Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2ECD774562611F1AF3F47C2CE1D38B0.roa
File: A2ECD774562611F1AF3F47C2CE1D38B0.roa (raw, json)
Hash identifier: z+2NKc4eTtWWtsqzoEFV5SwVx/wLgXq5AqfOdCJm3Jc=
Subject key identifier: 93:09:A1:0C:20:AC:36:4D:A0:D0:32:AF:D0:2C:7F:7D:A6:60:C9:A8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CE60
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2ECD774562611F1AF3F47C2CE1D38B0.roa
Signing time: Fri 22 May 2026 21:38:57 +0000
ROA not before: Fri 22 May 2026 21:38:51 +0000
ROA not after: Fri 26 Jun 2026 21:38:51 +0000
asID: 138915
IP address blocks: 154.206.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Jun 2026 06:56:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118368 (0x1ce60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 22 21:38:51 2026 GMT
Not After : Jun 26 21:38:51 2026 GMT
Subject: CN=6a10ccf1-7ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c6:02:aa:9e:94:78:8f:3d:43:3f:c4:e7:44:
55:bd:1b:e0:55:7f:bc:48:12:44:f5:78:77:07:cf:
a4:a2:a6:9a:f2:70:d9:e4:b1:ef:0e:ef:05:da:3b:
19:66:2e:30:9e:7c:ba:d7:7a:23:b1:f0:d0:3d:7e:
d4:43:f2:12:3e:36:5d:39:5f:cb:05:c1:28:8c:90:
bd:d0:26:06:70:b9:05:40:54:af:99:5c:8a:fc:e0:
27:a2:f0:ab:44:eb:e2:09:76:2d:ab:4a:d6:e8:13:
7a:08:ce:0f:62:14:c1:dc:0e:1c:fb:08:0c:b9:21:
bc:bf:08:99:a9:3c:08:ea:4d:c2:bf:7c:ca:7c:2d:
7d:b2:36:03:78:03:5f:fb:0e:dc:e7:20:c8:e7:99:
5e:5d:dc:ab:a3:aa:0c:83:c2:24:a8:31:2a:d7:83:
89:e3:35:ae:6b:98:a6:4c:d4:6c:2e:24:4e:47:11:
70:a3:a0:77:1e:0e:70:0d:c8:dc:6e:7f:4d:c4:91:
8b:8a:d5:9e:d3:3d:dc:cf:e0:4e:69:94:23:80:97:
81:a8:5d:ef:31:6c:9f:d3:33:45:39:17:5e:ff:66:
50:86:28:93:a0:7b:3a:3f:95:94:29:67:7d:e5:3f:
58:6a:89:e2:37:20:c4:1e:40:23:c2:7a:13:0a:11:
b5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:09:A1:0C:20:AC:36:4D:A0:D0:32:AF:D0:2C:7F:7D:A6:60:C9:A8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2ECD774562611F1AF3F47C2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.73.0/24
Signature Algorithm: sha256WithRSAEncryption
03:3a:96:92:76:7d:e7:69:2a:16:2a:7c:00:b3:a1:29:68:3e:
f3:ba:9d:6b:b1:05:fb:2f:62:43:cd:32:e5:85:05:f9:8a:a7:
8d:7b:2a:a6:e9:2c:30:b8:91:bd:e0:08:cc:64:e9:01:17:c0:
07:5a:14:89:23:b2:61:e2:bc:61:19:36:6f:d3:93:9b:24:26:
53:5a:06:20:fc:12:3f:6e:29:ad:76:7e:7e:da:0d:18:fd:bb:
f1:c8:95:5e:2b:14:24:43:a0:69:5e:70:ea:7f:00:b1:96:48:
42:92:12:bd:6c:8e:b7:62:86:01:10:d5:d9:31:f1:0d:a3:6f:
6f:23:f2:ae:aa:a8:58:0d:5f:ed:dc:b2:79:db:9f:8b:73:a7:
f7:ca:95:b1:eb:fb:f7:21:ad:db:f3:11:49:df:ea:69:4f:08:
30:38:a2:ca:3e:b9:14:6b:bc:e5:41:53:e8:a0:bd:cb:1e:a7:
db:65:32:f6:84:82:de:f8:55:bf:57:59:f0:c3:8c:76:19:8e:
c8:4f:3c:a8:25:0d:44:2e:04:d2:8d:d3:57:6d:e1:34:43:20:
71:5b:49:fa:62:c7:26:b6:54:34:0a:1d:46:85:2c:6d:82:0c:
2c:6c:58:03:31:e5:f4:f3:c4:5a:d5:cc:70:87:7b:0d:d0:b0:
c3:28:83:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:12:43 2026 by rpki-client