Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D07E540535811F1997D05AFCE1D38B0.roa
File: 9D07E540535811F1997D05AFCE1D38B0.roa (raw, json)
Hash identifier: 6aiGowH2mQ7lA9WoGPiE/UsCbyQn+bV3kATgjsezsDU=
Subject key identifier: 73:F5:BB:0D:76:E6:48:0D:5A:26:8C:36:5D:29:06:EE:DC:E9:D8:C7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CC62
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D07E540535811F1997D05AFCE1D38B0.roa
Signing time: Tue 19 May 2026 07:59:08 +0000
ROA not before: Tue 19 May 2026 07:59:04 +0000
ROA not after: Fri 14 May 2027 07:59:04 +0000
asID: 151804
IP address blocks: 154.197.141.0/24 maxlen: 24
154.197.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 13 Jun 2026 00:07:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117858 (0x1cc62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 19 07:59:04 2026 GMT
Not After : May 14 07:59:04 2027 GMT
Subject: CN=6a0c184c-810c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3d:c2:fa:8a:2b:03:a7:a1:eb:54:c5:52:54:
69:6c:0b:aa:75:20:21:dc:95:15:18:bb:fb:00:3a:
e1:0b:5b:df:ba:fb:df:c0:ec:ce:2c:80:ee:5e:a9:
79:3e:ef:fd:7e:80:f3:a3:df:d7:41:9f:b0:54:95:
a2:3e:dc:ee:b4:db:34:1c:4f:38:fc:b3:ed:29:ec:
89:0b:fb:a4:f6:1a:2d:3e:60:56:6d:70:70:03:0a:
58:22:f8:ed:62:12:fc:bc:dc:08:12:3b:fb:47:4d:
6a:86:06:b5:57:bf:13:d5:c3:70:7c:9c:87:11:da:
e3:74:e1:f6:ac:ed:aa:4f:0f:f2:37:da:ad:2d:dd:
c0:eb:75:2f:2e:44:93:6a:1f:d6:1d:a6:4f:8e:65:
f6:0f:f5:50:0f:15:82:58:75:4c:e4:7c:51:f8:e0:
ac:81:0c:2d:b5:00:2f:d8:a4:14:b8:86:46:2f:e8:
7f:7c:8b:3a:a2:2a:aa:77:ec:a7:28:75:75:10:64:
7c:db:18:0a:2d:e5:65:0d:20:1c:b2:a5:30:97:bc:
05:62:f7:9d:d3:8f:13:36:b1:eb:d4:9f:8e:23:59:
3a:8d:50:9b:48:d4:f1:96:a6:7a:d5:e2:35:99:f9:
1e:ec:9d:30:53:c5:27:c8:f8:44:d7:d7:7f:46:f8:
54:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:F5:BB:0D:76:E6:48:0D:5A:26:8C:36:5D:29:06:EE:DC:E9:D8:C7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D07E540535811F1997D05AFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.141.0/24
154.197.154.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:e6:78:ae:35:3e:4b:14:98:b1:f9:41:70:47:21:b6:45:30:
45:33:ef:14:85:12:ca:c9:50:d3:5c:5b:b8:29:ca:16:5c:5f:
71:9c:de:68:93:7b:30:46:5a:5d:c3:05:f2:a5:28:4f:f8:92:
97:bd:e5:0b:b5:1a:a8:c2:5a:af:f0:1a:a7:a7:c0:13:f5:50:
c2:5e:55:2a:a0:b5:2b:5b:97:7b:4e:1f:0b:18:95:a2:07:07:
e9:81:34:97:d9:ad:45:05:6d:53:38:b3:13:89:60:f8:b3:a8:
c7:7e:47:71:7f:16:9c:56:46:aa:d9:69:57:e5:2a:55:99:c5:
38:0c:b5:8e:9c:ea:a2:ca:97:57:16:09:88:eb:18:8d:38:cd:
0b:35:f7:d2:81:d6:bc:78:bf:ab:7a:ff:dc:3e:b0:d0:81:01:
14:51:5f:f3:f1:a2:cb:5e:ae:9d:32:a6:3e:80:55:4b:27:e2:
e9:01:5b:b7:3c:23:34:c2:ea:b9:cc:79:cd:be:38:00:16:85:
cb:39:6a:8c:bc:f9:87:ed:56:4a:f1:3a:0b:ff:9d:a0:04:7e:
8e:6d:7b:b6:ed:5b:d2:92:72:58:e5:a8:dc:14:cc:a8:a4:b9:
1b:76:90:5d:f1:c0:9d:cc:0f:04:41:74:72:83:83:e4:e9:78:
62:95:4d:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:19:28 2026 by rpki-client