Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3D7D0D8601111F1BB159717CF1D38B0.roa
File: D3D7D0D8601111F1BB159717CF1D38B0.roa (raw, json)
Hash identifier: 6gzmPevGGDXDhX94KrQl0S0VGB4cu90I3NccUeRACy4=
Subject key identifier: 42:15:CD:46:7C:33:C2:75:94:5F:DD:9E:1E:CE:48:83:27:8E:61:D3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D1A8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3D7D0D8601111F1BB159717CF1D38B0.roa
Signing time: Thu 04 Jun 2026 12:35:11 +0000
ROA not before: Thu 04 Jun 2026 12:35:07 +0000
ROA not after: Sun 16 Aug 2026 12:35:07 +0000
asID: 9294
IP address blocks: 154.92.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 13 Jun 2026 00:07:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119208 (0x1d1a8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 4 12:35:07 2026 GMT
Not After : Aug 16 12:35:07 2026 GMT
Subject: CN=6a2170ff-6deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:81:6d:9b:2c:ee:a4:c8:dc:55:d1:76:2c:57:
e2:aa:a2:95:d5:97:92:af:c0:39:a5:dc:63:52:c9:
6c:06:3f:c6:78:5f:57:af:21:e3:7d:b4:30:8f:f5:
fa:b1:7d:4f:12:46:a9:26:a1:13:39:85:2c:47:10:
6e:5d:ef:c1:3d:d9:fb:82:60:ad:43:52:d3:7c:44:
4c:1f:63:75:61:26:0a:35:ec:6a:db:30:fc:99:9a:
7b:af:d3:91:82:e4:45:58:22:c5:8a:a6:84:c0:61:
c5:b5:05:f0:5c:3f:3d:5f:68:5a:c9:31:cc:ea:06:
e8:ab:4a:b4:ab:ac:17:92:ad:0f:71:38:97:e4:14:
33:97:82:0b:71:d9:af:b7:f1:67:81:0f:03:e4:b1:
23:cd:08:2a:f3:d2:9e:50:28:5c:ff:4e:8d:85:d8:
ae:c3:23:ad:7a:62:da:33:84:fc:8f:c9:49:07:8c:
1f:20:81:c8:f5:7f:fd:2f:2f:cd:ce:75:3a:ea:00:
3f:0d:ad:61:6b:0c:6b:d3:d6:9b:e5:06:aa:a6:f0:
1f:c8:ce:8f:5f:c1:e3:fa:66:bc:76:bb:c5:9d:40:
c0:c8:9e:93:20:0a:12:dd:63:99:7a:e5:d3:4f:c7:
28:3c:7e:06:eb:85:76:b8:20:e9:2f:13:bf:96:69:
13:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:15:CD:46:7C:33:C2:75:94:5F:DD:9E:1E:CE:48:83:27:8E:61:D3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D3D7D0D8601111F1BB159717CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.224.0/19
Signature Algorithm: sha256WithRSAEncryption
36:75:2e:6c:75:10:38:76:30:e6:ec:11:dd:c0:65:04:52:ad:
4a:18:9a:2b:34:df:f0:da:f5:12:59:f2:a5:5e:ea:1b:d7:a8:
9c:31:5b:11:fa:7a:bc:bd:98:a4:20:a8:80:fa:0c:0a:4a:f2:
fd:6f:5e:16:fd:f6:86:00:ae:54:c8:ac:e0:67:40:5d:17:d6:
96:eb:3f:00:cb:be:77:83:c8:5f:98:49:54:ae:35:2b:29:77:
07:3c:a7:d7:6f:8b:b4:b0:9a:df:c8:70:ce:9e:2a:cc:4e:98:
a9:8e:21:5e:ac:64:65:f7:4b:b1:de:f4:6f:b4:4d:a7:9f:4c:
3c:a7:b3:e3:d6:05:e6:41:a6:86:87:36:97:36:f8:c7:25:20:
85:a0:eb:3c:37:47:f7:af:9d:52:19:42:64:dd:2d:69:29:9b:
71:ca:5b:60:e3:4e:e8:3f:15:2e:e6:3b:3e:12:cc:8b:0d:af:
23:09:08:21:6c:23:6f:60:df:fa:41:7c:de:e9:72:c4:31:c9:
bd:d6:2d:09:55:05:93:1a:4e:bf:25:08:8f:37:7c:9d:78:8d:
80:4b:a1:d2:6b:df:3d:9c:d0:6c:11:cd:37:5f:39:46:ef:1d:
3a:d7:d4:ce:ab:b5:c0:77:df:1a:ec:79:2f:10:de:c8:7c:8d:
bc:e5:b9:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:49:19 2026 by rpki-client