Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AABFB84868B611F18C770A1CCF1D38B0.roa
File: AABFB84868B611F18C770A1CCF1D38B0.roa (raw, json)
Hash identifier: 9OtgjCvHmzN8uZd7nPryzTf5UE3420tN3EmkRLoaZLg=
Subject key identifier: 1D:E8:54:AB:41:9B:AA:67:58:61:28:45:8E:E9:0A:1F:47:BA:70:1F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D2C3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AABFB84868B611F18C770A1CCF1D38B0.roa
Signing time: Mon 15 Jun 2026 12:35:19 +0000
ROA not before: Mon 15 Jun 2026 12:35:14 +0000
ROA not after: Fri 17 Jul 2026 12:35:14 +0000
asID: 153671
IP address blocks: 154.196.170.0/23 maxlen: 24
154.196.248.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119491 (0x1d2c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 15 12:35:14 2026 GMT
Not After : Jul 17 12:35:14 2026 GMT
Subject: CN=6a2ff186-6740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:56:36:36:70:5f:0e:ba:5f:31:6f:24:de:11:
54:bc:9c:e4:32:22:ae:a6:3b:ad:09:2b:d0:d5:99:
ef:cb:e1:8f:ac:23:b4:da:d7:fd:13:b8:f6:f6:88:
3b:7e:79:b3:4e:15:39:10:e9:43:06:c7:00:72:1f:
9d:9a:2e:57:5b:05:82:7e:ea:e6:56:70:6e:5c:13:
00:bb:71:23:95:b7:7d:22:b4:93:ec:97:60:a5:1f:
48:90:29:fe:48:66:13:73:90:2d:d5:34:76:d9:49:
20:a5:25:ad:a3:8a:07:b5:0a:46:89:79:d9:2b:08:
71:a1:55:6f:73:f6:43:0c:ce:c9:03:c9:ee:f9:bc:
b8:60:e7:84:b5:5f:60:46:07:cb:5f:37:73:28:44:
98:b9:50:7b:ad:b1:06:f5:3e:94:fd:9c:71:29:57:
c8:e0:22:31:de:e4:79:61:53:ae:e7:00:70:f1:39:
89:62:ee:14:40:7a:14:3b:37:19:81:ff:b9:2f:9e:
21:00:64:24:91:ee:1c:cf:47:05:9d:87:0f:8d:d7:
4f:07:63:e5:d1:a6:53:98:48:aa:2d:a4:3d:1d:5d:
bb:46:c7:89:33:b6:5f:d7:26:ad:8c:e0:db:8e:47:
15:28:9c:2c:d4:67:94:ea:cc:59:80:fb:1a:81:2e:
98:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:E8:54:AB:41:9B:AA:67:58:61:28:45:8E:E9:0A:1F:47:BA:70:1F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AABFB84868B611F18C770A1CCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.170.0/23
154.196.248.0/22
Signature Algorithm: sha256WithRSAEncryption
69:c2:62:0d:cf:19:17:92:32:4e:a7:c1:a8:30:26:53:fc:19:
4a:c1:d0:62:2d:c5:d1:85:43:50:54:e5:b2:c8:ef:98:16:87:
94:a5:2c:b3:bd:5d:d2:1e:40:51:81:22:da:e1:14:08:d8:96:
36:62:69:70:fc:5d:ca:98:86:90:c2:cb:e9:0d:d1:75:2f:76:
d1:a2:36:32:bc:f3:b5:5f:97:a6:a1:5d:56:7f:4b:d9:9d:ff:
45:3a:7a:54:bc:5c:74:c0:49:17:7e:04:dd:ea:04:de:c9:3e:
46:f8:5e:86:af:ba:c4:d9:73:d5:fb:f6:0e:b2:b6:d8:e2:4e:
e3:8f:7a:88:18:c7:f7:ec:58:15:a5:7a:ef:af:82:9a:7c:c3:
28:4b:a7:db:28:cf:e6:06:ac:9d:36:64:1c:73:bc:f8:31:7d:
bb:d8:68:69:73:ec:11:1c:de:9c:53:a4:41:1d:47:33:2d:ec:
23:c5:74:b6:b2:69:06:f4:cd:c0:41:2a:ac:66:83:89:82:14:
5f:af:36:02:5f:12:f0:28:49:ed:ab:69:75:0a:e9:58:56:8c:
53:49:df:28:a4:a7:bf:10:59:50:f9:b5:bb:5d:ab:07:09:ef:
c9:63:70:f3:1e:4e:83:39:d9:8d:4c:8b:63:78:07:5c:82:84:
ee:96:80:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:53:15 2026 by rpki-client