Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/725F7AD856D711F18E3C49F9CE1D38B0.roa
File: 725F7AD856D711F18E3C49F9CE1D38B0.roa (raw, json)
Hash identifier: oAabiVNwCHUsVSIwsGqZJdkESDLGBeXYu6CmHClGMLg=
Subject key identifier: BF:98:BA:E2:FB:68:77:84:8A:68:26:5E:3C:09:51:4F:40:E8:F7:AA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CE96
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/725F7AD856D711F18E3C49F9CE1D38B0.roa
Signing time: Sat 23 May 2026 18:44:36 +0000
ROA not before: Sat 23 May 2026 18:44:32 +0000
ROA not after: Fri 14 May 2027 18:44:32 +0000
asID: 153656
IP address blocks: 154.197.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 13 Jun 2026 00:07:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118422 (0x1ce96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 23 18:44:32 2026 GMT
Not After : May 14 18:44:32 2027 GMT
Subject: CN=6a11f594-2e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:06:a1:b4:ef:30:00:8d:15:01:b8:55:22:56:
c1:16:c8:33:56:b7:f5:04:f4:04:58:56:e0:e0:7d:
b3:95:9c:d8:ab:03:21:e1:b4:f8:b6:50:56:03:00:
6e:0b:c1:11:54:10:cd:fa:38:c0:26:fd:ae:3d:c9:
62:44:3b:9a:ef:7f:58:62:39:30:91:8d:16:ba:7d:
e6:57:9f:bb:79:60:87:90:d2:27:5d:cd:e0:e3:be:
9f:cf:e9:12:56:1d:b5:8d:d2:c9:ef:de:8c:a0:6f:
98:e6:46:48:18:bf:ab:a5:b0:a6:21:8a:63:63:a1:
ea:99:6d:c1:81:08:84:77:08:b1:bd:96:42:86:75:
f4:1b:bc:0a:72:a0:4d:7d:bf:c3:72:59:20:3e:f4:
49:23:6c:ab:fe:df:f8:b0:7f:be:8f:f3:da:cd:39:
ef:aa:81:4c:31:21:ab:4a:db:b6:7e:bc:bc:37:eb:
02:fb:4f:97:a1:fe:5a:72:80:ae:0e:45:39:23:b2:
4c:e0:ad:86:54:dd:ad:7c:27:91:c2:b2:1d:2f:bf:
ab:91:1a:14:ec:0a:f6:54:09:d3:1b:be:4a:a2:29:
84:d2:9e:d2:f1:bc:26:86:8e:14:67:7b:d5:95:6f:
1f:ec:8e:44:c8:00:df:ac:dd:55:94:a3:5a:93:74:
bd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:98:BA:E2:FB:68:77:84:8A:68:26:5E:3C:09:51:4F:40:E8:F7:AA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/725F7AD856D711F18E3C49F9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.154.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:40:ca:cb:87:c8:e5:24:fe:ca:15:e8:cd:6a:8d:12:51:0d:
e6:1b:25:ac:de:74:98:70:22:72:d5:05:e9:1a:ee:32:d2:05:
ae:c0:92:2a:8b:91:2b:78:dc:30:ce:42:1a:79:82:93:0d:51:
2e:4c:e3:16:eb:ac:9c:bd:18:11:c8:23:e8:8d:4e:e8:39:e8:
9b:7a:7b:40:a2:bb:97:23:f6:e3:65:a2:9a:bb:62:d0:61:b7:
cd:40:0a:d3:1c:3e:de:16:90:b4:78:e8:09:01:7f:fa:db:ff:
25:6b:0b:32:ed:44:59:7b:3c:2b:da:3d:db:aa:30:72:de:ce:
9b:b9:95:76:f4:22:45:f2:fc:e1:b1:4f:1d:1f:38:c0:39:1d:
66:31:46:ab:3c:8c:3c:05:58:f2:a0:13:62:bd:28:2a:8b:08:
f9:cc:76:1e:6d:60:cb:5f:f5:4b:0c:a6:ce:0b:41:a2:0a:54:
d9:d3:7c:d3:9a:7e:72:32:f4:f0:1c:85:04:70:1b:12:15:da:
40:0e:c7:63:a6:97:59:a1:39:2b:3e:c0:70:0c:83:02:dd:4e:
78:34:48:94:97:45:7a:b5:77:2c:56:5d:73:4d:ba:47:0e:0f:
9d:88:29:65:65:62:6b:56:b3:90:51:bd:b1:0e:1d:df:cd:5f:
eb:ad:23:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:19:36 2026 by rpki-client