Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/703D680C699011F18A925BCACE1D38B0.roa
File: 703D680C699011F18A925BCACE1D38B0.roa (raw, json)
Hash identifier: dh/n5dxUhaY0eQkgAxOB1Ga7msS/Z5NTGKLJMhkB7oE=
Subject key identifier: 87:AC:F0:E2:59:A8:66:C8:AC:76:09:25:8E:63:84:67:D7:83:CD:E5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D34D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/703D680C699011F18A925BCACE1D38B0.roa
Signing time: Tue 16 Jun 2026 14:34:11 +0000
ROA not before: Tue 16 Jun 2026 14:34:06 +0000
ROA not after: Wed 22 Jul 2026 14:34:06 +0000
asID: 141159
IP address blocks: 154.94.228.0/22 maxlen: 24
154.94.228.0/24 maxlen: 24
154.94.229.0/24 maxlen: 24
154.94.230.0/24 maxlen: 24
154.94.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119629 (0x1d34d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 16 14:34:06 2026 GMT
Not After : Jul 22 14:34:06 2026 GMT
Subject: CN=6a315ee3-730c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4b:48:72:1f:c0:94:9d:11:19:0d:26:e2:66:
0c:56:13:55:26:8c:65:ed:d2:bd:51:fc:41:90:dc:
47:89:c2:63:f3:46:47:5e:14:61:ba:2c:fc:eb:88:
32:6f:44:0b:5e:28:c7:68:57:09:f3:d3:79:6f:72:
4b:f2:a3:b0:41:26:32:28:bc:82:8d:15:8a:e8:4c:
40:88:ea:b0:2c:4f:5c:56:86:77:68:0e:14:1f:34:
a0:b1:e5:7c:ff:81:db:b6:ae:18:e2:2d:b0:10:0c:
32:28:59:e9:27:fa:f5:f6:86:2a:2b:c0:c0:46:fa:
67:d2:40:cb:09:86:09:00:2d:12:53:cc:10:a7:94:
6c:81:1f:0b:54:90:11:57:cb:ae:72:25:9a:3c:7a:
46:41:f8:aa:9a:ff:bf:4e:76:a7:46:8e:ed:2c:d6:
40:f8:47:79:de:e3:39:2d:69:6a:18:87:ca:d5:7b:
d0:81:1d:82:50:71:9c:98:62:8e:8e:bb:fd:bf:e9:
38:0e:90:6c:f1:b3:bc:6c:d9:ed:94:d8:18:46:c0:
3e:9b:71:ea:b4:5d:39:f0:e2:c1:c4:8a:96:c7:5a:
44:fe:dc:ca:8d:07:e3:43:c2:41:f0:42:73:f5:e4:
ed:00:fa:5b:09:3c:d3:9b:9f:89:c8:2e:b1:e6:e0:
fe:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:AC:F0:E2:59:A8:66:C8:AC:76:09:25:8E:63:84:67:D7:83:CD:E5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/703D680C699011F18A925BCACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.228.0/22
Signature Algorithm: sha256WithRSAEncryption
85:ba:0f:17:66:63:25:6e:25:24:1e:15:96:7e:0a:f2:a7:8c:
3d:21:75:bb:6c:fc:0f:c4:be:34:ce:51:a1:fe:89:95:07:d2:
05:87:a8:dc:08:bb:2c:b1:0c:a6:01:d1:ba:7b:7f:e2:15:28:
a0:a9:99:c5:76:fe:67:b8:7c:38:86:57:36:25:c9:54:38:03:
18:bc:2f:d8:dc:14:f1:63:1f:33:ec:57:b5:9c:f2:14:98:bc:
3f:85:41:17:d2:01:1a:95:92:a2:03:f5:db:f1:0b:05:cb:f5:
04:03:ac:1a:9a:e3:89:34:a6:ea:b2:16:51:34:aa:82:d6:c7:
7f:b0:c2:22:26:83:22:1b:16:ce:e6:9f:d5:db:ee:f7:73:c5:
5a:50:9e:29:29:31:24:15:8a:ae:aa:32:f3:68:e2:0a:9f:53:
fe:ad:14:f1:d0:ae:ca:10:aa:6d:95:55:e7:30:bc:b0:08:8d:
93:67:39:ba:fe:00:a2:b6:8b:2b:70:76:fd:86:c7:f7:cf:5c:
eb:ce:63:27:25:31:bd:e0:d6:76:7f:96:a4:e7:cf:b1:a2:01:
3c:b6:13:65:3c:3b:0b:17:b4:ce:70:7d:07:3e:ce:ec:cd:ba:
2a:f8:31:25:6b:9a:43:c0:3d:48:f5:7b:3d:8d:38:3c:4c:07:
5c:34:00:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:52:06 2026 by rpki-client