Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B734A53E6AFF11F1ACE2720CCF1D38B0.roa
File: B734A53E6AFF11F1ACE2720CCF1D38B0.roa (raw, json)
Hash identifier: wv9fA/8vy/wSb+WRvHnX6pY609kY6oq6qT/3CoLsdF4=
Subject key identifier: 5D:70:3E:F8:DC:6E:2F:CE:01:F8:42:A8:E8:4D:8E:9A:2D:3E:B4:8A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D3EB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B734A53E6AFF11F1ACE2720CCF1D38B0.roa
Signing time: Thu 18 Jun 2026 10:23:15 +0000
ROA not before: Thu 18 Jun 2026 10:23:10 +0000
ROA not after: Sat 25 Jul 2026 10:23:10 +0000
asID: 29802
IP address blocks: 154.202.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119787 (0x1d3eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 18 10:23:10 2026 GMT
Not After : Jul 25 10:23:10 2026 GMT
Subject: CN=6a33c713-e343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:74:d4:1f:2b:73:0a:44:cb:85:c3:92:06:48:
03:51:01:c3:15:df:6c:7a:af:4f:84:da:01:67:0c:
be:29:ed:df:94:dd:29:c3:1e:c2:eb:c5:a2:6f:55:
25:b9:0a:f1:ac:aa:e3:37:85:eb:03:d3:26:5e:8f:
fc:37:cc:fd:2d:ee:1b:ae:97:67:f8:54:43:aa:bc:
57:52:af:3b:31:dc:4c:8e:09:d5:7f:1c:b9:00:ad:
2e:9b:57:34:d7:71:41:8e:28:34:34:8d:3e:15:ac:
9f:e3:25:da:57:a9:34:85:38:b1:73:45:b6:f9:25:
ed:7b:6e:e7:6d:54:ea:48:be:15:97:cb:c5:97:fd:
b9:6c:4f:71:b6:04:90:8f:4b:5b:fc:a6:b6:ca:8e:
ac:e5:66:d2:a8:07:b4:75:83:87:5c:e8:67:d6:14:
76:28:7f:31:8e:76:5c:51:cb:cd:5c:8e:a3:71:9d:
d3:d9:c1:c1:0f:dd:1b:20:64:6b:02:a2:3f:f4:4a:
c0:dd:89:d9:fa:f4:6f:73:10:71:a6:67:f9:b1:23:
4a:74:f3:e2:da:0d:e2:c0:34:59:3b:c9:09:0c:1c:
1b:45:e4:bf:7f:09:50:e0:3e:10:43:69:a5:3f:c4:
49:46:73:51:7d:80:42:7e:b8:2e:d0:e3:00:0d:fb:
8a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:70:3E:F8:DC:6E:2F:CE:01:F8:42:A8:E8:4D:8E:9A:2D:3E:B4:8A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B734A53E6AFF11F1ACE2720CCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.75.0/24
Signature Algorithm: sha256WithRSAEncryption
12:56:72:5b:aa:a5:70:8f:63:d1:55:eb:1c:33:e0:5a:c3:be:
9d:04:fb:e4:f5:62:93:08:f8:04:f8:9d:57:73:cb:6e:b3:70:
0d:f3:74:99:d2:c8:71:41:30:e2:f3:90:06:09:ed:e1:a8:31:
d9:df:c7:fb:40:b7:89:07:1e:99:3d:d4:84:7a:96:75:4a:df:
38:f4:81:ba:90:c9:3d:3a:21:3d:f7:c4:62:84:9b:18:99:a3:
12:ca:0a:5c:8d:20:af:2b:b3:3f:c1:51:7a:3a:fa:e6:1c:e2:
39:bc:f0:82:2d:7d:47:40:fc:3d:7f:5b:d6:fe:67:ee:c1:83:
e6:c1:06:54:5f:9e:6f:b3:76:8d:79:a6:6e:c5:6b:31:55:5f:
cf:1e:f4:0d:2a:f7:e2:bd:9e:9c:e9:fa:b6:d9:4c:45:e7:83:
e9:ae:04:5f:d7:d0:3a:78:3e:0e:2d:cb:a6:d3:96:32:b7:1e:
90:43:d9:39:6b:4f:94:a6:cc:46:87:81:2a:4a:27:53:75:d0:
f7:b5:5e:7e:9e:a2:14:e5:f9:51:81:b1:ab:7b:32:d6:2b:6e:
d8:0e:0c:31:1b:40:36:b1:50:17:59:95:ba:2a:e5:56:69:43:
36:87:de:eb:55:49:c9:67:db:32:b2:4b:f4:bf:c5:1d:8f:e9:
2c:c2:67:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:52:03 2026 by rpki-client