Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3603FAC6FC511F18AD4ECCBCE1D38B0.roa
File: B3603FAC6FC511F18AD4ECCBCE1D38B0.roa (raw, json)
Hash identifier: yWGQNKhWRaWPaJnT1rS3WoXTrZeI1fFLFsVIVjEPkKM=
Subject key identifier: D8:55:10:E9:25:31:C3:DB:30:6F:D2:E2:F2:69:98:8C:92:FD:3D:3A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D4CF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3603FAC6FC511F18AD4ECCBCE1D38B0.roa
Signing time: Wed 24 Jun 2026 12:10:34 +0000
ROA not before: Wed 24 Jun 2026 12:10:29 +0000
ROA not after: Thu 30 Jul 2026 12:10:29 +0000
asID: 40779
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 11:51:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120015 (0x1d4cf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 12:10:29 2026 GMT
Not After : Jul 30 12:10:29 2026 GMT
Subject: CN=6a3bc93a-5457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a6:40:78:a1:2e:2c:a1:50:8c:f9:c2:29:4d:
2d:3a:a5:cf:bd:8d:78:6c:45:98:80:1e:80:03:a4:
3b:b4:3f:24:52:30:17:40:13:a0:c0:cc:ca:c6:49:
9b:ec:d3:de:aa:f7:0d:de:3b:13:c4:f7:41:d1:73:
16:71:09:34:a0:49:36:c9:6e:01:64:0c:b3:99:95:
12:d9:31:4b:32:dd:f8:59:93:97:e0:52:8d:df:c4:
e8:ef:17:06:31:e8:27:67:dc:bf:8a:c4:d4:cb:e1:
98:b9:a5:bc:0e:cf:87:32:ce:20:f0:74:f2:3c:88:
d6:0e:1a:4c:b3:3b:4f:60:29:cb:45:f6:c3:99:2b:
1a:c3:36:4e:21:fe:3a:ee:ae:ac:65:86:32:02:ca:
e2:8f:c9:33:9a:9a:1b:fe:38:66:16:81:41:d3:e5:
a6:1f:73:fa:6f:24:31:91:fe:51:c9:3e:02:99:8b:
11:1d:b9:84:a8:c6:e1:05:ae:a3:62:36:65:58:80:
4b:2e:4b:6c:b6:53:ca:4f:c0:e1:9e:22:44:33:24:
7e:22:76:8c:b9:d8:4c:b3:e5:ed:ff:ee:37:53:4c:
8e:29:67:05:0e:44:24:09:e8:e1:5f:06:e8:e7:ad:
12:7a:0a:c1:b8:1a:cd:d8:b2:a7:d1:0c:6d:05:38:
69:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:55:10:E9:25:31:C3:DB:30:6F:D2:E2:F2:69:98:8C:92:FD:3D:3A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3603FAC6FC511F18AD4ECCBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
09:80:b5:45:2f:31:5d:21:22:f5:13:3a:1f:a0:4a:a4:4d:26:
3b:ed:9b:c2:d1:67:33:bd:fe:17:65:8a:35:83:d1:ec:88:86:
31:0b:8c:b6:44:62:73:10:10:d2:df:c7:30:2f:69:28:a1:92:
ac:f1:41:26:c9:bb:6d:a7:35:c6:f4:d7:e5:d5:46:37:b2:04:
33:42:36:70:31:3f:18:1f:c0:4a:e0:52:4d:89:45:72:9b:c9:
7b:42:c2:3e:13:57:1a:14:84:97:a0:1d:1e:95:96:8a:09:b6:
d3:17:e1:d1:bb:77:35:00:73:75:ed:e7:6d:69:2c:10:1f:a4:
8d:5a:86:71:5c:12:da:22:3b:cd:e1:8f:95:84:7b:fa:44:b0:
42:46:f1:d7:0b:58:a4:8a:8c:f7:ef:2e:8b:e7:8e:63:ce:60:
98:44:82:88:bf:ba:75:fe:f3:aa:db:09:c7:64:5e:ba:a3:58:
8d:2a:4c:16:26:18:59:52:b3:eb:82:32:fc:2b:26:c4:3b:4e:
92:c7:fa:0d:88:92:b6:0f:12:ee:98:9f:cb:6d:5d:33:18:af:
0d:b1:14:e3:73:cd:28:f8:c6:5c:c7:7c:8c:df:17:35:b3:76:
7b:d2:41:50:61:54:e7:c9:0c:a4:df:16:75:7e:08:f6:1d:85:
21:52:73:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:45:52 2026 by rpki-client