Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0C5062269B511F1B68829A8CE1D38B0.roa
File: A0C5062269B511F1B68829A8CE1D38B0.roa (raw, json)
Hash identifier: aGa6Tq3ly8tHJrIMXFpXPnzrjgaTJmtmvzz641jPKco=
Subject key identifier: B0:2C:A4:B5:08:10:D6:DC:B2:A2:5F:A2:D1:DD:69:AF:48:DF:26:6E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D38B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0C5062269B511F1B68829A8CE1D38B0.roa
Signing time: Tue 16 Jun 2026 19:00:24 +0000
ROA not before: Tue 16 Jun 2026 19:00:18 +0000
ROA not after: Thu 24 Dec 2026 19:00:18 +0000
asID: 4755
IP address blocks: 154.81.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119691 (0x1d38b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 16 19:00:18 2026 GMT
Not After : Dec 24 19:00:18 2026 GMT
Subject: CN=6a319d47-0b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c6:d4:0e:9b:3c:b7:c7:8c:24:d9:9e:c4:b1:
db:5f:11:0c:76:28:16:6b:88:2b:0e:b8:39:1e:63:
68:7d:29:91:e3:28:25:aa:ae:97:52:f9:d5:d8:be:
6a:2f:65:50:77:87:20:62:38:f3:f7:57:e6:0c:18:
cb:8e:71:83:30:5f:4f:68:b7:49:5a:e1:df:59:7c:
0a:54:70:ce:49:86:a0:98:0a:2b:9c:4a:ad:9b:b7:
7a:b9:22:23:02:f9:91:32:87:8d:ba:99:2e:83:53:
11:ca:b9:f8:f4:3f:97:1e:78:51:68:91:1d:06:79:
a0:59:2c:1e:19:8c:b9:39:a6:bd:41:0f:bb:a4:c0:
ee:d2:65:22:51:58:d2:a9:3d:36:a7:f2:1b:a2:df:
81:fe:c2:b3:8b:e9:47:40:d5:af:44:1b:cc:c8:51:
16:3f:ea:c4:df:8b:2d:0b:b0:8d:61:9b:90:84:1d:
23:f4:cc:6f:7a:af:5e:ea:bd:3b:c3:06:8a:14:39:
b7:1d:bf:7c:83:4d:e0:48:a2:b2:c7:63:d3:6f:d3:
a7:8c:ca:5e:94:2f:74:39:7c:63:6b:4f:fc:49:36:
31:25:e4:09:3e:d2:7c:ea:23:3d:1d:7f:1b:68:6e:
af:93:40:8a:c5:d0:e1:04:11:27:a3:1d:88:29:7b:
9f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:2C:A4:B5:08:10:D6:DC:B2:A2:5F:A2:D1:DD:69:AF:48:DF:26:6E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0C5062269B511F1B68829A8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.60.0/24
Signature Algorithm: sha256WithRSAEncryption
63:0f:0b:b4:3a:ec:61:0c:6e:e1:3f:5f:fd:6a:4f:5d:ac:47:
0a:8f:25:02:97:7f:ec:9b:1d:f6:7d:f6:45:11:4e:81:22:7a:
52:75:fb:de:40:88:39:a3:93:35:14:0e:f9:23:f3:01:42:39:
0b:fd:25:4d:10:f5:46:35:0f:d1:8f:57:3c:17:73:91:66:eb:
ce:99:06:30:96:59:76:77:62:f0:fd:4f:33:a6:c5:a5:a2:78:
c2:6b:a7:42:6e:22:7b:f1:9f:53:21:c1:02:1f:3f:e5:97:bf:
9c:80:d7:6c:f0:ea:f5:60:d5:c8:95:05:dd:c6:85:d7:cf:29:
7d:88:5a:37:55:1a:06:88:97:af:1f:fd:09:33:46:24:58:2e:
53:62:f1:2f:7a:eb:45:db:e9:f6:0e:4f:6b:93:b5:45:8c:4c:
65:69:70:7f:45:8b:a5:40:4e:49:c3:2f:4a:62:16:23:b2:17:
8b:0a:7e:e6:1b:48:d0:62:a0:83:f3:54:1a:6a:5a:62:f3:bd:
46:45:d1:e4:c7:68:c9:88:44:e2:52:74:18:61:69:84:ce:d2:
40:d9:53:6a:57:ba:4f:2b:bd:66:82:ea:09:0b:23:6d:cc:a8:
7c:8e:cb:e9:8d:74:e2:64:61:51:5c:89:39:a5:7d:5a:75:fb:
c0:f6:b5:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:53:31 2026 by rpki-client