Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B2E6490578311F1880C5313CF1D38B0.roa
File: 9B2E6490578311F1880C5313CF1D38B0.roa (raw, json)
Hash identifier: mmid8fzGJwMG4l8/cyeRKTlYvfPxPbfGSdUgPGS5VI0=
Subject key identifier: CC:37:34:E3:EC:C4:24:51:C9:BE:D8:3B:C6:93:D9:8E:49:E3:81:22
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CEE9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B2E6490578311F1880C5313CF1D38B0.roa
Signing time: Sun 24 May 2026 15:16:58 +0000
ROA not before: Sun 24 May 2026 15:16:53 +0000
ROA not after: Thu 02 Jul 2026 15:16:53 +0000
asID: 11427
IP address blocks: 154.194.232.0/22 maxlen: 24
154.194.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 07 Jun 2026 13:04:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118505 (0x1cee9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 24 15:16:53 2026 GMT
Not After : Jul 2 15:16:53 2026 GMT
Subject: CN=6a13166a-8909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:40:c8:e8:e5:ac:49:df:86:d3:68:96:97:28:
09:26:4d:2d:d3:d0:0a:70:45:71:51:86:96:3d:05:
82:61:dc:ec:dc:1c:6a:70:f1:4d:d5:56:b4:48:83:
db:bc:97:56:b9:b8:f3:a0:d3:4b:f4:1f:36:34:a9:
ee:e8:79:34:7d:39:13:d4:d6:1f:91:b2:95:d8:81:
2f:69:f0:55:6e:ad:10:96:f1:3a:7c:de:b4:8b:ac:
17:bd:9a:61:66:93:5b:fa:6d:87:a9:a4:90:78:79:
74:12:79:18:47:28:bf:d6:5b:14:6b:ec:13:f7:94:
15:aa:c2:56:0c:ce:07:b8:e0:2c:5e:5e:24:a9:a6:
c2:1b:93:25:3f:30:7a:38:1c:77:c6:fd:40:aa:68:
f4:02:b0:5d:e5:77:3d:97:ba:f1:32:29:55:1b:46:
a2:99:5f:8a:d8:47:2e:55:13:ff:3b:0c:7c:f8:d5:
db:3f:f9:b8:df:b2:7d:1e:f1:26:e8:48:41:8c:57:
7a:02:bf:10:f4:62:56:51:0f:f3:32:b8:06:fc:e3:
27:fc:75:06:28:fa:0f:b3:ff:78:d0:e9:e6:91:17:
b3:36:a5:71:61:5a:6a:7a:11:55:48:12:ad:2e:b4:
1b:d8:dc:40:e7:aa:8b:ab:22:b9:a8:20:cc:f9:0a:
6c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:37:34:E3:EC:C4:24:51:C9:BE:D8:3B:C6:93:D9:8E:49:E3:81:22
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9B2E6490578311F1880C5313CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.232.0/22
154.194.244.0/22
Signature Algorithm: sha256WithRSAEncryption
1e:03:0d:94:ab:8f:64:47:a6:b9:de:a5:95:6a:e5:67:2d:60:
0a:e3:5a:46:ec:af:d8:fb:cb:cf:6e:0f:68:d8:f2:79:e9:44:
7f:ac:5e:7c:18:94:a0:fd:d6:5d:1f:c2:7f:47:0f:33:83:e2:
88:cb:9f:db:03:c4:3c:e7:b7:ca:16:2c:d3:60:11:dd:02:38:
40:a6:65:df:00:56:f3:4c:48:00:6a:5b:ea:c5:d6:1a:e5:bf:
17:50:6f:3f:4f:bb:05:d4:05:81:04:b1:26:c9:41:09:4a:e1:
da:c7:fc:52:23:c5:77:be:82:6c:39:09:36:a7:e3:78:e9:92:
71:a8:95:8b:69:b0:df:14:37:c4:c9:af:24:34:d3:78:8a:34:
7c:2a:ad:36:c7:fe:af:98:9b:c5:c3:9d:8a:4d:f9:10:de:34:
e7:7d:33:a5:af:73:6a:38:ed:71:c3:ba:57:71:17:0d:5a:bf:
c8:3c:09:30:df:4e:ad:ba:31:a8:50:51:4b:b6:53:70:0e:43:
28:5b:56:46:6e:f8:3a:c6:69:6e:1a:d6:49:6c:9a:64:41:f1:
6d:45:bd:1d:bf:03:1a:07:7b:80:53:c0:79:1a:0a:8d:4b:04:
09:6e:4d:76:37:d8:f5:e1:e3:77:f3:7a:fa:01:4b:64:80:e2:
1e:b0:f5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 17:26:05 2026 by rpki-client