Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9673A390560011F1B24A9BDCCE1D38B0.roa
File: 9673A390560011F1B24A9BDCCE1D38B0.roa (raw, json)
Hash identifier: eSl0ZgDuC2y/a66y50I9xz9RxiLEAkJrGaq3B4ItW3M=
Subject key identifier: 31:70:9E:3D:9E:05:EA:DA:BC:FF:84:CE:A7:AC:FF:24:94:91:80:0D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CE3E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9673A390560011F1B24A9BDCCE1D38B0.roa
Signing time: Fri 22 May 2026 17:06:35 +0000
ROA not before: Fri 22 May 2026 17:06:31 +0000
ROA not after: Sun 28 Jun 2026 17:06:31 +0000
asID: 17561
IP address blocks: 154.82.154.0/23 maxlen: 24
154.82.156.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118334 (0x1ce3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 22 17:06:31 2026 GMT
Not After : Jun 28 17:06:31 2026 GMT
Subject: CN=6a108d1b-a9e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b6:fa:7e:fa:9b:69:b1:db:8c:04:7e:c3:84:
94:8e:3c:52:4d:ec:ad:fc:a0:f8:fd:63:53:c0:fe:
99:2c:6c:2b:2b:fc:33:2d:da:3c:75:e7:4d:9c:ae:
a7:0a:1c:80:2f:af:e1:4a:ec:4e:49:d5:6c:c1:7d:
60:f0:a2:52:76:c9:31:32:58:74:89:69:18:37:f2:
f9:38:d8:17:ed:ac:9d:3c:8f:dc:fe:17:46:85:24:
62:09:13:95:aa:f9:eb:30:30:a2:15:8d:10:08:3e:
c6:fc:fb:12:9b:83:47:0c:d3:28:ce:cf:1f:be:9f:
ab:29:83:8e:84:60:56:1a:2b:db:c9:ea:ed:f6:19:
c7:5d:ea:d7:8a:dd:ab:98:61:83:3c:c5:7a:83:35:
56:f4:22:5b:6c:75:53:8c:c6:63:38:89:b8:11:1b:
c0:38:a6:98:2c:75:0e:fd:7b:e7:cf:b2:98:4c:84:
22:11:51:f5:4e:ed:26:b3:86:95:c2:bb:52:89:3c:
4e:32:61:2c:6e:23:c8:66:05:f1:5d:e6:3c:99:a8:
3a:f8:97:5f:0a:09:b7:91:e2:bb:83:22:85:fd:7d:
20:74:a7:a3:b6:9d:83:ef:60:c0:b7:02:ab:8f:23:
bd:76:47:5d:6b:7c:07:17:df:23:10:71:71:32:f9:
68:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:70:9E:3D:9E:05:EA:DA:BC:FF:84:CE:A7:AC:FF:24:94:91:80:0D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9673A390560011F1B24A9BDCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.154.0-154.82.157.255
Signature Algorithm: sha256WithRSAEncryption
05:de:e4:ba:69:66:b5:df:f7:a5:56:55:53:66:98:73:01:fa:
19:d1:02:09:8a:a6:c8:7c:3c:24:99:21:2f:ed:7c:86:f0:5e:
dc:98:61:fb:07:27:25:1e:6b:8f:53:4b:2c:4e:40:5a:89:7f:
bd:45:fd:a1:b4:8a:17:b4:f4:33:a0:f4:10:0a:0c:9f:83:4b:
e2:60:7b:90:f9:9f:c0:e8:01:53:d9:e2:ce:76:36:d9:e7:4e:
2e:79:71:62:a4:16:ed:2c:7f:7e:a9:13:0a:d5:5b:19:b2:c3:
4e:9f:34:2c:91:3f:75:e9:09:af:8c:db:c7:b1:61:b0:ff:38:
b6:25:7b:1b:9b:55:4f:2e:6f:a0:a4:ee:92:5f:70:de:f5:f9:
3d:56:99:1d:b7:d8:83:16:ef:94:93:b4:d4:74:64:56:2b:24:
11:09:42:59:02:45:7c:35:c8:e6:a0:66:6a:20:f1:18:dd:45:
28:3a:8f:41:db:c3:dc:5d:2d:6e:08:39:42:66:14:4c:70:74:
c7:3d:6e:38:f3:f4:1a:af:7a:18:7c:67:2c:b3:05:4c:03:38:
d5:24:a2:4f:11:97:58:32:7d:eb:09:58:28:38:41:c2:d6:f7:
bf:d8:01:2b:99:be:a0:7c:21:e1:b3:a4:ab:63:b7:4c:13:cb:
b1:e6:eb:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:50:05 2026 by rpki-client