Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97AC19B6535F11F1A3E6F8D8CE1D38B0.roa
File: 97AC19B6535F11F1A3E6F8D8CE1D38B0.roa (raw, json)
Hash identifier: awTEC3CiU596DTaZuYICaqQ0Ne3RKAyfoHO2U/OTAuA=
Subject key identifier: 31:C1:A7:E9:54:60:A9:77:C5:F9:D0:95:33:8D:94:93:12:08:44:16
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CC7E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97AC19B6535F11F1A3E6F8D8CE1D38B0.roa
Signing time: Tue 19 May 2026 08:49:06 +0000
ROA not before: Tue 19 May 2026 08:49:01 +0000
ROA not after: Sun 28 Jun 2026 08:49:01 +0000
asID: 211826
IP address blocks: 154.194.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 26 May 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117886 (0x1cc7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 19 08:49:01 2026 GMT
Not After : Jun 28 08:49:01 2026 GMT
Subject: CN=6a0c2402-26c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:9a:85:d3:d3:9b:23:d7:31:0b:e0:66:a2:c6:
e7:c0:fd:bd:d9:c0:ba:60:1c:c2:25:57:69:f7:f1:
8d:07:a8:9c:bc:95:ad:0d:55:0c:38:34:75:0b:d2:
91:81:96:af:83:27:89:58:92:cf:4e:b5:a5:2a:c8:
f5:0a:85:cd:66:79:63:89:bf:8b:f7:20:4c:09:c2:
73:93:24:51:71:e7:26:a8:93:35:47:c7:21:36:4a:
74:b3:6e:c1:b1:3e:4d:cc:c7:99:0e:e5:d2:62:8b:
e5:6b:c0:66:f3:55:9b:c7:8a:92:3f:3d:32:c9:8f:
f9:a7:01:ac:fb:1b:dc:b5:3c:b0:4e:90:3e:4b:9e:
2e:7f:2d:51:4c:c2:78:54:7e:40:90:cd:cd:9d:bc:
15:fb:57:40:be:f4:0c:27:80:cb:c4:c9:97:30:49:
e5:1d:ef:22:e6:65:66:1c:62:69:a4:07:35:6c:fb:
2c:94:f4:e0:2b:cd:56:37:dc:a6:e2:2d:48:6e:cc:
03:2c:a8:2f:dc:68:7a:b6:53:e1:23:f3:c6:78:4a:
1e:ec:8b:fe:12:72:02:b5:8a:3b:b0:9d:49:46:02:
cb:9e:ca:c5:50:a8:ac:70:b1:a4:38:41:82:3c:60:
0e:eb:6c:e2:ff:bb:f9:a5:9a:e1:96:ac:bf:84:8b:
9d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:C1:A7:E9:54:60:A9:77:C5:F9:D0:95:33:8D:94:93:12:08:44:16
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/97AC19B6535F11F1A3E6F8D8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.55.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:56:40:c4:62:89:22:bf:1f:80:09:75:f8:b3:fd:fc:0f:03:
8d:2d:ba:01:e9:bf:d5:09:47:ae:65:9e:ca:e8:f9:cb:69:68:
82:94:77:97:f6:d6:e4:51:90:dd:04:cd:a4:c7:f7:5e:7a:76:
c9:c1:79:ec:81:74:4f:d3:da:2d:f4:e6:51:dc:43:66:fa:de:
28:9c:b0:66:d8:a9:22:b3:38:2a:36:05:8b:7d:2a:3b:8e:1a:
7a:01:a6:6a:ea:6f:04:df:63:f5:55:61:f0:49:89:0e:50:45:
1e:2b:fc:22:f8:71:bb:d7:a3:b5:13:c4:c4:42:8b:73:48:8e:
bb:24:87:62:03:03:6c:b8:b9:83:8c:7c:8b:d0:df:ea:7b:29:
76:5b:95:59:b9:bc:a8:c8:07:41:dc:66:9c:2a:59:89:65:29:
9d:34:5b:0a:fe:e7:54:99:76:61:31:9e:fc:e2:80:cd:ec:0e:
06:e0:75:aa:32:20:0a:40:b9:1b:48:14:e6:4d:e9:79:c4:0b:
c3:c7:9c:73:8e:93:dd:e7:90:7e:56:3a:7d:ef:8d:16:0b:a4:
16:3a:50:84:c5:ca:bd:7d:e2:b2:9e:7d:55:49:62:9e:9e:41:
1d:a2:cd:46:67:06:65:42:8f:1c:6d:e6:1e:a4:29:3d:21:fb:
d5:65:38:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 24 13:09:20 2026 by rpki-client