Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/741F51345EAE11F1ABC4E21ECF1D38B0.roa
File: 741F51345EAE11F1ABC4E21ECF1D38B0.roa (raw, json)
Hash identifier: CxQY84lbP5jGTdNlLuL4nyxrHuBxAzFYJbVMh8Tlbb0=
Subject key identifier: 40:8C:09:01:7E:14:76:7C:31:14:C8:F9:CB:E5:8A:E7:00:FF:38:83
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D14E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/741F51345EAE11F1ABC4E21ECF1D38B0.roa
Signing time: Tue 02 Jun 2026 18:11:19 +0000
ROA not before: Tue 02 Jun 2026 18:11:14 +0000
ROA not after: Fri 10 Jul 2026 18:11:14 +0000
asID: 14315
IP address blocks: 154.203.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 08 Jun 2026 00:08:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119118 (0x1d14e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 2 18:11:14 2026 GMT
Not After : Jul 10 18:11:14 2026 GMT
Subject: CN=6a1f1cc7-108f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:59:d9:de:0b:4e:cc:d6:55:de:90:23:b5:1b:
81:9a:a5:43:f8:cf:20:ca:47:39:e1:3b:b1:4b:3d:
28:88:89:c2:e9:55:bd:ed:01:0d:30:21:af:5d:93:
2b:13:08:4e:eb:da:88:0e:4a:a5:90:8f:b4:93:40:
f7:1f:a3:62:15:29:b1:a8:25:2f:b3:20:04:c6:d4:
9a:66:ae:0f:ca:11:2d:13:f6:84:c8:ec:ad:66:1f:
1c:bc:1d:85:da:6f:be:32:79:b6:db:c4:11:0d:51:
ca:c4:8d:e9:02:a4:44:b1:0b:ed:3a:79:77:cb:71:
c6:c7:7c:67:dd:31:9d:ce:ef:10:5e:10:96:a3:de:
d4:63:62:fa:ea:31:55:72:7b:61:6f:5c:b6:19:e1:
25:47:13:8d:0f:eb:0d:0f:66:9e:a3:73:c5:0f:bf:
3d:0a:14:c1:06:8a:2e:6e:e9:4d:c5:48:f1:04:c8:
51:6e:8c:33:16:37:4c:83:8d:26:51:91:5c:fe:26:
2c:3d:48:1e:e2:a7:93:68:c9:fc:7d:78:aa:26:a9:
98:a6:6f:c2:48:71:d6:45:5d:70:ff:97:d8:81:4c:
9b:5a:54:9c:09:3f:b2:cb:08:e5:54:04:67:2c:a2:
dd:06:f3:f3:f6:23:d8:8c:46:d6:1a:f9:35:54:83:
73:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:8C:09:01:7E:14:76:7C:31:14:C8:F9:CB:E5:8A:E7:00:FF:38:83
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/741F51345EAE11F1ABC4E21ECF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.4.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:56:3d:33:de:9e:93:e8:b1:14:67:63:16:72:e8:5f:37:e6:
dd:89:02:76:8b:59:dc:c9:d8:4a:37:52:b8:f9:6b:aa:6f:73:
58:94:91:10:2c:4c:bc:5f:8e:48:5b:da:45:7c:5f:be:16:ea:
7f:01:e4:51:61:75:d0:9f:87:2b:78:09:6b:33:6c:10:13:26:
fa:77:7e:75:02:72:7e:76:eb:f5:31:4a:06:b4:c9:51:28:ab:
e4:45:4a:a6:c3:2c:e6:03:c7:0f:40:2a:ca:3e:a3:ce:ae:e6:
9c:f4:3f:13:e9:5c:31:93:74:3f:01:b2:3e:60:6d:3c:24:77:
a7:8a:64:0a:d5:fa:6e:a3:df:d3:04:fb:1d:b0:a0:47:ae:3b:
8a:6c:94:34:37:2f:9b:88:64:57:b6:51:03:56:7e:0a:a2:24:
a1:44:ca:97:db:4e:c1:dd:35:6b:1a:d7:b7:dd:ac:e0:a4:36:
4a:44:2c:87:44:e2:ac:7a:c6:5b:a6:0b:11:96:d0:ec:52:d8:
42:88:c7:57:bd:6a:ee:07:bd:f7:13:a6:c3:da:36:f4:1f:a9:
d6:c7:15:ce:6e:e8:55:ab:58:ea:fd:2f:9e:09:1b:ca:61:b2:
5c:da:39:f7:46:1d:e2:c4:ae:43:ee:2b:c3:78:f9:20:20:07:
05:6d:82:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 09:19:23 2026 by rpki-client