Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD115DDE5CCC11F1B27474C1CE1D38B0.roa
File: CD115DDE5CCC11F1B27474C1CE1D38B0.roa (raw, json)
Hash identifier: AKONqHLPyMKaLB+eMoREabNZrm/ZbZZ+BKza0CRMysk=
Subject key identifier: C5:15:91:1D:5E:1C:B8:A5:39:50:D2:4C:4D:91:A2:21:06:7E:60:E1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D104
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD115DDE5CCC11F1B27474C1CE1D38B0.roa
Signing time: Sun 31 May 2026 08:43:31 +0000
ROA not before: Sun 31 May 2026 08:43:26 +0000
ROA not after: Fri 18 Jun 2027 08:43:26 +0000
asID: 8796
IP address blocks: 154.200.128.0/24 maxlen: 24
154.200.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 08 Jun 2026 00:08:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119044 (0x1d104)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 31 08:43:26 2026 GMT
Not After : Jun 18 08:43:26 2027 GMT
Subject: CN=6a1bf4b3-d64f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0c:98:a3:da:69:dc:0d:31:c1:e5:8c:e7:7f:
96:2e:32:de:c1:6d:03:b1:7c:57:79:85:7e:95:91:
b1:47:b2:60:43:4a:32:8e:ae:db:a7:dd:48:15:c2:
81:bc:ba:4f:06:c4:2a:2e:e1:40:a9:16:5e:4e:62:
4b:20:d8:37:85:42:15:bb:32:2a:49:d3:c9:9a:32:
46:4b:ea:59:39:95:0b:3e:da:9a:b2:c1:0a:e1:d0:
97:64:af:20:d9:2b:51:21:b4:4a:cb:e5:d0:11:38:
05:d6:21:41:23:9e:1b:d7:6e:95:40:03:de:a1:9b:
48:e0:5a:2a:79:b0:46:18:9a:c8:7f:e2:d2:40:2f:
81:86:33:87:de:40:96:dc:38:d1:1d:18:c6:ae:4c:
21:cd:25:7f:fe:ab:eb:e7:4c:06:53:a5:34:e4:af:
81:e7:b8:bd:15:5b:8a:2e:8a:5d:41:92:4d:ae:6c:
af:14:39:e7:ac:e4:a1:d8:e9:0f:b7:ab:54:ed:18:
e0:db:e3:f1:df:87:6e:1a:f7:dd:19:78:c4:d2:00:
2a:1a:6f:3c:da:a8:72:31:0b:fe:f8:ca:21:78:d8:
bb:1a:8c:72:69:35:34:ec:8c:d6:31:14:d8:93:6f:
a8:2e:b5:78:e0:fa:6d:19:14:43:68:73:0a:2e:86:
ab:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:15:91:1D:5E:1C:B8:A5:39:50:D2:4C:4D:91:A2:21:06:7E:60:E1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CD115DDE5CCC11F1B27474C1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.128.0/24
154.200.132.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:27:69:93:98:bd:dc:ff:e0:46:d6:af:f7:f1:f7:99:ba:e3:
d6:a0:92:ea:c7:7b:64:d6:50:9e:66:30:8f:7c:bb:ed:fe:40:
de:37:70:e4:ec:6f:7e:61:82:dc:2b:92:41:82:d4:38:5a:83:
59:13:22:b0:4e:3c:94:39:b8:db:6c:37:2f:78:2f:a6:97:38:
da:53:5f:29:f2:5d:52:8f:c3:26:9a:b9:b1:bb:86:ac:9c:0d:
6e:2b:fa:82:12:d3:b4:2d:44:e7:71:ca:0d:34:0b:2e:cc:fe:
27:e9:88:16:8b:04:b1:6f:81:40:85:49:81:d3:46:e4:d8:dd:
c5:51:0b:4c:16:12:72:d0:f0:51:6d:f2:89:db:99:ad:2c:35:
bd:e4:fb:1e:3f:04:42:1e:e2:f0:92:68:79:af:13:70:7e:b7:
b3:6e:70:b2:3d:b4:52:79:f3:ce:1a:76:00:5d:ab:8a:8f:68:
57:da:8d:7f:78:99:8c:d9:99:2d:f7:ef:7d:4a:95:ab:c7:d8:
67:35:04:a8:eb:25:22:21:e0:90:0a:c9:40:be:1a:44:2a:d7:
5c:3d:15:c1:08:8b:b2:9b:b2:fa:be:68:86:e6:79:96:01:d8:
d5:ee:37:96:ae:5c:2a:92:2d:b9:ed:10:c9:0c:97:d6:92:2e:
2d:56:51:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 05:21:25 2026 by rpki-client