Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1E715EC54C111F191AE4CBDCE1D38B0.roa
File: C1E715EC54C111F191AE4CBDCE1D38B0.roa (raw, json)
Hash identifier: jH69ZSnlbE1ktBbZgv3E2ox/PSOrNThlpQSsKBjXSUM=
Subject key identifier: 7A:0B:64:F4:F1:94:CC:BF:59:47:7D:C5:0B:67:95:7D:28:10:35:EA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CD1E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1E715EC54C111F191AE4CBDCE1D38B0.roa
Signing time: Thu 21 May 2026 03:04:19 +0000
ROA not before: Thu 21 May 2026 03:04:14 +0000
ROA not after: Wed 01 Jul 2026 03:04:14 +0000
asID: 9304
IP address blocks: 154.92.197.0/24 maxlen: 24
154.92.198.0/24 maxlen: 24
154.92.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118046 (0x1cd1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 21 03:04:14 2026 GMT
Not After : Jul 1 03:04:14 2026 GMT
Subject: CN=6a0e7633-6dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c0:d4:5e:78:50:cf:4a:29:de:3c:fd:8c:1f:
a1:b8:7a:d5:3b:f9:cd:0f:06:83:2b:62:e9:ad:4b:
ba:a0:21:aa:81:3f:c5:d7:92:63:f9:db:50:cc:a6:
41:f3:31:ae:7e:ac:33:b3:f6:a3:00:d5:ac:32:cb:
36:57:8e:1e:7f:c7:9c:ed:22:6e:2e:25:13:95:34:
f7:e2:c3:e1:ec:50:0d:f0:99:7d:f8:39:09:51:42:
3d:dc:5e:60:e3:68:99:90:6c:a6:9b:6f:cd:71:3f:
6b:51:3f:55:e0:86:6a:12:2a:b0:1f:1a:d4:48:af:
cf:ac:6e:27:fb:33:53:fe:2b:d3:33:a8:a0:3b:90:
d7:7b:13:fd:5d:30:af:57:2c:f7:a3:51:aa:5f:89:
e5:26:f5:b8:e2:65:2d:d6:4a:71:3a:17:41:70:a4:
87:71:5a:ba:25:56:43:bf:02:8d:c2:1f:59:93:02:
f4:3c:d4:8b:23:56:d7:e9:fd:f1:a5:07:b6:41:20:
6c:5a:f1:08:c2:46:e1:23:9a:ef:3e:42:65:29:93:
39:08:d7:9d:f9:e1:a6:6f:39:f3:a8:b4:93:27:14:
86:52:45:0b:06:ed:a6:ee:9c:ed:89:1b:b6:90:62:
be:1a:63:a4:24:70:6e:5b:50:1b:1e:1a:87:6e:9f:
6b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:0B:64:F4:F1:94:CC:BF:59:47:7D:C5:0B:67:95:7D:28:10:35:EA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C1E715EC54C111F191AE4CBDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.197.0-154.92.198.255
154.92.215.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:0a:35:b7:ed:95:d5:40:4f:ad:44:7b:8d:25:40:bd:4f:8a:
75:59:ad:a3:3d:ec:f7:26:3b:af:0a:ae:fd:9f:bf:ec:15:2d:
60:9b:46:fa:7a:b9:a8:7c:5a:85:b4:b1:fb:86:32:26:d0:ab:
3f:56:87:8e:48:e9:6c:69:c0:18:b1:d1:a9:db:f0:e9:7b:64:
56:28:c2:60:30:eb:b7:7e:9c:4a:25:eb:1e:bc:08:eb:2e:2b:
62:fa:14:0f:97:87:33:54:a8:cc:a8:f0:75:3b:86:62:64:f0:
3c:45:26:b0:c4:f4:a0:91:76:2b:b3:24:cc:cf:03:dd:dd:58:
a0:d1:1f:74:30:7f:68:6a:5a:15:57:35:8e:f5:15:6a:71:49:
35:d1:fa:b5:af:29:db:ec:0e:8d:a4:be:55:43:6c:f5:c6:a0:
2b:15:ae:04:d8:54:cf:77:da:8c:83:86:b5:00:31:99:a3:4a:
50:87:20:3a:6c:c3:92:0c:c6:46:ec:b9:a8:75:c0:2d:60:58:
6d:7e:fa:2c:cb:d6:9c:83:ae:97:09:65:07:bb:f8:34:e0:41:
72:c2:f0:e0:5f:49:52:d6:34:fb:4c:8e:21:5b:b6:33:e7:e2:
1d:c3:fb:c8:42:43:70:15:85:bc:72:bf:d9:a3:c8:ee:bb:cf:
c3:8f:06:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 20:52:58 2026 by rpki-client