Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97A0607268B711F1B1C3BAA1CE1D38B0.roa
File: 97A0607268B711F1B1C3BAA1CE1D38B0.roa (raw, json)
Hash identifier: gueTMAYRfuU7cTe80u3Avsd/9ImRPA9CC13XZnToSEo=
Subject key identifier: 29:D8:3A:F3:99:57:90:E5:2C:E5:08:E0:EF:FC:BE:66:F7:7E:7A:C7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D2C7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97A0607268B711F1B1C3BAA1CE1D38B0.roa
Signing time: Mon 15 Jun 2026 12:41:56 +0000
ROA not before: Mon 15 Jun 2026 12:41:51 +0000
ROA not after: Tue 30 Jun 2026 12:41:51 +0000
asID: 139880
IP address blocks: 154.83.224.0/20 maxlen: 24
154.89.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119495 (0x1d2c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 15 12:41:51 2026 GMT
Not After : Jun 30 12:41:51 2026 GMT
Subject: CN=6a2ff314-3373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3e:fb:37:6a:47:5d:d1:ad:a7:8b:16:06:43:
37:38:c4:f3:5f:ae:e8:09:9b:15:3f:5d:fa:63:fa:
01:6a:b2:eb:14:c5:53:db:64:3f:79:9f:77:ef:87:
57:7f:4b:ec:b7:c6:fd:20:32:79:22:e2:70:df:26:
a1:1f:ad:02:04:5c:a9:7f:85:ee:81:24:12:e2:09:
82:a5:7f:9c:d1:26:f5:e6:d0:33:c8:90:de:df:f9:
56:07:41:e7:1b:2a:7b:de:fe:54:67:0c:98:74:2a:
d4:60:93:32:e6:81:85:80:63:01:27:c0:b7:ee:8c:
1b:7a:5c:59:8d:d9:e2:2f:24:10:dd:5b:42:ef:3d:
65:db:24:03:b3:ca:c6:ea:67:a6:0e:a4:5a:2c:23:
9e:0b:81:31:35:36:df:56:1e:46:73:ac:5a:cd:0f:
7e:6b:54:14:4c:59:01:71:b0:b4:1a:65:90:83:4c:
91:2f:a0:0d:cf:d8:b8:d0:84:d8:9e:e3:0d:68:65:
f0:ce:5a:77:ff:33:15:94:dc:ff:21:71:f2:07:8e:
c2:70:87:0a:7b:50:7c:57:b6:d1:43:28:f4:cc:49:
74:13:37:56:8b:f4:36:f1:01:35:2a:e8:1d:df:9e:
8e:51:77:ed:cd:14:d2:6a:1e:2d:be:b3:be:21:bc:
98:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D8:3A:F3:99:57:90:E5:2C:E5:08:E0:EF:FC:BE:66:F7:7E:7A:C7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97A0607268B711F1B1C3BAA1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.224.0/20
154.89.224.0/20
Signature Algorithm: sha256WithRSAEncryption
6d:eb:0e:c8:95:fa:93:ab:63:1f:df:5b:aa:60:79:93:e9:94:
1c:c2:05:39:e5:63:ed:b3:c4:8f:cd:a1:f8:f3:a9:b4:b8:0b:
f7:54:87:9e:c1:b4:29:83:b0:dc:1c:63:8c:70:a4:58:ae:4c:
b3:85:76:2d:59:4c:a1:6d:8c:c5:1c:07:0a:5b:02:83:40:bb:
43:08:16:46:66:26:ed:a8:12:82:51:41:5c:83:45:fd:ea:ee:
e6:b4:d8:11:db:7d:ea:ac:49:ca:1f:33:ad:53:ef:a0:ea:75:
ca:87:25:35:95:7b:f2:6f:6b:14:ce:ea:a9:9d:51:7f:64:40:
5b:77:0d:30:77:72:aa:6a:20:2a:8e:b6:0b:b9:9a:57:d2:a6:
e0:ae:39:73:32:47:8a:87:77:02:59:dc:ed:70:f8:7d:65:83:
6e:6d:c2:0a:c7:e2:9c:26:0b:bb:2f:3f:fe:d6:ba:0a:7b:43:
85:32:8c:e7:16:8e:2f:b2:d5:ce:6f:bb:78:95:0f:3d:c0:51:
9f:1f:fc:7e:c1:ee:bd:dc:67:ac:f2:c7:7a:f5:15:56:e1:e2:
da:70:7b:d5:9c:16:0b:2c:22:36:54:4a:b6:a7:6a:f5:95:83:
be:fa:31:5f:1e:0d:6b:fc:0d:bf:74:5f:37:8e:55:67:c8:da:
43:3c:c2:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:54:55 2026 by rpki-client