Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FC1DB061DF511F1A439C078DAE4EC9C.roa
File: 6FC1DB061DF511F1A439C078DAE4EC9C.roa (raw, json)
Hash identifier: 6S1jb1PXd6P0C4PB6kU6I0V/y7CV+v12voKihYufTJc=
Subject key identifier: D1:74:C9:E4:6B:D7:5A:1B:15:71:95:CD:3E:34:5B:BB:C3:FD:B5:D5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01BEFE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FC1DB061DF511F1A439C078DAE4EC9C.roa
Signing time: Thu 12 Mar 2026 09:25:41 +0000
ROA not before: Thu 12 Mar 2026 09:25:36 +0000
ROA not after: Sat 04 Apr 2026 09:25:36 +0000
asID: 213169
IP address blocks: 154.94.48.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114430 (0x1befe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 12 09:25:36 2026 GMT
Not After : Apr 4 09:25:36 2026 GMT
Subject: CN=69b28695-5bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5b:af:af:2b:e8:1d:4a:e8:8f:bb:c3:f5:51:
71:b1:58:83:d9:76:8e:86:09:78:67:e6:37:f8:a4:
39:86:ea:a5:a7:00:a6:3b:6a:5b:0f:63:e3:a1:8c:
93:b3:f8:15:d8:29:68:fe:67:39:81:8c:11:dd:49:
ce:a5:df:b1:56:18:5d:0a:66:1f:1c:f1:fd:fe:d0:
2a:9b:2f:7d:84:d0:58:99:01:c4:27:7c:c7:75:a2:
6b:6d:1e:a7:1a:d2:51:a8:fd:a4:2d:c8:5f:01:04:
4a:3c:f5:ee:71:c7:ad:e4:1c:80:b5:2a:7d:34:1c:
62:10:99:b8:81:ab:8f:9c:5c:8f:53:61:19:32:79:
fb:1e:c2:4c:1a:97:5f:8b:33:e1:29:90:e0:59:15:
8c:0f:cd:09:94:e4:f4:8e:46:6d:53:e4:db:8b:e1:
bf:ac:29:68:48:95:f0:66:ac:a3:a5:6f:50:3f:f9:
34:3b:d3:c1:95:5a:e0:d5:5a:43:71:6d:fa:62:83:
a6:d6:3f:e6:15:8b:13:d4:d3:fe:62:2d:fc:37:bc:
67:c0:94:2c:fa:0d:49:d8:62:2e:84:49:a7:ae:23:
cb:28:a4:12:0b:c1:85:82:4c:e2:a2:9e:e6:2f:57:
87:10:dd:7e:1a:bc:d0:65:93:d4:2a:2b:00:91:5a:
bb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:74:C9:E4:6B:D7:5A:1B:15:71:95:CD:3E:34:5B:BB:C3:FD:B5:D5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FC1DB061DF511F1A439C078DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.48.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:bf:23:a8:83:ef:1e:db:d6:d3:04:1c:d4:9a:9e:e9:dc:02:
1e:9b:0e:7f:a8:b2:85:e3:aa:b3:6b:00:42:13:c0:dc:ed:66:
22:be:15:07:ad:13:e1:c3:c6:7e:c9:ff:30:9f:5a:f2:0e:d6:
b7:5c:e2:a7:5f:2c:b6:40:e5:5f:6b:c2:33:ad:70:4d:28:63:
d5:3f:dd:90:99:bd:99:97:ed:de:02:74:57:98:6e:7b:60:a4:
c5:b3:7f:16:87:7a:d9:03:6f:2f:ed:40:b6:2e:95:8e:52:4a:
41:1e:4e:9d:b6:84:0e:0e:01:e0:66:40:20:b3:ea:4a:1f:a9:
36:7b:0f:d2:c0:c2:ea:aa:8e:74:d6:06:23:58:3f:bf:d7:9e:
9e:70:80:50:f5:b2:16:ab:17:fe:49:a0:58:34:87:41:0e:ef:
f2:57:79:6e:80:1f:81:97:87:bf:a7:56:08:1f:94:1a:ea:ea:
f8:a5:02:35:3b:6b:f8:b9:ed:69:ee:05:c1:eb:01:1e:8d:97:
b3:27:4c:12:ed:71:69:09:b2:e5:b7:5b:bf:d8:33:d4:85:69:
fa:ce:15:54:2d:3c:2e:97:e8:a9:6b:b5:eb:cc:6a:1d:3d:08:
d0:ea:4a:4f:99:e9:7b:d2:da:1f:30:8a:b7:e5:0b:14:12:82:
e8:24:8e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:13:54 2026 by rpki-client