29:26:
bb:f5:a1:25:7a:19:f0:12:32:d4:62:bf:47:33:a2:
09:63:59:ae:33:98:d2:1e:72:b9:8f:16:31:a3:57:
f2:f2:40:01:41:9a:ed:ef:f7:b8:c7:83:cb:80:3b:
d6:79:c5:2d:07:73:fb:c5:0e:de:a0:9e:4b:f9:57:
7f:61:c9:36:83:07:d1:be:01:82:e7:4d:7c:99:ea:
a2:a9:32:96:e9:16:07:88:bd:72:d5:02:53:68:ee:
bb:ec:97:4e:27:56:e2:9d:3d:e1:4d:36:26:86:62:
2e:2c:27:5b:5c:1d:44:a8:b7:ca:dd:18:17:e1:05:
d1:b3:d6:81:d9:75:22:11:12:7b:3f:63:80:da:f1:
f4:d6:db:f1:d1:2b:00:87:65:9b:ff:5c:76:8b:4f:
54:b2:88:38:3e:ba:fb:d2:a5:d0:89:c0:28:13:0f:
30:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:4A:6E:6F:DC:20:DA:92:B4:66:02:99:AE:A6:BC:DB:9C:B8:99:AB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6F4A313E460711F1B62BECB6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.65.0/24
Signature Algorithm: sha256WithRSAEncryption
23:26:b3:16:b4:8f:ce:7f:50:49:f4:96:22:ec:26:0d:25:6a:
b2:c9:f9:5d:01:4a:29:e1:44:22:a1:e4:90:68:2b:bd:ad:49:
09:41:6f:f0:fe:32:83:ee:2c:86:3f:cc:07:4f:c6:47:f6:9d:
bd:a2:69:a0:d5:20:85:82:fc:f6:00:bd:c9:d5:17:c4:c7:07:
f9:02:78:a4:ba:e8:d4:9a:31:8a:46:6f:b8:08:d6:14:53:88:
29:9d:d4:5a:18:88:15:d4:7c:ac:ec:c1:a0:ab:e5:ed:e9:f9:
0a:03:9a:10:34:e6:59:33:04:d1:09:52:f9:d6:8f:cc:de:36:
20:a5:94:b9:96:3e:a1:29:b9:a8:77:bb:13:4b:35:db:6b:dc:
fa:00:7b:27:c9:71:f5:b0:82:99:16:f5:60:d8:d0:b9:71:c5:
ec:48:77:46:30:cd:8e:01:c1:36:d5:d3:5f:de:14:f8:a5:aa:
56:ee:d5:d6:8d:24:18:0d:6b:2c:b2:06:3a:60:6a:a4:7a:ed:
83:3b:20:cd:5c:25:7f:d6:be:04:5c:7f:03:64:93:ee:d9:9d:
5d:68:ed:f7:2d:f5:b0:40:e1:9b:09:ed:d3:cd:a8:69:f3:7c:
04:73:7f:99:58:2d:b8:ca:28:69:09:83:21:18:65:5c:c4:17:
47:0f:24:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:01:59 2026 by rpki-client