Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FA42DFC923211F19D72C2DACE1D38B0.roa
File: 6FA42DFC923211F19D72C2DACE1D38B0.roa (raw, json)
Hash identifier: zwYqE6gXoWyQooF/sNaLtmNn76vI8FcvFjziBzsGwM0=
Subject key identifier: F6:BD:40:63:D9:5A:CC:EF:1E:E7:CE:4B:19:01:A1:4D:85:B4:EC:2D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DD38
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FA42DFC923211F19D72C2DACE1D38B0.roa
Signing time: Fri 07 Aug 2026 07:34:35 +0000
ROA not before: Fri 07 Aug 2026 07:34:31 +0000
ROA not after: Sun 13 Sep 2026 07:34:31 +0000
asID: 9304
IP address blocks: 154.92.10.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122168 (0x1dd38)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 7 07:34:31 2026 GMT
Not After : Sep 13 07:34:31 2026 GMT
Subject: CN=6a758a8b-5228
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1c:e6:7f:01:53:7a:41:c4:c2:af:d3:a7:23:
e8:7a:0e:17:01:2e:f6:dd:ba:0a:3d:4f:1c:00:ce:
bf:f5:1e:46:0c:cf:ba:79:dc:1a:6e:30:e8:3e:2c:
2d:ff:0b:81:c1:e6:d7:9c:6a:20:c3:ea:3d:ec:6b:
99:33:c5:8f:b0:d9:b0:6a:76:44:a5:31:85:32:91:
cf:c2:56:34:10:ae:b5:7c:c5:64:b9:2d:ac:6a:38:
6a:93:65:b0:93:a4:05:cb:cb:f0:27:46:ec:7d:67:
ba:61:0d:77:c0:a6:97:3a:f1:31:85:74:84:af:6d:
d7:e9:88:b3:50:f5:2c:14:25:6b:a6:6e:f8:3b:39:
50:06:ee:b9:fa:0a:ff:a7:4d:9f:d5:08:9c:d9:b5:
12:64:7e:5b:a8:7d:6e:6e:55:38:70:7c:5d:a1:10:
92:f4:d0:e1:7c:95:0e:1f:e1:a4:a1:47:8f:fb:94:
70:64:be:66:9d:07:d3:a0:8e:2e:a2:cb:f6:33:b3:
ce:56:2b:66:7c:5e:f1:08:13:7d:b5:bb:78:d7:97:
5a:b1:b7:9b:f5:ba:0f:64:3f:39:d0:9d:7d:74:59:
ce:da:a5:10:b5:30:29:99:02:23:7e:cb:18:dc:af:
4e:d6:0c:99:b7:3b:cb:1d:12:c0:74:ee:48:a6:69:
32:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:BD:40:63:D9:5A:CC:EF:1E:E7:CE:4B:19:01:A1:4D:85:B4:EC:2D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FA42DFC923211F19D72C2DACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.10.0/23
Signature Algorithm: sha256WithRSAEncryption
76:35:ae:aa:6f:db:e8:de:b7:c8:59:bc:58:cc:0a:b6:41:20:
6d:76:f3:97:d6:d3:0b:51:ac:ea:9a:3c:52:73:84:87:97:ea:
1e:09:6a:27:be:57:b2:99:87:a0:f4:c2:ad:58:b8:4f:c3:a9:
45:2b:71:57:95:8c:4a:b7:2d:9b:5e:65:d5:18:a4:8f:ea:7a:
fc:83:e4:82:5d:9d:0a:61:3d:78:1f:29:62:fb:2b:fe:71:1c:
37:6c:7d:8e:97:46:ba:3e:0e:c6:09:af:8a:04:f8:4b:33:f4:
d8:7e:21:0c:d6:08:93:c5:63:dc:5d:69:34:b1:8a:06:d8:32:
e4:79:a8:21:cf:e1:6f:7a:49:ef:04:ec:36:fd:96:af:f3:28:
d6:5b:cc:f7:18:58:d1:8f:d2:e5:7b:29:02:90:36:4c:ea:8d:
0f:61:2c:5f:dd:1e:24:91:ad:8f:66:e6:ae:cb:7f:f7:2e:a1:
4f:1e:6e:fc:73:82:3f:66:e7:48:2f:2f:bd:1c:3a:2c:20:13:
ce:cd:28:d0:cd:af:36:32:ee:82:aa:4a:13:39:e3:b4:af:3a:
e6:d8:f4:8c:90:65:dc:7f:16:16:a3:bf:ab:c9:17:97:94:c2:
9f:53:5d:53:68:fd:30:d3:c5:e6:53:b6:06:35:19:5c:c6:75:
20:97:cd:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:06:02 2026 by rpki-client