Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93A122BC5EBD11F1A614FDFACE1D38B0.roa
File: 93A122BC5EBD11F1A614FDFACE1D38B0.roa (raw, json)
Hash identifier: YzxkamB2aRKq4iUe6QvbCQbDZPPQgKpcd/ekwWwXUbw=
Subject key identifier: 78:AD:F4:13:E1:F4:B9:7B:5F:B6:67:2E:53:7D:36:B0:EF:14:91:3E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D160
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93A122BC5EBD11F1A614FDFACE1D38B0.roa
Signing time: Tue 02 Jun 2026 19:59:35 +0000
ROA not before: Tue 02 Jun 2026 19:59:30 +0000
ROA not after: Thu 09 Jul 2026 19:59:30 +0000
asID: 44559
IP address blocks: 154.210.237.0/24 maxlen: 24
154.210.238.0/24 maxlen: 24
154.219.64.0/24 maxlen: 24
154.219.65.0/24 maxlen: 24
154.219.66.0/24 maxlen: 24
154.219.67.0/24 maxlen: 24
154.219.68.0/24 maxlen: 24
154.219.69.0/24 maxlen: 24
154.219.70.0/24 maxlen: 24
154.219.71.0/24 maxlen: 24
154.219.72.0/24 maxlen: 24
154.219.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 08 Jun 2026 00:08:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119136 (0x1d160)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 2 19:59:30 2026 GMT
Not After : Jul 9 19:59:30 2026 GMT
Subject: CN=6a1f3627-0974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:43:55:d2:9d:e6:84:ae:4a:74:e8:a1:21:6b:
63:cd:0d:1f:05:d8:3a:b9:9d:23:e4:78:e6:1e:c9:
8e:bc:6f:b1:13:f1:fa:b6:85:dc:29:d0:d1:08:79:
5b:05:a8:c0:35:cd:34:e5:ac:e7:94:77:c8:b4:be:
78:4f:cf:a4:0d:66:6d:b3:3b:b6:3e:2b:0b:cb:43:
c1:75:6f:05:31:d0:51:09:fd:8e:67:59:f8:79:53:
58:3c:f4:37:9d:66:32:b0:0d:02:9a:e8:3a:23:16:
6c:9d:f8:05:0e:60:b8:e1:51:dc:f8:91:19:d2:98:
49:07:9a:63:bd:6c:c5:0d:54:77:ca:0e:ee:b8:4d:
4f:50:dc:ae:97:d1:2d:89:09:42:62:d0:d5:07:6d:
f6:e9:20:3f:f0:60:3b:9c:d0:39:f6:9f:97:a3:22:
54:dc:ba:d8:8a:48:4d:f4:71:96:73:21:a0:7d:b4:
a5:ed:ba:53:f2:84:5a:51:5e:21:81:74:5a:4b:83:
25:d9:64:64:07:b0:ef:ed:c7:02:aa:cd:6a:70:c6:
21:c3:4c:07:89:f1:2e:bf:58:21:50:a1:d8:c2:20:
93:05:24:3d:52:e7:55:ea:9e:da:f2:61:b6:b8:01:
68:41:39:bc:28:b3:af:bf:01:26:cc:f8:53:db:d5:
84:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:AD:F4:13:E1:F4:B9:7B:5F:B6:67:2E:53:7D:36:B0:EF:14:91:3E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93A122BC5EBD11F1A614FDFACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.237.0-154.210.238.255
154.219.64.0-154.219.72.255
154.219.93.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:21:1a:dc:17:56:1c:69:ca:31:1f:70:34:c3:cf:2a:06:7c:
e5:77:fe:ce:1f:b5:21:41:f9:b7:9f:8e:b2:d8:0c:09:a5:32:
a0:85:4b:98:9e:dc:ec:2c:e4:28:8e:d9:25:98:e0:81:a0:bb:
bd:f3:e1:3e:ab:5e:ea:6b:af:7d:5c:24:88:bc:79:f9:a0:f7:
dc:65:12:a8:c9:e6:11:57:86:6a:a8:d7:97:23:6f:86:fd:08:
8d:c9:db:88:f6:c4:0e:16:a7:55:5d:09:f1:21:d1:38:89:63:
a8:ed:f7:61:ef:9b:20:ad:29:38:3f:f4:f0:14:1c:aa:a9:fb:
09:44:40:f3:8a:da:2e:c0:d4:e3:57:da:33:a7:54:bf:01:71:
a3:12:89:f3:d6:85:b1:dd:7f:7b:68:37:6b:6a:39:34:97:59:
2d:70:49:88:10:f9:3c:e3:49:0b:bf:b6:1d:e1:9d:33:9c:36:
56:e4:f0:2c:3a:c7:4a:4a:06:6f:39:9e:d1:d2:e7:8a:ea:45:
00:1b:69:4a:07:43:13:62:08:e8:0e:72:57:bc:0b:82:e9:ad:
c1:d7:d5:cb:b5:25:68:c5:1a:35:a8:71:d8:db:ba:02:00:ca:
68:b4:12:31:65:07:94:5d:7b:40:f2:69:8c:b9:bf:39:46:92:
dc:2a:cf:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 10:31:22 2026 by rpki-client