Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D267674468C811F19FE80909CF1D38B0.roa
File: D267674468C811F19FE80909CF1D38B0.roa (raw, json)
Hash identifier: HbZtOt0RpzoasEFYY0y/b03MnzRXtBloRSzJWR8gihg=
Subject key identifier: 5C:12:A1:41:B6:69:7A:06:78:30:1E:BC:14:DC:71:87:8E:C3:42:7E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D2E1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D267674468C811F19FE80909CF1D38B0.roa
Signing time: Mon 15 Jun 2026 14:45:16 +0000
ROA not before: Mon 15 Jun 2026 14:45:11 +0000
ROA not after: Fri 17 Jul 2026 14:45:11 +0000
asID: 214120
IP address blocks: 154.199.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119521 (0x1d2e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 15 14:45:11 2026 GMT
Not After : Jul 17 14:45:11 2026 GMT
Subject: CN=6a300ffc-b2dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:07:84:96:a2:b1:62:0b:af:1d:17:88:b7:6a:
c1:c9:ad:dd:35:58:5f:19:f0:f1:6c:29:a0:94:df:
d6:73:64:a8:91:5f:76:c0:ae:74:6e:12:d0:6d:15:
d6:b7:b4:6d:44:3c:ea:43:a1:fc:b0:c4:7d:e7:7f:
30:11:39:ff:3a:94:df:25:d9:95:6c:0e:ed:b8:73:
ed:99:66:0b:61:c1:99:cb:56:08:82:f2:7c:1b:42:
7f:59:e1:19:d2:10:4a:85:0c:84:03:a5:f3:1a:e9:
b6:e5:f1:c5:a7:eb:eb:21:92:65:41:69:f1:0d:09:
bd:6d:44:42:db:65:ef:c9:a3:a2:fa:34:6d:c1:ac:
7a:5b:3b:a5:a2:ee:a9:fa:f4:17:ff:70:ab:10:a6:
50:51:e1:e4:93:30:3f:bf:e1:bc:d9:1e:ff:fd:44:
5e:22:c2:c5:36:2f:17:b1:f5:b8:be:6b:26:f7:7f:
06:63:08:55:8c:7f:e0:97:cf:96:8c:6b:2d:aa:38:
e8:87:a2:64:0f:21:d5:56:c8:9e:25:1a:97:2d:c7:
5a:a4:eb:bf:76:36:b7:10:e8:23:2d:06:93:c8:22:
97:94:bd:a6:2e:fe:fa:cc:d7:44:44:14:0b:40:57:
5d:55:1e:d8:90:49:ea:c5:7c:2b:71:3e:88:5a:2f:
70:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:12:A1:41:B6:69:7A:06:78:30:1E:BC:14:DC:71:87:8E:C3:42:7E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D267674468C811F19FE80909CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.1.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:62:84:6e:82:00:40:00:cf:54:dc:ce:ff:d7:d0:b9:6b:27:
a6:fb:4b:8e:12:e5:a5:8d:ea:32:fd:54:b3:bc:56:35:8b:ae:
4f:56:86:ab:c3:af:23:ea:ad:58:df:d6:90:6d:06:68:13:b4:
5b:64:32:50:77:43:a1:b7:30:7c:4d:32:5d:77:52:91:7e:c8:
f6:67:64:73:2b:e0:26:de:ec:74:96:50:f3:8e:48:cd:cc:9d:
b9:cc:29:45:4d:0c:1d:21:ba:7f:b8:fb:13:62:04:a1:b4:f0:
12:7f:5b:38:8c:bf:0d:dd:11:ab:b2:2a:07:21:e8:48:66:a2:
ca:3e:89:5a:ee:ab:9b:d2:91:ad:93:cf:d9:c9:40:dd:98:09:
36:dd:c1:7f:3d:c6:14:ab:89:b9:3f:2e:7f:37:b0:b6:47:df:
9a:85:e4:6c:df:48:c3:52:d0:bd:08:e6:4e:ec:15:ce:77:b9:
6f:a3:df:79:f6:69:00:d0:03:0c:c3:06:f5:8c:a8:c6:d6:51:
2c:fb:48:af:c0:7a:00:36:54:3e:33:fa:3a:c7:3e:be:1e:33:
ef:19:c3:c0:90:a7:77:1b:9e:ce:ba:ed:98:76:5a:c7:4c:f2:
a9:02:99:07:e4:5e:71:36:75:ac:7c:9d:9f:8c:74:65:45:22:
84:33:c0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:52:03 2026 by rpki-client