Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/929F7B5669A411F1B7D142C3CE1D38B0.roa
File: 929F7B5669A411F1B7D142C3CE1D38B0.roa (raw, json)
Hash identifier: V1HHKmCF1/VmeFqKZxlAk/a8d9XZWJ7ETT4APzhAvH4=
Subject key identifier: BC:B6:EC:86:B7:77:7B:39:41:C7:05:DA:56:87:AF:82:B0:AA:83:C8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D36F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/929F7B5669A411F1B7D142C3CE1D38B0.roa
Signing time: Tue 16 Jun 2026 16:58:18 +0000
ROA not before: Tue 16 Jun 2026 16:58:14 +0000
ROA not after: Thu 14 Jun 2029 16:58:14 +0000
asID: 17561
IP address blocks: 154.194.34.0/24 maxlen: 24
154.197.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119663 (0x1d36f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 16 16:58:14 2026 GMT
Not After : Jun 14 16:58:14 2029 GMT
Subject: CN=6a3180aa-4759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4a:c1:91:01:07:41:1d:05:e7:d7:67:c5:6c:
07:26:fb:0d:56:84:5d:ba:0e:77:ba:72:2d:87:2e:
2e:b2:f1:82:1d:fd:78:f7:79:ad:44:14:ea:6d:5d:
df:c0:62:60:95:7a:f4:4e:17:3b:87:7c:26:27:79:
05:26:06:65:15:6d:f2:bf:42:ce:8d:2e:4a:ad:11:
99:ed:97:45:11:a6:de:9d:88:4e:c8:86:ca:4a:63:
bf:21:e5:c8:54:c6:09:5d:f6:55:74:c2:c5:5f:89:
ed:12:32:6b:71:87:92:ff:cb:ca:42:cb:1a:1e:37:
76:4c:21:f5:e2:9d:46:7f:a5:04:46:d9:90:a9:0d:
6e:fd:4a:81:86:93:0a:f6:07:f3:6d:1f:e9:75:d4:
1c:49:b0:3d:6a:b0:e7:d6:89:fa:bf:13:26:6b:61:
c6:f2:51:4d:4f:a6:4f:0e:53:6f:58:cc:a1:d6:a1:
13:f8:15:0c:f7:fb:0e:ba:8b:bd:5c:fd:4b:4e:5d:
f1:09:27:57:a2:36:73:78:9e:68:64:b0:34:67:b3:
ed:a9:0b:8b:45:dc:fb:0b:79:97:18:81:d2:62:dd:
8e:9d:ef:40:d2:95:04:ff:75:66:c6:26:49:ad:d4:
63:e7:89:35:8c:fc:4b:cf:1f:88:8d:5f:12:88:34:
1c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:B6:EC:86:B7:77:7B:39:41:C7:05:DA:56:87:AF:82:B0:AA:83:C8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/929F7B5669A411F1B7D142C3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.34.0/24
154.197.83.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:55:c2:f5:1a:5d:a9:05:e3:6b:03:e2:45:1e:d9:4d:f7:6d:
24:ba:a0:c7:08:f6:1d:9c:33:c3:f4:92:8b:1f:58:2d:71:db:
cc:51:ae:1e:4f:f0:cc:66:48:1e:37:d1:ac:6b:da:e7:bf:4d:
41:75:d3:95:a7:3b:00:6e:99:3e:16:0d:a8:45:f6:d9:1a:68:
9f:e9:da:e7:e6:a5:e1:fe:19:2b:5d:21:d9:d9:45:8f:76:2f:
49:ae:4e:ec:d3:83:d8:9c:68:3f:ae:18:cf:e8:48:cc:8d:91:
d5:14:72:fd:55:60:07:5f:22:0f:50:30:08:b9:f4:db:ba:03:
ac:8c:9b:11:cf:c0:50:85:0f:74:8b:ae:2a:ef:b6:74:6d:db:
e1:7f:3b:df:c8:6a:da:db:cd:9c:28:03:d3:ae:1a:98:57:6b:
db:76:a3:c3:e6:c8:8d:31:75:20:01:7e:68:88:0e:9f:62:bd:
25:98:4f:66:14:71:c3:a6:b7:54:33:0b:0b:24:4d:dc:21:94:
67:f5:ac:19:6e:2d:29:e2:6b:9b:79:1e:be:95:9d:72:1f:22:
f9:e5:54:8c:91:75:cd:4d:dc:71:1e:cf:67:26:94:81:b6:ae:
7f:f4:8c:6a:7d:c5:53:db:68:49:6f:54:22:4b:b5:b6:ff:c1:
0d:c1:38:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:53:31 2026 by rpki-client