Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A3886C8551E11F1804593FBCE1D38B0.roa
File: 8A3886C8551E11F1804593FBCE1D38B0.roa (raw, json)
Hash identifier: r3baLo1Xkk+EG1KSPZO40q0NPfc3dMOwyBDkK0fpibA=
Subject key identifier: 55:08:F4:2F:3E:BC:F4:A5:79:AC:79:C3:9B:BC:F6:B5:B2:5B:F6:1D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CD7D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A3886C8551E11F1804593FBCE1D38B0.roa
Signing time: Thu 21 May 2026 14:08:28 +0000
ROA not before: Thu 21 May 2026 14:08:24 +0000
ROA not after: Fri 26 Jun 2026 14:08:24 +0000
asID: 138915
IP address blocks: 154.93.124.0/24 maxlen: 24
154.93.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Jun 2026 06:56:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118141 (0x1cd7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 21 14:08:24 2026 GMT
Not After : Jun 26 14:08:24 2026 GMT
Subject: CN=6a0f11dc-f21b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:4a:9f:1e:5e:86:72:63:2d:8a:ca:58:91:e3:
b1:63:a0:c6:ed:23:33:e4:50:47:53:28:6c:b5:da:
a2:9c:e4:54:ea:cd:f9:c5:eb:14:ab:e5:ec:ba:4d:
80:4d:9e:00:f8:24:10:d5:33:f6:90:0e:1f:a2:42:
32:1c:e4:19:a5:99:19:a0:be:14:26:71:c9:8f:f9:
3a:32:31:f5:8c:67:29:60:6e:f2:71:f2:70:2f:bf:
95:b8:2d:69:4e:a0:f4:dc:48:c4:0c:bb:58:8d:7d:
1d:c2:bc:dd:46:18:0f:40:fa:ad:3f:81:f6:c1:d6:
3b:50:7b:7d:1a:22:0d:26:19:c1:7e:42:67:98:fb:
f6:08:3a:70:87:29:86:c6:7e:3a:00:12:80:b6:9b:
c2:ee:5d:cc:d7:1a:7c:4f:44:b0:48:72:b1:7e:5f:
2d:60:26:4b:59:18:f7:b6:77:26:6d:bd:ec:3a:a2:
cd:fc:3c:98:25:75:c9:dc:3e:de:c7:40:05:5e:a7:
d8:d7:de:bf:a2:00:eb:90:54:a2:30:32:06:29:39:
56:d1:c7:07:0d:c6:44:e6:40:a2:a6:05:c3:71:9b:
5a:97:70:08:df:1e:aa:04:6a:73:2c:c2:e6:24:1c:
bb:93:5f:0e:4f:81:f4:28:e0:be:1e:45:cb:9b:37:
5c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:08:F4:2F:3E:BC:F4:A5:79:AC:79:C3:9B:BC:F6:B5:B2:5B:F6:1D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8A3886C8551E11F1804593FBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.124.0/23
Signature Algorithm: sha256WithRSAEncryption
17:56:97:6c:36:94:fe:30:3d:d4:13:c5:5d:55:3d:e6:16:30:
22:64:47:54:03:08:0a:04:c5:50:27:86:b3:2f:f7:96:23:f1:
c3:6d:e9:01:53:8b:1f:30:c6:5c:16:82:74:be:76:27:1f:d9:
04:f6:f3:dd:33:c5:80:8e:3d:0b:4c:76:7a:b7:e1:ca:e8:44:
2c:e8:c0:69:b6:10:51:76:3a:24:ed:ff:45:9b:62:b5:12:94:
96:ab:15:0b:71:cf:2e:89:8f:73:3a:9b:27:ca:2e:c1:e3:b1:
38:4e:0a:93:11:39:df:de:f8:d2:07:7d:d0:48:81:f7:bb:8a:
a3:20:4d:5b:5a:99:11:fc:11:e3:5e:32:1d:0b:de:ff:cb:36:
32:8d:8b:83:54:4d:b6:c9:8a:e5:f0:72:b7:19:e7:8a:d5:32:
9c:f1:27:1a:e6:0b:2d:c0:38:dc:82:09:74:ba:37:bd:3a:4c:
69:22:e6:d0:20:91:cb:f2:df:79:8b:9a:34:8d:4b:ca:1e:78:
16:21:78:10:5e:56:5e:64:ab:9b:13:27:f7:8f:b2:1a:9d:bf:
e5:fb:76:d4:ae:03:f9:0f:59:c0:35:1b:66:93:7f:d2:7b:a9:
d2:35:58:99:6d:50:c3:18:c6:f7:22:ce:a8:53:57:33:c6:cb:
39:a3:2f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:12:40 2026 by rpki-client