Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9057469A699411F18792B1E2CE1D38B0.roa
File: 9057469A699411F18792B1E2CE1D38B0.roa (raw, json)
Hash identifier: rhsDS/cDoDea84U5ON+X1XGDiEGeMm5Us2yOuwvG7iY=
Subject key identifier: 9F:F6:03:E3:A5:20:4B:4D:3C:44:D2:C0:76:2C:61:7B:32:0C:03:EC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D355
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9057469A699411F18792B1E2CE1D38B0.roa
Signing time: Tue 16 Jun 2026 15:03:43 +0000
ROA not before: Tue 16 Jun 2026 15:03:38 +0000
ROA not after: Thu 24 Dec 2026 15:03:38 +0000
asID: 6453
IP address blocks: 154.81.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119637 (0x1d355)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 16 15:03:38 2026 GMT
Not After : Dec 24 15:03:38 2026 GMT
Subject: CN=6a3165ce-86ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:66:9e:19:93:4f:d1:d3:70:7f:e5:f5:74:47:
6f:a6:26:1e:75:e5:3f:c3:69:f3:f9:8d:9d:39:58:
a7:67:02:bd:13:5a:9b:06:26:ff:00:a0:33:60:f9:
16:3a:ce:b0:d1:ca:09:7e:6f:6b:4c:c0:54:7e:d8:
53:29:ce:bc:1c:1d:de:a0:9a:fd:94:00:eb:49:2d:
a2:4a:2e:d9:6d:39:50:77:14:8a:68:44:8b:17:73:
49:25:0f:46:16:a4:29:e6:32:0a:a4:17:96:7b:76:
8c:db:e3:34:b9:a6:3b:d4:25:df:dc:03:af:82:d7:
53:c7:cf:7e:54:93:c2:9d:ff:b6:56:67:dc:d0:e3:
7f:60:70:86:8d:e5:3f:32:55:e8:9b:db:8a:92:d6:
09:70:ca:3b:56:4c:3b:65:9c:cb:20:c2:d7:18:92:
d5:67:75:a9:79:29:c5:bb:96:00:8a:d8:28:45:66:
ec:31:b5:b7:27:52:9f:00:ce:11:fc:4d:1e:ed:5a:
30:8a:1d:a1:82:a1:65:d1:97:df:ee:da:5c:10:fe:
42:68:b9:e4:a2:55:9d:05:f0:08:f9:24:30:db:a3:
f6:5a:98:bb:88:b2:10:47:71:d4:7c:84:e0:6a:77:
83:8f:a5:7f:75:a7:87:97:14:f6:1e:dc:c6:40:9b:
09:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F6:03:E3:A5:20:4B:4D:3C:44:D2:C0:76:2C:61:7B:32:0C:03:EC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9057469A699411F18792B1E2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.60.0/24
Signature Algorithm: sha256WithRSAEncryption
38:e9:e7:55:12:7d:d8:8e:43:48:29:9d:ef:52:6a:02:b8:3f:
ad:2a:f5:89:fe:4a:52:9e:da:cf:46:87:88:ac:88:bc:d9:b6:
3f:52:11:71:26:a7:e1:00:68:01:ce:48:2f:5b:42:04:4f:8c:
e8:80:29:5f:12:98:00:03:27:c1:c0:8d:c8:80:d8:e1:d9:0b:
3c:6a:65:e6:1b:bd:05:bf:4c:88:11:08:c3:b7:c2:30:f1:0c:
8e:bc:ac:c0:c6:47:e9:f6:d0:dd:57:d8:eb:ec:22:21:c0:32:
6c:b4:62:5c:2f:c3:0c:fc:d5:c0:2b:e3:82:4f:52:9b:62:72:
12:bf:40:72:0f:d3:3b:76:3a:b7:19:1f:43:40:28:b2:91:1a:
45:8e:fc:05:09:85:aa:13:6c:b0:95:81:e1:f7:2b:75:bd:4c:
74:03:a4:48:9f:7d:16:23:aa:fd:11:3d:bb:dc:ee:4b:93:58:
95:40:43:d9:20:4f:b0:31:ff:61:de:8b:55:b6:c1:cf:30:94:
59:66:0f:c4:3e:e8:49:8f:f0:b0:f3:01:d8:80:e3:70:28:98:
4c:83:c8:59:8c:f2:6a:f5:97:db:01:05:76:bc:f3:f9:6b:7f:
76:46:71:ca:47:cc:14:36:da:65:4b:75:29:7d:81:b8:3f:9e:
d0:89:29:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:53:59 2026 by rpki-client