Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75876A2E6A3511F1915D36BDCE1D38B0.roa
File: 75876A2E6A3511F1915D36BDCE1D38B0.roa (raw, json)
Hash identifier: NAgL/3SzhhUA+pK/RK/t4UtLCmqZIlWLxCGGXiPbjb8=
Subject key identifier: C2:79:51:D9:68:A6:E3:22:36:98:EB:2D:2A:D5:80:AD:2E:FB:8B:AD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D3A2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75876A2E6A3511F1915D36BDCE1D38B0.roa
Signing time: Wed 17 Jun 2026 10:15:27 +0000
ROA not before: Wed 17 Jun 2026 10:15:22 +0000
ROA not after: Mon 20 Jul 2026 10:15:22 +0000
asID: 273155
IP address blocks: 154.200.236.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119714 (0x1d3a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 17 10:15:22 2026 GMT
Not After : Jul 20 10:15:22 2026 GMT
Subject: CN=6a3273be-1350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:37:e3:27:be:33:75:e8:73:c1:35:32:f3:4b:
8a:5f:3e:83:02:fc:b5:8c:35:13:2d:b1:14:82:55:
b9:37:36:cf:1e:28:b0:65:81:a8:25:35:d7:2b:48:
14:c2:ff:02:28:99:b4:7b:c8:da:a5:62:a5:43:b6:
79:b6:d1:70:f4:98:c3:cf:c1:ae:54:f0:0f:d0:99:
c1:f8:82:f0:28:5e:73:6b:c9:33:99:38:04:54:90:
23:a8:7d:89:e7:6c:54:aa:bb:ad:42:51:ac:f5:2c:
75:61:41:ad:b3:12:21:dc:8f:ed:61:a0:88:d3:32:
a8:37:43:cd:48:16:c0:76:ab:40:ca:b1:7c:aa:1e:
f4:56:5b:28:d5:51:c7:99:b6:5b:95:7d:91:fe:01:
a6:a0:66:c6:7c:c7:54:50:27:36:02:d7:fd:1b:5a:
15:cd:3c:e5:40:38:78:70:5b:0b:03:f7:c3:e7:1d:
50:ab:74:08:0e:9b:6d:ce:14:52:cb:58:ef:a3:16:
7b:57:8b:59:bb:43:dd:f9:65:a2:6b:d7:91:89:9d:
50:41:6a:4c:72:67:cf:df:6c:08:a2:db:90:e2:22:
93:58:10:ab:b7:57:39:a6:c1:5c:2d:3c:05:44:2c:
a1:ef:b7:d5:68:81:20:30:41:5b:33:63:be:07:18:
9d:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:79:51:D9:68:A6:E3:22:36:98:EB:2D:2A:D5:80:AD:2E:FB:8B:AD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75876A2E6A3511F1915D36BDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.236.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:f7:dd:1f:35:f6:b0:e2:b7:53:90:47:ed:e9:f3:d1:d7:a1:
32:9b:6d:aa:cb:7f:f3:df:cf:5b:3f:9e:2b:c0:11:49:f2:68:
f9:c7:75:92:9a:86:00:4e:38:fd:c0:04:00:75:5d:59:b5:60:
e4:61:1a:7f:0c:92:d9:24:b9:47:36:d8:e1:79:d5:c2:25:23:
98:5d:91:f3:20:18:b9:55:c7:1d:13:2d:74:5a:1f:ee:da:bf:
1c:11:a4:43:49:2a:33:3a:b2:52:1e:f7:ac:c3:e7:f2:a8:e7:
61:6e:5e:31:8a:93:c5:4d:41:45:63:76:de:ba:42:b8:a2:e1:
d2:34:ac:44:51:25:9f:e1:08:2c:9a:04:15:81:c1:cb:ec:d6:
1a:52:37:16:56:7d:d9:d1:69:98:72:7c:69:b0:2e:81:46:73:
e3:15:3b:80:64:56:65:78:31:fc:1e:2c:a3:9b:08:09:13:df:
c5:0f:ad:85:b3:33:75:81:37:4e:e8:c7:f2:29:4f:f8:e2:14:
3a:82:70:8e:af:85:12:01:ca:51:f5:09:99:f9:7f:06:2e:3b:
c9:49:06:4f:79:3e:5d:fd:dc:b9:ec:43:5b:6f:70:4d:5a:79:
4b:ca:70:3c:b2:98:fe:9a:78:29:5c:9a:61:0e:eb:56:c9:b7:
f4:9c:1b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:53:59 2026 by rpki-client