Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0B27E9E574711F1B5C2DCB3CE1D38B0.roa
File: D0B27E9E574711F1B5C2DCB3CE1D38B0.roa (raw, json)
Hash identifier: t1RLsg93VQLi2yBuTx2kYngKIHSMs6zbtQeyL74j8S0=
Subject key identifier: B3:94:D3:A7:D1:5E:E9:BF:11:6D:75:E4:E8:F7:1D:79:C0:3C:80:48
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CEB5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0B27E9E574711F1B5C2DCB3CE1D38B0.roa
Signing time: Sun 24 May 2026 08:08:58 +0000
ROA not before: Sun 24 May 2026 08:08:54 +0000
ROA not after: Tue 30 Jun 2026 08:08:54 +0000
asID: 137899
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118453 (0x1ceb5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 24 08:08:54 2026 GMT
Not After : Jun 30 08:08:54 2026 GMT
Subject: CN=6a12b21a-4689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:9d:10:c8:af:85:ea:65:cb:53:73:5a:91:71:
4f:e2:05:df:5a:e7:b3:37:d0:fa:13:48:cc:96:da:
b3:f8:a0:79:24:c4:68:62:0a:60:04:0d:69:02:4c:
ad:24:9c:de:65:e9:45:bd:f8:15:a5:98:bb:a1:51:
db:09:96:77:20:62:a8:b2:58:d7:01:4c:c3:39:34:
8d:f0:21:03:70:ac:64:f5:4e:35:a9:58:24:bd:0f:
05:1b:0c:7b:68:2f:c8:0c:5c:c6:53:4b:2e:b6:5d:
4a:1a:98:0e:71:d3:df:87:61:80:ce:d5:f3:11:db:
6b:a2:37:59:b7:0b:1f:f9:fc:f2:6a:1e:db:3a:6b:
61:3b:c4:b6:d6:91:2c:08:3c:1a:68:bc:8e:e4:76:
8e:c8:22:30:e6:44:29:0a:04:74:65:81:c2:ab:64:
13:0e:40:cd:7b:1b:59:a4:ee:ec:8f:78:65:2f:e8:
ab:2f:54:33:47:fe:cc:e9:ef:67:42:52:35:af:9d:
ff:08:ad:e1:58:0f:72:ac:e4:3d:85:fd:dd:74:72:
30:3c:df:7a:6b:54:5e:fd:37:20:f2:e6:70:6c:b0:
0a:d4:07:7e:bb:21:a6:86:da:98:2c:33:b0:3d:d6:
5b:bc:57:ad:3b:0d:f1:d9:59:81:1c:17:86:96:07:
22:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:94:D3:A7:D1:5E:E9:BF:11:6D:75:E4:E8:F7:1D:79:C0:3C:80:48
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0B27E9E574711F1B5C2DCB3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
18:85:ca:d0:35:2e:62:49:5a:e0:06:d8:8e:00:c4:00:2e:5c:
02:63:b9:88:7c:79:ce:fd:f0:06:63:d8:95:38:72:92:cc:b8:
60:83:2e:f6:bd:0a:94:d7:af:f6:c0:67:25:20:64:1b:1b:12:
02:49:0f:51:a9:f8:59:82:f9:18:20:6a:30:d3:08:e8:c3:4d:
0b:cc:fb:e9:b8:d9:ca:fb:57:f4:72:44:62:ac:4d:0a:4a:31:
47:b4:a0:00:dd:8c:aa:f6:e2:ab:31:01:dd:a5:a3:53:e3:8d:
47:a8:a8:9b:bf:4a:9e:7c:70:45:c6:04:f6:71:92:38:68:c2:
20:3d:2e:45:24:b3:43:98:d5:e6:5f:a2:60:79:ac:91:e0:c6:
a3:13:c1:35:14:d5:69:77:f2:d0:20:24:83:de:ce:b7:99:6f:
22:1c:68:fd:c3:3c:f7:f1:e7:ac:c2:b3:2d:56:c2:34:d6:bc:
23:92:5c:f2:41:03:0e:05:af:df:d3:87:73:a5:6a:92:40:81:
05:d7:ac:e7:35:65:a9:9f:1b:6d:ff:78:5d:3f:cb:81:08:eb:
e1:e3:c8:95:a2:d7:46:ac:16:f8:09:a5:c4:a8:63:ab:9e:8a:
36:f5:4e:a9:9e:38:40:46:df:ba:35:65:e7:60:f1:95:ba:3f:
a0:c4:c9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:28:43 2026 by rpki-client