Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9C6EBEE509211F1BA62AFC8CE1D38B0.roa
File: C9C6EBEE509211F1BA62AFC8CE1D38B0.roa (raw, json)
Hash identifier: LNqLu9hbWgf7FOdHnSPJhdpzM21FIFLM75nancquJio=
Subject key identifier: 64:01:AA:65:D8:64:D8:F2:7D:5E:A8:B8:FF:1B:93:0B:A0:28:8C:87
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CBD8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9C6EBEE509211F1BA62AFC8CE1D38B0.roa
Signing time: Fri 15 May 2026 19:18:01 +0000
ROA not before: Fri 15 May 2026 19:17:56 +0000
ROA not after: Sat 13 Jun 2026 19:17:56 +0000
asID: 17497
IP address blocks: 154.90.138.0/23 maxlen: 24
154.90.138.0/24 maxlen: 24
154.90.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 13 Jun 2026 00:07:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117720 (0x1cbd8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 15 19:17:56 2026 GMT
Not After : Jun 13 19:17:56 2026 GMT
Subject: CN=6a077169-7894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5e:8d:92:46:ec:c4:95:ce:55:4d:c4:13:f7:
17:49:78:6a:05:d3:3a:75:28:72:d3:44:89:f4:ee:
91:6f:0e:f0:38:9c:e4:01:73:52:78:9a:ca:e4:86:
f0:a7:c7:a6:77:dc:11:e0:a6:a0:ed:e6:c6:e8:76:
62:b6:5f:17:da:02:9e:0a:79:59:b5:53:b4:e9:56:
53:ff:c8:4c:33:c7:48:30:10:dc:76:06:dc:43:3c:
6c:a3:54:ad:d2:e2:a9:92:9d:d4:e4:10:cb:24:a6:
f7:87:0c:33:a8:16:f8:5f:8d:c6:68:e7:7c:63:77:
3f:76:44:85:df:18:34:d4:6a:8b:31:55:36:0a:79:
03:03:ae:af:0e:ff:ab:88:57:68:03:cd:97:4b:c6:
99:ef:58:c2:b9:fa:c5:57:01:6a:27:da:0a:2f:40:
3e:73:80:c2:dc:bc:cc:08:2b:b6:6b:c3:12:dc:cf:
f7:ec:31:48:8b:04:6b:d0:b9:2d:f1:fb:b6:9b:c8:
1a:59:2b:f2:67:35:f4:ca:f0:3b:7a:7e:a3:05:d2:
9b:46:b9:2e:50:43:4a:65:bb:c2:47:5d:c9:ee:c0:
59:c5:e8:48:fd:b6:47:1f:e6:7d:a7:07:d8:ee:54:
4b:40:a7:14:e7:b8:9a:ad:cd:1e:c1:ec:ec:63:c7:
5d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:01:AA:65:D8:64:D8:F2:7D:5E:A8:B8:FF:1B:93:0B:A0:28:8C:87
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9C6EBEE509211F1BA62AFC8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.138.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:99:62:63:40:3a:a2:30:d0:87:55:6d:34:71:8b:2f:53:fe:
6a:e6:8f:2d:f2:8c:b1:7d:dd:4e:9a:e4:b4:2f:1d:17:fe:bd:
7a:cb:f7:47:d0:21:86:6c:d4:41:b3:42:0b:e6:90:73:6a:7b:
7b:89:d5:59:86:13:e1:c6:d6:a9:ce:de:9e:c6:4a:7b:ef:19:
95:5a:0b:35:8a:40:cd:c8:50:22:a8:9b:61:51:d6:73:e6:9c:
43:ce:dd:81:68:64:fb:98:9a:55:26:0f:1e:70:8d:61:c3:d2:
08:7c:ae:71:c7:32:07:1b:95:38:67:ab:2a:45:57:e3:8d:0f:
02:67:f8:94:51:26:a3:91:88:e4:7c:0a:75:68:e3:39:f0:59:
22:57:98:1f:4b:7c:21:b7:0c:94:c3:ed:4c:7c:c1:16:06:65:
c9:ca:45:d4:23:8e:d0:e0:6d:1c:a9:15:8a:c0:7c:f7:54:92:
8b:63:ee:24:f4:69:3f:dd:62:86:c1:c0:5b:73:a1:24:24:03:
c6:04:c0:e0:5b:12:fe:c5:18:ce:61:ab:a9:28:dc:a9:6c:35:
71:f0:50:6e:68:a6:fb:c8:1e:21:dc:f1:89:f5:1d:f1:bd:5f:
fb:18:f4:9b:4b:32:b1:3a:54:e8:6a:18:16:b3:3d:0f:81:9e:
f4:5b:84:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 11:54:36 2026 by rpki-client