Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9DA0D356697C11F1B1D607D2CE1D38B0.roa
File: 9DA0D356697C11F1B1D607D2CE1D38B0.roa (raw, json)
Hash identifier: Vw8Eu63YuHjG6+6YGYgS00aiQqK6XOc6ggxGrZHhOtk=
Subject key identifier: D3:1D:D9:D2:F0:70:32:CF:11:E7:69:4D:BF:6B:FC:D8:45:52:E2:CC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D33B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9DA0D356697C11F1B1D607D2CE1D38B0.roa
Signing time: Tue 16 Jun 2026 12:12:17 +0000
ROA not before: Tue 16 Jun 2026 12:12:12 +0000
ROA not after: Thu 23 Jul 2026 12:12:12 +0000
asID: 29802
IP address blocks: 154.94.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119611 (0x1d33b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 16 12:12:12 2026 GMT
Not After : Jul 23 12:12:12 2026 GMT
Subject: CN=6a313da1-4df8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:14:7b:02:19:72:cd:b9:14:c8:d7:0a:e5:79:
df:c2:01:5c:f9:7c:63:f1:50:6e:20:42:c4:01:4c:
d0:48:7d:f9:84:35:90:d6:79:01:0e:72:5f:f1:a0:
89:52:9d:c3:82:de:c9:7f:af:bf:7b:6f:bf:fc:df:
d1:04:1c:3f:8e:84:64:06:42:aa:2f:b9:ca:5c:ec:
e5:36:c7:0d:b4:57:d6:73:8f:b1:7a:4b:77:ec:26:
ec:52:5b:eb:44:00:e1:96:e1:71:76:38:3f:38:d9:
3a:5b:85:f7:ad:2a:71:9d:48:86:68:73:c8:6d:ac:
dc:18:8a:7f:bb:8c:8d:48:cc:00:02:14:bb:0f:7d:
09:69:b7:7c:2a:26:d4:04:e1:5f:b4:36:e6:cc:88:
df:19:84:8d:9b:cc:c7:7d:32:c3:94:14:3a:db:ed:
82:0a:83:d4:da:3b:0b:78:90:53:a5:f7:f7:89:cb:
4e:56:74:89:d0:43:37:e1:3d:02:7b:1c:a2:35:29:
e1:e6:85:65:75:fc:e8:27:13:4d:9f:77:bd:fb:59:
64:39:f9:d5:54:2f:26:9e:28:8a:64:42:e5:29:70:
ce:a2:5b:bf:d9:4b:b4:1c:c3:04:7d:68:2a:0d:d7:
9f:a0:80:e2:5e:8b:22:e6:f1:07:14:26:d6:58:39:
eb:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:1D:D9:D2:F0:70:32:CF:11:E7:69:4D:BF:6B:FC:D8:45:52:E2:CC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9DA0D356697C11F1B1D607D2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.46.0/24
Signature Algorithm: sha256WithRSAEncryption
56:0d:fa:6e:71:72:6a:77:68:53:57:2d:5a:cd:13:ce:6c:83:
3b:00:10:7b:0e:1d:82:ae:a5:79:46:d0:8d:1b:03:6f:94:cf:
de:2a:65:9b:26:36:31:06:9d:c4:ac:a0:75:3b:ce:48:70:5b:
e1:da:ff:aa:12:fb:0c:70:65:52:f5:80:9d:23:01:db:0c:96:
b1:b9:51:20:c4:06:b0:8f:57:74:20:72:07:fd:b1:47:ed:f9:
92:f9:23:d5:4a:06:7a:91:5f:ef:3e:77:9e:3e:9f:fe:b0:db:
99:0e:ea:d8:44:bf:06:56:92:7f:eb:40:e0:7a:7c:ed:28:a9:
81:c9:e8:ef:d8:41:58:74:05:35:d0:b1:3f:43:8e:9b:a5:ce:
e8:76:5c:13:b2:95:de:f5:48:da:d3:4e:57:54:41:29:ae:7d:
a2:c8:45:be:19:62:e3:ec:6c:23:77:b8:b5:9b:e6:d3:d8:a5:
1e:51:44:5b:54:1c:f0:7b:35:92:dc:ab:f8:d4:28:1a:d3:60:
74:a9:a5:5c:74:49:7a:cf:40:98:80:51:86:84:03:5f:f0:29:
81:06:c9:13:7f:68:34:4d:d1:95:37:4a:52:3f:39:23:8d:97:
82:ab:ec:ed:72:29:03:f8:4c:34:c5:65:0d:e3:d2:b7:ef:a9:
dd:6e:a0:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:51:07 2026 by rpki-client