Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8573C1455E311F1BA56C8B1CE1D38B0.roa
File: B8573C1455E311F1BA56C8B1CE1D38B0.roa (raw, json)
Hash identifier: zTkn1Q4DFIbP0ggeP9F7pmEbc0S68HjxZQK02uBBJjk=
Subject key identifier: A4:B4:44:68:ED:74:6D:24:86:49:7C:69:9F:5A:52:A5:24:A3:34:93
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CE16
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8573C1455E311F1BA56C8B1CE1D38B0.roa
Signing time: Fri 22 May 2026 13:39:57 +0000
ROA not before: Fri 22 May 2026 13:39:52 +0000
ROA not after: Fri 14 May 2027 13:39:52 +0000
asID: 151804
IP address blocks: 154.197.141.0/24 maxlen: 24
154.197.154.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 13 Jun 2026 00:07:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118294 (0x1ce16)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 22 13:39:52 2026 GMT
Not After : May 14 13:39:52 2027 GMT
Subject: CN=6a105cad-1da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:07:f2:2e:77:b9:4e:7b:79:7d:92:1e:06:3e:
14:72:50:a2:13:d7:4c:d0:41:e9:17:1e:73:12:65:
fb:88:47:88:f3:21:9f:95:d0:7f:16:a0:1d:ad:70:
f6:87:fc:dd:03:bf:7d:d0:5f:5b:4a:3f:12:37:2c:
e0:63:3f:a7:f5:aa:ea:dc:f8:41:83:f5:42:a5:04:
84:b2:92:f4:26:0a:4e:7d:dc:f2:1d:1b:a9:48:fd:
40:85:d1:d4:56:42:f4:ba:09:50:7c:f1:b2:a9:f9:
41:d6:79:38:fa:4c:b7:e4:b3:ad:6f:7f:2a:9d:7f:
15:18:57:b6:c3:f4:b2:32:e4:de:24:bc:0d:7b:2f:
c1:37:2b:aa:f2:fe:be:c1:4e:ef:db:78:1b:b4:df:
07:89:c7:e0:4d:19:6b:81:f7:9a:93:7c:1e:5c:dc:
d3:7b:e4:66:66:4e:d5:96:b6:23:20:82:36:7e:e2:
6f:7b:0f:c5:7f:12:2e:a3:58:2d:58:0f:e6:02:f1:
b2:cc:cf:07:32:05:70:16:8b:a4:81:90:ca:c9:87:
bc:7b:c8:fc:e9:47:b9:f1:ee:2e:e3:80:11:78:fd:
b0:da:0b:30:2c:d2:ae:43:10:dc:8e:88:0b:46:c2:
b1:64:d5:c6:0f:be:d0:9c:15:6e:09:f6:d0:77:cb:
33:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B4:44:68:ED:74:6D:24:86:49:7C:69:9F:5A:52:A5:24:A3:34:93
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8573C1455E311F1BA56C8B1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.141.0/24
154.197.154.0/24
Signature Algorithm: sha256WithRSAEncryption
75:b5:df:17:72:7f:dc:58:9f:77:08:9a:3f:1e:65:e1:1e:57:
ab:e7:2d:f0:21:dd:ad:08:56:15:4c:65:34:c0:37:a4:dd:52:
a1:a9:58:bc:48:79:aa:2f:08:5e:7f:7e:14:56:fd:af:07:7f:
8a:b0:52:b4:2a:02:5b:3b:37:d4:99:d8:30:af:02:ea:ea:5c:
61:cd:a5:14:a8:00:0b:93:0c:7f:83:3f:03:c0:3c:97:31:52:
6e:66:b6:31:e8:1c:46:79:51:4d:ea:27:bd:e1:f7:65:ae:cb:
6d:90:2c:ce:77:00:14:e0:02:be:fc:ef:26:04:51:79:a4:d1:
e4:4e:5b:82:7f:f0:7c:65:29:16:21:cb:83:cf:42:83:41:8c:
e5:f1:bd:9d:43:e8:64:b7:b8:4c:f4:44:a1:1e:d9:79:46:4f:
8b:8a:49:40:13:86:a1:ac:05:9a:51:43:66:6a:59:db:a3:90:
91:dc:1a:76:c7:df:d7:89:67:6e:62:9d:c2:c9:53:f2:9f:0e:
97:6d:d7:e0:2e:b9:21:b8:1d:49:2a:69:99:e6:85:ba:7e:ae:
77:6c:07:4b:0f:87:fb:e6:55:3a:f1:25:72:7f:29:91:1f:4b:
fc:80:96:f2:32:e4:3f:da:4d:20:ad:2d:dc:e3:2c:94:d8:42:
ea:92:ba:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:19:30 2026 by rpki-client