Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C318B5506A5C11F1962E5AA6CE1D38B0.roa
File: C318B5506A5C11F1962E5AA6CE1D38B0.roa (raw, json)
Hash identifier: OGOw587b8Ed6N/ELWIUlEKGpv1m9g38NPqcc5W8GTd0=
Subject key identifier: B2:D9:64:36:C5:1A:08:CB:51:87:52:0D:79:95:26:54:BC:0F:AC:3F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D3D6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C318B5506A5C11F1962E5AA6CE1D38B0.roa
Signing time: Wed 17 Jun 2026 14:56:47 +0000
ROA not before: Wed 17 Jun 2026 14:56:42 +0000
ROA not after: Fri 24 Jul 2026 14:56:42 +0000
asID: 214143
IP address blocks: 154.92.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119766 (0x1d3d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 17 14:56:42 2026 GMT
Not After : Jul 24 14:56:42 2026 GMT
Subject: CN=6a32b5af-b668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f4:de:8a:fe:63:bb:c4:71:00:1b:77:35:05:
34:72:7d:88:a7:88:0e:60:10:4f:d1:dd:40:bd:1b:
8d:07:0d:62:54:ad:4c:79:90:91:a6:bf:84:3a:da:
0d:c9:ef:9a:1d:e3:5f:25:54:86:50:7e:80:97:0a:
8a:e6:09:d7:b5:e8:01:61:0c:7d:ef:52:e1:b0:63:
30:79:85:ce:33:25:43:2e:52:da:3e:16:c8:e5:a2:
d1:be:b2:13:bd:d7:03:cf:29:1a:54:c1:8e:16:59:
42:32:5b:9e:0e:50:93:8d:a9:08:06:89:04:a7:d7:
1a:13:25:d1:9d:c4:eb:c5:12:b8:53:b2:bf:20:d9:
b9:5c:1a:db:8e:78:ff:68:24:07:f9:45:8b:c3:5d:
a7:0c:fc:fc:df:7f:7d:8e:e1:dc:07:01:3e:7d:99:
e1:a0:35:6f:92:54:84:83:7e:73:fe:b1:67:ad:44:
3d:ef:94:0b:ac:1a:70:39:de:a4:57:df:3d:17:8e:
7e:19:ea:2c:63:02:05:2d:37:67:9e:7d:17:55:b0:
e4:32:8d:2e:bd:27:5f:87:b8:ba:e7:9c:32:09:74:
b5:30:5d:a4:50:61:88:af:6e:9e:d5:fb:49:89:e4:
2a:63:aa:57:6a:05:91:f7:a0:93:50:1a:81:c3:0f:
ba:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:D9:64:36:C5:1A:08:CB:51:87:52:0D:79:95:26:54:BC:0F:AC:3F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C318B5506A5C11F1962E5AA6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.209.0/24
Signature Algorithm: sha256WithRSAEncryption
43:1a:3a:72:e0:fd:74:af:31:fb:8f:e0:94:e2:1c:66:a0:d0:
b4:b9:7e:d5:d8:fd:08:87:51:60:5d:ea:99:43:65:db:7e:a7:
f2:50:aa:32:26:36:47:cc:27:a2:7a:56:11:69:f4:da:8f:23:
63:87:29:27:df:c7:e0:13:c6:68:2b:25:9d:ca:da:46:10:69:
de:33:0d:33:37:0e:79:cc:6b:00:7e:7d:01:bd:bf:ff:42:65:
7b:7f:71:55:dd:cc:86:1f:ed:37:dc:27:55:8e:cc:8b:86:40:
1b:32:e0:50:8c:a5:47:a8:a1:63:d0:f1:50:2c:ea:8c:94:1d:
8e:f8:ce:58:e7:09:d3:67:8e:d2:c9:a3:0c:52:b9:f3:f8:1c:
ec:3e:68:67:a4:7d:77:50:d2:7d:35:4c:fd:a1:23:6f:38:96:
b9:37:d5:6f:a1:62:6f:3c:fd:cd:13:85:0e:e5:ca:ee:ff:18:
9a:5d:a7:4f:07:79:b3:f5:24:fd:fb:d2:7a:89:a4:66:f1:d7:
00:8c:9e:e2:a6:c6:45:46:10:5a:ea:78:c4:9b:ef:31:e4:2a:
c3:bf:2f:5d:2b:a5:7a:30:5a:d2:a3:c9:eb:74:94:76:35:24:
1e:70:eb:c1:08:2b:65:18:5e:36:e9:97:45:8b:f5:5a:43:d4:
d1:f3:3f:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:54:54 2026 by rpki-client