Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8CB032C6EDB11F1A3C4EFC2CE1D38B0.roa
File: B8CB032C6EDB11F1A3C4EFC2CE1D38B0.roa (raw, json)
Hash identifier: tn3vOeWYTalh1ONLLCQsCkEzBYwXC5NF9XckcBDoJKc=
Subject key identifier: C3:A0:1C:C9:FD:79:0B:77:9F:F9:19:00:38:58:0B:7A:56:B8:F0:0C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D476
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8CB032C6EDB11F1A3C4EFC2CE1D38B0.roa
Signing time: Tue 23 Jun 2026 08:15:41 +0000
ROA not before: Tue 23 Jun 2026 08:15:36 +0000
ROA not after: Wed 30 Dec 2026 08:15:36 +0000
asID: 270157
IP address blocks: 154.208.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119926 (0x1d476)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 23 08:15:36 2026 GMT
Not After : Dec 30 08:15:36 2026 GMT
Subject: CN=6a3a40ac-c6b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f7:9d:e8:c0:c6:bd:37:9f:8d:b7:78:ff:47:
d7:1e:fb:01:a3:12:af:00:7c:35:7b:27:9c:c3:10:
0f:98:b6:e6:3f:c3:60:4c:3b:5e:a7:0e:98:89:2d:
94:9d:2a:e7:aa:a9:0f:9c:8f:12:b6:00:1b:fd:17:
2b:3d:c1:70:e6:62:5f:8b:20:7d:a2:a4:68:9a:b4:
7c:52:88:b3:f8:5d:6e:03:b9:7e:50:31:11:9b:87:
54:0e:72:7c:14:03:55:ab:4a:2f:81:78:3a:b4:05:
8f:44:85:43:0a:ed:de:ea:84:2a:02:e1:16:21:90:
69:3b:cd:91:d7:4e:3d:4f:ea:b0:1a:0c:cf:f6:44:
ea:ce:4b:cd:32:d2:bd:6c:25:27:0b:c3:a3:01:4a:
55:4a:86:77:d5:c9:cb:6c:c0:f8:cc:65:58:42:8c:
51:ef:8e:84:86:a4:a1:87:3a:25:1f:03:31:ca:8c:
64:4d:b7:55:23:aa:32:a7:fa:3d:03:ac:13:d1:23:
79:fa:39:f2:c1:23:67:a5:57:99:49:ae:66:37:4a:
d6:41:dd:66:c9:fa:cc:8d:7d:c6:69:2f:74:95:e8:
d9:46:71:2b:82:72:dd:28:8c:39:1a:5f:d2:fd:77:
12:eb:37:6b:00:cd:c7:c5:5a:a7:2b:e4:2f:df:42:
39:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A0:1C:C9:FD:79:0B:77:9F:F9:19:00:38:58:0B:7A:56:B8:F0:0C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8CB032C6EDB11F1A3C4EFC2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.130.0/24
Signature Algorithm: sha256WithRSAEncryption
30:cb:73:e3:b7:5b:cc:1d:cf:b4:5a:d1:f6:37:04:4d:b6:fa:
85:f0:f7:11:ad:ab:49:58:1c:7d:f5:28:e4:bd:28:18:40:e4:
1b:0f:b7:72:81:e9:1e:1e:2f:67:c1:32:b3:ad:9d:67:e7:99:
31:e7:b5:4a:e9:8a:24:9e:24:11:50:6d:40:9e:a6:4c:10:72:
7a:08:5b:c4:1e:ae:da:fb:9a:fc:9d:f8:f1:b6:06:b7:4f:3a:
c2:a1:44:eb:b5:e0:78:50:c4:84:5c:70:ef:0b:63:bb:eb:85:
32:c4:8f:29:99:20:41:29:e8:eb:85:d5:7c:29:4f:ba:89:59:
9f:4b:1d:24:3d:28:f9:3c:47:54:e0:72:89:d2:39:d1:49:ba:
5c:bb:6f:d3:52:45:51:4d:32:61:63:5c:79:bd:d5:11:41:d0:
3a:db:02:6c:9f:b1:67:3e:e8:b8:63:14:96:a5:9a:f5:32:f5:
76:f3:95:11:ca:96:10:f7:12:22:9f:56:86:d5:e3:d4:c6:87:
98:96:35:64:61:f1:e9:58:95:c8:07:6b:3d:9e:ae:fa:78:f9:
fe:da:9b:7c:85:75:02:86:64:0b:b8:b9:b4:ec:77:b3:f3:1e:
d9:ca:d8:9d:ab:4a:fe:a0:4a:55:df:b4:a1:e5:f8:d5:9c:62:
7f:dc:8a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:51:08 2026 by rpki-client