Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8228B3A85C0411F1AC783DFDCE1D38B0.roa
File: 8228B3A85C0411F1AC783DFDCE1D38B0.roa (raw, json)
Hash identifier: Ip4qS6V0kKc/Zp2KFW+tJ0NMPa5gh7A26/kRRWFv5O8=
Subject key identifier: DA:76:42:28:77:EA:FA:B0:34:B6:2C:8B:84:A9:F4:27:C4:25:E5:BA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D0F2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8228B3A85C0411F1AC783DFDCE1D38B0.roa
Signing time: Sat 30 May 2026 08:49:46 +0000
ROA not before: Sat 30 May 2026 08:49:41 +0000
ROA not after: Tue 07 Jul 2026 08:49:41 +0000
asID: 44559
IP address blocks: 154.209.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 08 Jun 2026 00:08:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119026 (0x1d0f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 30 08:49:41 2026 GMT
Not After : Jul 7 08:49:41 2026 GMT
Subject: CN=6a1aa4aa-d8a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c0:cc:0e:16:8f:e2:b8:bb:bd:7f:d6:2b:06:
b8:bc:56:ad:89:d9:f1:5b:aa:75:c8:46:1f:02:3f:
9b:a3:b2:e0:cd:07:02:85:33:36:e8:ba:ae:c9:00:
da:63:3b:d0:67:81:3a:e8:2e:6e:b2:1e:1c:87:11:
af:c8:42:81:c9:19:10:7d:e3:ab:bd:dc:31:03:88:
50:59:54:2c:37:56:91:f3:33:92:dc:9c:0a:9d:41:
0f:48:cf:de:02:65:84:f0:c3:05:c0:62:03:8e:13:
b2:9b:84:0b:60:e1:10:df:7c:fc:6f:46:97:20:91:
1f:52:7c:ce:01:85:79:84:2f:28:80:ca:ff:54:96:
dd:21:60:61:0f:ae:e6:ab:35:37:6e:c0:a2:46:36:
23:f5:45:44:04:28:77:b6:fa:3f:5b:ed:dc:ff:be:
3e:6e:aa:80:62:0b:4c:9b:d3:45:bf:78:b5:05:86:
14:0e:b0:94:b9:a7:8b:8d:f4:ad:f5:74:7c:66:31:
e9:ed:03:d1:07:f7:0e:dc:df:53:44:a7:e5:a3:c9:
78:8a:c3:0e:8a:5c:f7:43:4e:5e:00:85:48:39:7c:
83:f1:04:46:6c:a1:53:e5:02:9b:33:6c:96:23:d1:
24:b8:20:88:e6:37:ce:9f:f0:f2:ad:d4:18:53:ba:
59:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:76:42:28:77:EA:FA:B0:34:B6:2C:8B:84:A9:F4:27:C4:25:E5:BA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8228B3A85C0411F1AC783DFDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.140.0/24
Signature Algorithm: sha256WithRSAEncryption
46:d4:84:ef:00:78:a7:0d:9b:c6:96:0f:5d:6b:17:0f:f9:04:
f9:bf:a4:81:0c:a3:f3:ec:78:05:d2:c5:04:30:ca:20:09:a6:
88:da:41:75:b8:71:0b:3b:6d:95:70:58:ac:d8:c2:db:6b:0a:
3d:c0:fc:18:1d:d2:e9:e8:c9:db:ad:e8:f7:73:6b:d2:df:76:
7f:fc:ec:8f:f2:37:3a:0f:a7:8d:81:e4:df:12:f6:9a:11:24:
40:36:83:3d:fb:5f:a7:27:b0:47:bb:eb:d9:a3:92:b8:72:12:
b8:46:89:eb:95:7e:7b:7b:61:b0:51:6f:d1:14:70:00:f9:b2:
0e:e4:3e:1a:50:cd:b5:23:cf:6c:fb:f1:b7:3c:67:2d:23:b9:
a8:68:13:4e:d4:4a:a2:c5:3f:e2:b6:3a:f3:34:2b:8b:9a:d0:
79:03:63:b2:2c:42:d9:7e:7e:9d:5e:e7:4d:a9:92:5e:91:ea:
60:0a:3c:cc:40:69:02:c7:49:2e:8a:3a:25:a7:f4:84:fc:86:
89:4c:dd:fe:f8:52:fc:9f:61:54:5e:fd:ab:71:fb:dc:f1:ec:
ab:84:fe:b3:62:fd:65:06:26:74:2d:2d:3d:7b:69:67:80:e6:
ec:f1:b7:24:8f:e5:3e:a7:bd:73:de:b8:61:6c:71:5f:27:38:
d8:4d:e3:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:31:04 2026 by rpki-client