Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D4B40CA58E911F1B0E0371ECF1D38B0.roa
File: 8D4B40CA58E911F1B0E0371ECF1D38B0.roa (raw, json)
Hash identifier: EC5tW1odG0wGiY3/6J1J/KRYAVRs7DEJQitWkMG5Bl0=
Subject key identifier: 25:A9:13:21:87:3C:29:5A:AC:DE:4A:E3:7A:4A:52:BF:E4:89:C2:C7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CFA6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D4B40CA58E911F1B0E0371ECF1D38B0.roa
Signing time: Tue 26 May 2026 09:59:15 +0000
ROA not before: Tue 26 May 2026 09:59:10 +0000
ROA not after: Sun 28 Jun 2026 09:59:10 +0000
asID: 48031
IP address blocks: 154.92.12.0/24 maxlen: 24
154.92.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Jun 2026 06:56:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118694 (0x1cfa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 26 09:59:10 2026 GMT
Not After : Jun 28 09:59:10 2026 GMT
Subject: CN=6a156ef3-9167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ec:03:f2:93:78:b0:13:0a:5e:6e:cf:62:38:
ee:4f:d7:1b:21:95:6f:8a:65:11:8c:f1:46:9a:bf:
ad:6d:ee:a4:3f:80:28:2b:fc:50:b7:96:10:77:f7:
4a:21:de:71:4e:09:d0:67:28:41:b9:96:43:3e:98:
0f:f1:00:d1:5d:c7:b8:fc:eb:46:84:24:2e:7e:ac:
e0:6a:98:a4:f7:76:5f:be:c8:0a:d4:d0:a8:d9:d6:
16:22:cd:ed:5c:36:fd:d5:55:f7:ad:eb:8a:96:f9:
13:f2:75:f2:be:2f:d5:4f:70:1e:ae:ec:b5:e7:ee:
00:f8:38:04:be:04:28:3a:f3:8b:76:04:a7:1c:2b:
c4:5c:99:f9:b8:4e:eb:f7:ec:1c:69:ef:5b:43:ff:
11:93:60:b8:ad:4e:98:52:29:8d:9d:44:98:f9:19:
f6:7c:5e:6e:57:33:08:61:8e:5e:74:3c:08:58:30:
0b:8e:5a:c7:2d:e2:88:fd:44:0a:1f:54:be:62:f2:
a4:2e:66:0e:2d:e2:c1:8e:5c:af:f3:c5:f8:e6:e5:
fb:e0:e7:61:3d:a9:17:19:c4:98:0b:7e:0a:26:8b:
1f:7c:7d:a5:94:28:bf:4c:88:64:07:5c:df:2e:b3:
1b:ba:97:09:c8:7e:e3:06:01:02:78:81:4e:11:ce:
4d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A9:13:21:87:3C:29:5A:AC:DE:4A:E3:7A:4A:52:BF:E4:89:C2:C7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D4B40CA58E911F1B0E0371ECF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.12.0/23
Signature Algorithm: sha256WithRSAEncryption
40:c9:81:cf:c0:ad:25:b5:69:a2:b3:6d:ce:51:d4:bc:a2:89:
17:32:f7:26:e2:ca:77:db:41:d0:ba:3d:6c:1e:7c:ec:c4:8d:
5d:0d:27:8a:2c:14:cf:26:17:6f:00:6a:1f:b9:c7:e3:0f:7a:
97:fe:b8:2a:76:89:98:74:94:d1:51:47:82:a1:34:8e:75:22:
ec:60:19:e6:af:09:8b:be:07:6d:ee:85:d8:ab:d4:e6:07:a2:
3c:5f:fa:48:ab:55:43:0c:8d:b9:0c:63:ee:5c:2a:96:d3:3e:
b2:f3:fe:dd:6a:bc:ea:3a:41:88:48:b3:b3:c4:0a:85:28:1b:
e7:7c:d4:14:b4:a7:b1:1e:a4:ef:9b:27:cd:8c:0b:fc:67:ad:
bd:a0:7d:4a:83:85:f4:61:b8:36:42:18:44:1b:4f:ba:d5:a1:
58:2b:9b:17:3c:14:91:e5:69:ac:ea:e5:0f:9c:02:9b:4b:03:
78:60:5a:3c:28:ec:e0:45:87:78:9e:df:1b:69:a7:b1:74:8b:
69:32:25:58:94:0e:c4:0e:9e:f1:ff:02:a3:82:4a:7b:2b:ae:
79:09:9f:46:b6:fb:06:c8:8f:6d:db:13:72:78:50:73:0e:53:
aa:62:55:0f:ef:1a:df:74:89:70:12:98:4f:09:79:6e:92:bb:
d9:52:0f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:04:20 2026 by rpki-client