Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/79DDF0D25E9311F19B45BF01CF1D38B0.roa
File: 79DDF0D25E9311F19B45BF01CF1D38B0.roa (raw, json)
Hash identifier: mmtLB6S2u5jE7kGGyRfQmrGf8dweaknKCqm7UZO9mP8=
Subject key identifier: EF:F7:2E:4F:F6:16:69:B2:7B:81:9F:8D:1D:7D:ED:56:40:58:DD:2B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D140
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/79DDF0D25E9311F19B45BF01CF1D38B0.roa
Signing time: Tue 02 Jun 2026 14:58:13 +0000
ROA not before: Tue 02 Jun 2026 14:58:07 +0000
ROA not after: Tue 25 May 2027 14:58:07 +0000
asID: 23764
IP address blocks: 154.209.21.0/24 maxlen: 24
154.209.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119104 (0x1d140)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 2 14:58:07 2026 GMT
Not After : May 25 14:58:07 2027 GMT
Subject: CN=6a1eef84-84cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:bd:42:90:43:c4:77:85:f8:2e:b1:fa:5f:95:
46:22:d0:4f:e9:b1:d3:97:29:aa:a8:9f:28:8a:a5:
a4:8e:85:6a:0d:99:0e:30:11:c7:30:04:16:ac:e5:
c4:3d:58:f3:b0:08:ec:3b:96:14:47:86:6b:3d:77:
df:6e:c3:8b:51:27:58:2b:a1:b7:43:a9:ff:59:fe:
8d:c0:c6:8f:42:0f:52:13:66:7b:89:52:b8:d7:8f:
2c:32:2a:61:bf:8d:6b:da:c1:fa:54:e6:d4:5c:2b:
45:c8:6b:8d:17:08:e3:24:e0:77:3d:18:c9:67:93:
6f:96:be:e8:69:48:ea:19:49:c4:53:83:30:ad:1b:
db:fe:0c:bc:ba:f2:b4:85:62:01:c1:8a:ea:ac:21:
02:8d:f4:8b:b9:a9:2c:9d:78:a6:19:3b:ee:88:05:
bc:23:f4:41:91:46:fb:b0:bd:cd:a9:14:7b:ef:ac:
cd:7e:ac:22:ce:d5:27:9c:bb:4b:c5:cf:b6:dc:bb:
d0:92:00:21:17:d2:df:0b:c3:24:05:34:6b:d6:9e:
29:2e:a0:7b:fb:62:50:65:dc:cd:02:17:3d:8f:92:
df:c6:b7:c1:49:8d:17:c2:cd:d4:2f:93:54:19:ab:
22:98:ea:20:52:14:f5:da:2e:7d:2c:3b:d7:60:ee:
07:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:F7:2E:4F:F6:16:69:B2:7B:81:9F:8D:1D:7D:ED:56:40:58:DD:2B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/79DDF0D25E9311F19B45BF01CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.21.0/24
154.209.23.0/24
Signature Algorithm: sha256WithRSAEncryption
27:b0:8e:4c:1e:ed:89:e3:90:8b:65:b3:02:2a:dd:d9:4b:f9:
7f:18:2e:a6:f6:ab:cd:3b:4b:27:09:88:0b:65:1a:f1:88:d2:
cd:cf:02:66:49:5d:e2:a8:7d:81:f6:f3:fe:fd:5a:70:35:e3:
49:43:7f:53:b8:a1:5e:74:59:94:2b:bd:25:98:69:f1:e7:9d:
cd:97:65:b6:74:28:6f:ea:c2:8f:46:c8:ed:d2:32:fe:ee:7b:
8c:74:8a:14:e6:f2:5c:de:14:ce:f9:ea:c5:f5:59:10:bd:11:
c9:7e:b2:47:26:7e:00:6f:3b:0e:c9:92:9d:e3:6b:38:e3:96:
f2:05:69:41:7c:ed:97:f9:fd:5d:de:0f:41:00:40:c1:6a:bc:
b0:62:2b:d4:4c:50:86:63:bc:79:65:dc:9e:07:4c:25:69:10:
68:ac:7b:5a:4f:40:d9:8c:32:91:a2:3c:60:07:74:a1:19:72:
2a:26:d5:24:11:3e:43:cd:77:ee:d1:84:f7:a9:7c:dc:8a:63:
b3:40:63:99:06:27:f1:d1:91:76:23:6f:55:bd:b1:36:c9:01:
b5:6f:5d:0a:e6:2f:a2:f7:c7:05:36:90:09:d5:16:24:86:e0:
6a:07:af:a5:ee:6d:89:b6:8a:5d:58:53:f1:ce:ef:28:7d:65:
09:38:55:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:35:54 2026 by rpki-client