Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A147AA8668DF11F1B1940311CF1D38B0.roa
File: A147AA8668DF11F1B1940311CF1D38B0.roa (raw, json)
Hash identifier: pnYXVlYRJvHShtpvogceVpFaD1g0V9AAdQpLAEB3RR8=
Subject key identifier: 4C:6B:A9:42:71:C2:40:F8:03:62:FF:BA:E0:07:23:99:31:94:42:FE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D2EB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A147AA8668DF11F1B1940311CF1D38B0.roa
Signing time: Mon 15 Jun 2026 17:28:32 +0000
ROA not before: Mon 15 Jun 2026 17:28:27 +0000
ROA not after: Thu 16 Jul 2026 17:28:27 +0000
asID: 151352
IP address blocks: 154.85.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119531 (0x1d2eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 15 17:28:27 2026 GMT
Not After : Jul 16 17:28:27 2026 GMT
Subject: CN=6a303640-f35c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cf:9c:a4:f7:bd:f0:18:d2:78:0c:b2:a2:59:
70:77:e9:91:28:cd:c3:9c:06:d9:96:64:8c:59:ea:
f2:dc:d8:ea:2d:68:f0:d4:5b:03:17:a2:cc:0f:7a:
b8:cd:fc:2b:b0:80:f7:8a:3b:41:57:30:fb:4e:4d:
34:80:6c:03:7a:ed:8e:37:52:38:7b:7c:f8:fe:0d:
f0:4c:b3:43:49:45:54:46:4f:3d:24:45:e7:0e:dc:
5f:9e:81:6d:7e:da:c6:ed:15:86:ee:2d:3e:24:f6:
66:54:3d:26:fd:66:a0:e6:10:0b:25:46:90:f5:0f:
42:75:d6:1e:fc:50:f0:3e:e8:4b:d7:df:a4:62:88:
2b:ce:29:29:fb:5b:c5:ed:7c:3b:72:81:e9:04:35:
fc:3b:b3:87:7f:05:c4:5d:4d:bf:1e:a3:2a:3d:cc:
85:0e:16:cd:9c:e4:55:71:c6:01:24:10:13:56:c7:
2a:a2:a9:a1:d2:e3:ce:e5:59:54:02:19:d1:a5:dd:
cb:46:94:9c:6c:e9:29:b1:ca:9e:8c:5d:19:bd:99:
7f:97:fa:c3:d4:b9:c4:21:75:c0:39:fe:76:d1:90:
7f:91:89:4c:aa:46:71:70:c6:7e:d5:cb:fe:f0:4e:
2f:60:f3:d4:42:d5:a2:b4:a3:52:b6:2d:86:be:c3:
53:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:6B:A9:42:71:C2:40:F8:03:62:FF:BA:E0:07:23:99:31:94:42:FE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A147AA8668DF11F1B1940311CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.20.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:bd:1f:d6:b3:bc:f7:c3:ee:c9:63:d4:e7:68:3e:c1:a8:5a:
6f:20:f9:00:45:d0:26:1a:32:dc:84:a2:03:0a:fa:25:6e:5e:
71:e8:19:97:ce:13:13:00:07:de:05:73:83:dc:9b:18:83:cf:
e0:ae:99:ca:67:4a:a4:11:aa:fe:f3:95:1d:63:8d:3d:f1:f8:
03:1b:c2:f7:e2:3c:22:1b:c3:05:49:56:50:0d:bd:6f:0e:b8:
0c:00:09:69:ed:66:b4:65:bb:6e:eb:44:27:00:fb:30:63:7c:
84:76:c5:56:2f:12:a2:1c:0a:7d:07:c6:5f:f9:6a:f8:c1:55:
fc:0b:1b:65:88:a5:d1:55:53:7d:0e:aa:a7:50:3b:48:09:a9:
e0:09:d7:76:1f:32:75:9b:7e:7f:fe:d7:6c:f1:b0:22:0c:d9:
70:a9:30:ec:b3:76:a3:33:09:06:9f:46:72:fe:5f:6d:96:0d:
c7:fe:2e:d3:87:b8:3c:e9:c4:54:d2:ef:33:53:1e:f9:3f:70:
2c:7d:8d:5b:6e:ed:85:0e:ee:ba:19:99:07:f0:ae:85:86:73:
48:b4:82:65:2d:ea:57:6a:b1:cb:ed:95:5b:a8:2b:bc:9b:80:
2e:d4:80:44:5e:91:01:63:06:0a:a2:42:62:4e:f9:89:98:42:
d5:40:27:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:53:16 2026 by rpki-client