Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE1093B66FB011F1A6B437CFCE1D38B0.roa
File: CE1093B66FB011F1A6B437CFCE1D38B0.roa (raw, json)
Hash identifier: iNMo7pyfgYE43GOaPGsCJDlz2J+ZQx4nVyYroInOwjY=
Subject key identifier: 99:DA:38:3D:0E:F2:38:09:18:B2:72:4D:99:38:60:B2:9A:00:92:AD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D4B7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE1093B66FB011F1A6B437CFCE1D38B0.roa
Signing time: Wed 24 Jun 2026 09:40:59 +0000
ROA not before: Wed 24 Jun 2026 09:40:54 +0000
ROA not after: Fri 31 Jul 2026 09:40:54 +0000
asID: 62240
IP address blocks: 154.194.106.0/24 maxlen: 24
154.194.107.0/24 maxlen: 24
154.194.108.0/24 maxlen: 24
154.194.109.0/24 maxlen: 24
154.194.110.0/24 maxlen: 24
154.194.111.0/24 maxlen: 24
154.196.63.0/24 maxlen: 24
154.196.65.0/24 maxlen: 24
154.196.66.0/24 maxlen: 24
154.196.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 29 Jun 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119991 (0x1d4b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 09:40:54 2026 GMT
Not After : Jul 31 09:40:54 2026 GMT
Subject: CN=6a3ba62b-1c53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7b:fb:73:d9:67:5c:d7:91:96:af:b4:50:7c:
4d:6c:4f:94:5c:cc:86:86:53:fd:d0:be:86:94:41:
00:2b:bf:e9:a7:fa:0a:e5:01:b8:cb:79:6b:21:25:
70:e2:9a:f5:70:72:44:f6:f2:81:2f:82:f1:8a:c2:
49:54:c0:24:f0:f2:57:6d:72:f8:a7:b1:21:56:a9:
5a:95:ab:04:75:19:b0:3f:c2:3f:87:05:6d:ba:cf:
16:b9:42:c2:99:3b:8a:9c:2a:47:74:15:f9:88:00:
d3:1e:74:2e:84:87:68:9b:b9:8b:c1:5d:15:ce:10:
d4:69:48:2c:b6:f2:ca:c8:1f:95:e2:06:79:cb:fd:
e4:d3:59:dd:3f:ae:06:2d:ef:62:8f:79:59:b2:87:
96:43:61:f5:21:3e:09:30:25:83:2d:49:e2:ba:fd:
a7:10:94:9f:f9:84:09:b8:fd:cc:0f:c8:02:f7:85:
f5:da:ed:df:a3:02:b6:01:bf:fd:a5:4d:0d:4b:7d:
2b:0f:8d:0e:e7:58:27:24:8c:6f:b9:d7:28:62:ab:
6c:92:a5:eb:a0:af:50:df:1d:c8:13:f8:72:b3:21:
6f:c0:2d:56:d7:a5:b1:cc:83:b3:9f:ab:99:04:95:
d4:46:67:55:d5:a6:93:ba:b4:46:08:aa:1d:9d:e6:
34:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:DA:38:3D:0E:F2:38:09:18:B2:72:4D:99:38:60:B2:9A:00:92:AD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CE1093B66FB011F1A6B437CFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.106.0-154.194.111.255
154.196.63.0/24
154.196.65.0-154.196.67.255
Signature Algorithm: sha256WithRSAEncryption
04:b2:9f:7a:ef:fd:65:08:2a:87:db:5c:9b:56:41:87:5f:4f:
ee:f8:67:4d:fb:34:d6:ec:e5:1e:41:44:fd:37:df:75:94:e3:
9e:33:68:d6:d7:b1:3c:fa:74:63:32:2e:d7:b8:46:39:6b:a6:
db:53:bb:df:12:9c:ba:ab:47:49:7f:c3:a5:fa:b2:53:61:41:
e0:0a:a5:5d:c4:29:20:36:d9:04:f7:03:b8:57:fb:4e:f5:85:
1f:08:25:d8:5e:0d:ad:ed:aa:ab:b3:43:5a:f2:e5:a4:3d:61:
2c:68:ad:93:39:62:b3:f1:f9:79:dd:52:27:2e:86:12:bf:a4:
1c:ec:bd:07:49:0e:73:82:a9:b7:fe:63:98:d1:68:c5:f5:75:
0e:b5:5f:53:bf:da:7d:dc:8d:a9:92:f6:3a:b0:20:f0:e7:9d:
07:36:58:89:9f:2b:a2:9d:28:eb:da:4b:ee:33:b2:95:34:31:
82:ab:b6:07:a6:8f:65:de:15:95:f3:db:13:5a:9e:e3:e4:d5:
ec:40:6e:bf:6f:02:90:c9:21:16:bd:28:fe:d6:83:54:0d:4b:
bf:c0:7e:a1:1c:2a:62:ef:05:85:ef:05:e0:ec:19:fa:0b:b9:
d6:01:b7:14:84:a9:08:32:72:2e:d1:c6:9a:d3:f3:51:bc:7a:
eb:c3:1e:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 17:42:07 2026 by rpki-client