Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/914C81345E9811F1ACB7511ECF1D38B0.roa
File: 914C81345E9811F1ACB7511ECF1D38B0.roa (raw, json)
Hash identifier: 6YkxfiAd2QCYKtmOCHmzDFAGOJlF5nhpNu4741Bbyjg=
Subject key identifier: B1:DF:21:3A:36:FE:69:FA:CE:1C:38:D9:CF:BA:8E:0D:64:D6:51:B9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D148
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/914C81345E9811F1ACB7511ECF1D38B0.roa
Signing time: Tue 02 Jun 2026 15:34:39 +0000
ROA not before: Tue 02 Jun 2026 15:34:35 +0000
ROA not after: Thu 09 Jul 2026 15:34:35 +0000
asID: 61112
IP address blocks: 154.82.138.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Jun 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119112 (0x1d148)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 2 15:34:35 2026 GMT
Not After : Jul 9 15:34:35 2026 GMT
Subject: CN=6a1ef80f-5738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:41:cb:91:fe:9b:8b:64:78:57:83:81:88:dc:
0c:c6:c7:82:ff:be:db:2c:c6:7f:01:76:62:aa:04:
e3:e7:a8:63:11:46:1e:53:bf:b8:0c:c3:ea:d1:62:
f8:ff:9e:96:55:7f:fa:73:ca:f3:70:e6:fc:7e:c0:
83:b8:11:c2:98:d0:d8:5c:95:67:1b:79:5c:88:e1:
c9:c2:6e:85:57:f8:f4:f7:e1:d6:56:d9:fc:61:bf:
30:1b:63:de:8b:79:df:f1:34:c0:c4:e3:db:c9:09:
61:dc:dc:48:08:86:c6:56:3c:95:ed:d8:a0:04:99:
ec:99:d7:02:18:8e:b3:90:7a:a0:1d:25:d4:68:93:
12:99:a7:19:06:32:c9:a1:86:cf:ae:34:9d:82:c4:
59:8e:76:11:1e:7a:a7:3e:21:db:bf:2e:27:8a:a9:
a6:a7:d5:f5:e3:95:80:6b:74:9f:cf:36:fd:e6:d4:
cb:18:75:f8:54:e5:70:9f:18:ef:73:95:8c:9e:a0:
68:54:9c:e3:56:86:09:4d:1c:52:75:8a:95:e2:81:
7a:c3:5c:6c:67:89:e9:e5:73:59:48:59:02:85:c2:
82:60:d4:f3:6b:b1:98:f2:59:88:cb:e4:4d:b3:bd:
fb:d9:61:77:3e:15:b8:eb:4e:89:86:db:75:8b:9f:
29:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:DF:21:3A:36:FE:69:FA:CE:1C:38:D9:CF:BA:8E:0D:64:D6:51:B9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/914C81345E9811F1ACB7511ECF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.138.0/23
Signature Algorithm: sha256WithRSAEncryption
bf:d5:2c:a4:4d:09:02:82:3d:97:7b:68:0d:94:da:c5:94:0c:
b9:3e:46:36:e8:22:16:50:8f:55:e7:eb:3f:a1:aa:2f:3e:2d:
ec:30:a2:ac:bc:5c:1a:8a:91:0a:7c:41:1c:01:e7:b0:4a:ae:
49:a9:dc:08:d8:45:24:f9:55:b9:e2:2a:59:da:9f:59:0c:4b:
88:ea:77:94:94:09:29:48:c2:80:fb:6d:ba:03:6b:6d:85:c5:
e9:fa:f0:d5:aa:af:af:c7:b8:fd:f7:a1:d3:df:aa:77:8d:2d:
91:63:da:76:54:fc:d2:e2:91:40:2e:39:5e:58:89:bf:2c:67:
7d:bc:be:35:1d:42:5f:08:3f:08:f0:6d:8b:6d:c9:1b:cd:be:
a7:ce:b1:ee:4b:fe:78:37:dd:dc:6c:da:af:54:bf:81:f8:63:
22:27:71:4a:49:34:9e:1f:27:f6:9f:e4:5b:06:4c:52:bd:d7:
0c:81:53:fa:84:46:0f:90:d8:7c:11:c5:0b:2e:a0:81:ad:00:
a7:5e:93:56:0d:b5:68:cd:09:44:b0:51:e2:bc:f3:71:a9:5c:
31:95:5b:3e:d8:a2:94:7a:a1:57:ad:b4:13:81:88:0e:12:de:
f0:e0:c0:20:0b:39:1a:9f:74:26:bd:38:06:87:38:90:b7:40:
54:31:a2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 03:20:25 2026 by rpki-client