Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9EEB3BB05A7811F1A25EB314CF1D38B0.roa
File: 9EEB3BB05A7811F1A25EB314CF1D38B0.roa (raw, json)
Hash identifier: Y4tXtqzvspr1Z4k5djIaIVL+2MGXonPG5NxZ1FIJu1U=
Subject key identifier: 9A:43:F9:F2:AE:7E:A7:DF:07:E4:FE:36:09:9B:CB:0B:10:7A:72:B1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D024
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9EEB3BB05A7811F1A25EB314CF1D38B0.roa
Signing time: Thu 28 May 2026 09:35:54 +0000
ROA not before: Thu 28 May 2026 09:35:49 +0000
ROA not after: Fri 17 Jul 2026 09:35:49 +0000
asID: 140925
IP address blocks: 154.89.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118820 (0x1d024)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 28 09:35:49 2026 GMT
Not After : Jul 17 09:35:49 2026 GMT
Subject: CN=6a180c7a-ed1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:52:cd:c8:84:2b:69:b3:4b:98:ec:39:65:0a:
17:fc:03:e2:2b:c0:74:ad:c5:7e:8e:7b:40:55:4f:
31:f1:1e:7a:d9:f4:1a:5b:a3:93:16:a7:0b:89:c7:
e7:f7:62:94:ca:92:d3:c1:31:a0:a6:e6:22:08:1d:
8c:f6:c1:f1:fb:e9:af:d9:27:33:37:6d:f3:76:2e:
c7:8a:b0:0f:9a:69:a7:75:1b:ce:05:1e:25:68:03:
c2:49:a2:7b:84:b1:48:b5:0e:16:fc:fe:7c:51:dd:
32:56:bf:5c:24:e5:43:c8:5c:c3:9f:8f:8b:9f:33:
2f:04:9e:a0:76:4e:22:1d:17:c9:20:e4:49:c5:c8:
d9:61:c7:94:7f:98:18:88:b9:53:51:13:79:b4:34:
9a:fa:79:fb:f5:26:e2:de:8b:74:e7:e8:c6:76:87:
73:bc:30:30:e1:69:cd:12:46:17:12:ac:37:2c:b7:
c6:73:cb:d1:c2:c3:93:f5:a5:c9:28:83:06:6b:2f:
31:93:c1:35:30:4c:62:3b:ce:9c:72:5d:4f:36:d4:
ef:1f:47:33:6f:00:cc:66:fd:a1:c0:05:ef:0a:24:
47:b6:5d:dd:c5:46:9a:72:79:ce:10:7b:b8:40:b6:
2c:7f:b5:87:33:98:96:35:07:0a:c9:4c:ad:b9:6f:
f4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:43:F9:F2:AE:7E:A7:DF:07:E4:FE:36:09:9B:CB:0B:10:7A:72:B1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9EEB3BB05A7811F1A25EB314CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.4.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:fe:f7:23:ac:35:e8:52:b6:d3:bb:df:af:cc:f4:52:d5:51:
f5:26:ae:e3:d6:91:b9:35:16:90:28:6f:d8:f9:a7:97:2c:d4:
5c:d4:f7:57:77:e2:d1:a4:44:4d:68:70:7d:ec:04:b2:c7:ff:
c0:eb:52:f5:75:bc:3e:c1:a9:f1:64:ab:ec:20:fc:aa:7c:6a:
a3:e8:c2:06:3b:cd:fb:f5:a1:9d:b1:e0:68:e0:df:e1:53:91:
c2:e6:d3:4b:1b:05:e7:be:6c:fb:46:83:11:8c:dd:1e:95:4a:
ea:b0:c6:35:51:3c:1d:aa:aa:cb:a1:bc:db:96:ea:e9:b4:43:
23:eb:84:5c:20:43:cb:03:76:38:ff:9f:b0:2f:e7:88:89:03:
35:33:40:f9:8f:03:ce:7c:85:ed:b9:f1:7c:b6:58:e6:52:66:
eb:8a:b8:0c:61:79:3f:d6:e7:bd:70:22:af:15:eb:e2:ed:56:
fb:fb:24:df:13:f3:34:92:7f:03:28:34:a8:6a:38:dd:55:c7:
0f:d2:62:92:a6:ac:4d:df:c5:7e:50:63:1a:18:07:d6:45:28:
3a:84:ec:52:62:3f:33:79:4c:38:bf:69:39:6c:c2:5c:a0:2e:
15:53:af:95:e1:c9:9c:d2:66:36:50:3d:d1:ca:95:d9:f7:4c:
55:4f:49:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:28:51 2026 by rpki-client