Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96BF4118535A11F181EF4BBCCE1D38B0.roa
File: 96BF4118535A11F181EF4BBCCE1D38B0.roa (raw, json)
Hash identifier: 8+dgSZAQ967icPJCWZPtlhXk0dvWCrCDA45/bm43y5I=
Subject key identifier: 14:78:96:0D:CF:23:AE:19:2B:04:D8:A0:82:DD:05:A6:D4:5C:7A:02
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CC6A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96BF4118535A11F181EF4BBCCE1D38B0.roa
Signing time: Tue 19 May 2026 08:13:17 +0000
ROA not before: Tue 19 May 2026 08:13:12 +0000
ROA not after: Wed 19 Aug 2026 08:13:12 +0000
asID: 204721
IP address blocks: 154.215.2.0/23 maxlen: 24
154.215.2.0/24 maxlen: 24
154.215.3.0/24 maxlen: 24
154.221.2.0/23 maxlen: 24
154.221.2.0/24 maxlen: 24
154.221.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 07 Jun 2026 13:04:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117866 (0x1cc6a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 19 08:13:12 2026 GMT
Not After : Aug 19 08:13:12 2026 GMT
Subject: CN=6a0c1b9d-bae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:86:22:4c:b1:24:37:d4:9c:1e:ff:5e:38:ad:
b5:9e:86:29:b4:b4:28:9f:20:f2:a6:84:f4:c3:8d:
44:58:76:cc:df:c1:16:aa:cf:8d:66:32:45:e8:1e:
85:b7:cd:26:3d:6c:68:f3:42:2a:8d:9e:bd:b7:cd:
c9:54:24:54:41:45:4b:e7:6f:5d:6e:00:a9:37:2f:
03:8b:66:de:cc:f7:b5:ba:35:8f:5d:c0:ad:24:54:
44:b6:90:40:41:24:fb:89:5e:04:8a:e5:70:16:52:
74:40:92:5d:df:b4:8a:64:7c:1e:62:6a:8c:99:f0:
15:99:48:04:45:70:75:63:6c:95:1d:bb:d8:5b:30:
bd:e1:0b:bc:fd:e7:c1:c9:4c:21:71:d0:83:2b:25:
ff:34:aa:75:d5:73:f8:ba:85:fa:d1:9b:67:84:ba:
86:7f:34:d7:e8:b6:58:dc:47:9f:1d:40:af:a9:a9:
f3:cc:59:32:78:e3:66:cb:38:3c:25:8b:28:69:dd:
4e:84:d2:4c:e4:1b:86:bc:5b:ce:1f:94:82:85:40:
32:b6:f7:50:10:e3:03:34:7f:d4:70:67:07:39:0d:
02:a7:95:b3:fe:3a:66:5d:7c:8b:a1:7d:a8:e5:ec:
e4:c6:03:ae:d8:81:23:30:ba:01:55:eb:2e:be:f7:
f9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:78:96:0D:CF:23:AE:19:2B:04:D8:A0:82:DD:05:A6:D4:5C:7A:02
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/96BF4118535A11F181EF4BBCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.215.2.0/23
154.221.2.0/23
Signature Algorithm: sha256WithRSAEncryption
69:d0:9c:6f:dc:5a:b4:ff:ed:c6:ff:e5:58:47:2e:79:30:45:
6d:88:1c:8c:c0:b2:2b:12:2d:ad:9c:82:ab:49:d1:d2:31:6e:
2d:12:3a:d4:0d:e6:c1:52:1a:18:b4:06:4f:21:b8:c7:ea:1c:
44:43:68:6f:48:e7:17:a6:05:b7:b3:ae:97:d1:a2:90:12:e2:
02:7f:48:71:9a:7e:91:ae:51:56:30:68:89:65:c0:5b:5f:66:
cf:3a:e4:bd:f4:5f:65:c5:47:30:6d:cb:69:46:39:4c:4f:fd:
7e:4c:d4:99:00:28:65:30:b4:e4:a0:29:11:8d:cd:fa:97:55:
7c:2d:6f:10:79:ff:1b:1f:a3:66:a5:9e:1e:ef:4e:bb:03:f2:
f0:19:4d:71:19:cf:42:9d:ae:1d:7b:1b:b9:cc:5c:1f:a7:ff:
94:a5:52:f8:04:1d:80:01:95:df:82:d0:42:d2:be:ce:5c:3b:
07:59:d9:3a:0b:95:b6:09:bb:22:c5:3e:9f:09:6d:cb:b5:9f:
61:cf:bb:9d:12:56:de:ae:ba:15:9f:f0:d6:73:c9:d5:58:db:
e1:e8:8e:78:a6:3b:15:d3:e1:46:ec:ed:1c:64:ec:fb:7e:b3:
41:b6:4f:ff:9b:2a:61:8b:80:8a:99:79:2d:7e:f2:a1:06:eb:
ed:f8:1b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 20:34:56 2026 by rpki-client