Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5076D146EEF11F1B4DC9EBBCE1D38B0.roa
File: D5076D146EEF11F1B4DC9EBBCE1D38B0.roa (raw, json)
Hash identifier: 31YObt2vX9lRyYaFY+s14qz7qksVgT++h6csH5EOtfA=
Subject key identifier: D1:39:13:D8:B9:BE:D6:3E:A4:69:2E:07:E9:9E:0B:39:C9:F1:CB:E9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D490
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5076D146EEF11F1B4DC9EBBCE1D38B0.roa
Signing time: Tue 23 Jun 2026 10:39:38 +0000
ROA not before: Tue 23 Jun 2026 10:39:33 +0000
ROA not after: Sat 08 Aug 2026 10:39:33 +0000
asID: 32043
IP address blocks: 154.200.80.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119952 (0x1d490)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 23 10:39:33 2026 GMT
Not After : Aug 8 10:39:33 2026 GMT
Subject: CN=6a3a626a-850f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b7:04:cc:d2:25:d7:28:c5:76:40:a9:9c:6d:
76:b0:bc:45:a6:e2:a7:91:b4:f7:9a:6f:23:72:43:
ef:53:06:2d:dd:a2:49:5e:23:0c:8a:ce:07:61:dc:
f5:46:6a:d5:05:40:c9:77:b9:53:99:b5:62:05:9a:
2a:84:6b:25:f5:b9:63:8c:06:f2:e7:81:d6:68:8c:
76:f2:5f:10:81:63:f3:c6:dd:99:78:51:8a:32:b8:
80:c6:f2:ef:ca:34:11:92:bf:db:b3:0a:30:3b:27:
fc:42:11:ea:a2:22:69:5b:27:be:c1:db:29:f4:9a:
7f:30:88:b2:c2:d3:ce:03:ec:a6:b3:21:53:4a:5a:
48:84:3c:4d:c0:1d:1e:07:95:10:a6:14:3d:59:44:
1d:05:2a:ae:30:ca:42:da:bf:59:0f:2f:5a:90:ab:
07:43:2f:a2:46:10:d8:8b:de:9b:09:1b:d7:71:f5:
18:d5:54:ce:dc:5c:b3:f4:da:74:c8:4e:ca:f5:13:
80:ca:56:6c:05:22:27:f8:5e:8f:e7:d7:b2:c7:17:
aa:05:c1:a1:ea:72:b8:5e:8e:02:80:dd:01:d1:5e:
fb:8f:9a:41:0d:c0:6e:84:2c:cc:fb:80:cd:ad:3f:
0a:ae:7d:54:ff:ff:3d:0a:d6:3a:61:fe:2c:e0:63:
d3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:39:13:D8:B9:BE:D6:3E:A4:69:2E:07:E9:9E:0B:39:C9:F1:CB:E9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5076D146EEF11F1B4DC9EBBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.80.0/21
Signature Algorithm: sha256WithRSAEncryption
34:bf:c8:00:03:38:7d:09:b5:cf:ab:e7:04:83:82:fa:49:e9:
c5:44:fe:fa:c8:7a:62:6c:48:d9:c8:b6:ea:e7:34:69:c3:51:
80:2a:e7:58:81:2e:fe:f5:9c:8b:cf:44:c2:a8:e3:05:6e:75:
81:d2:a5:ea:40:d8:ba:7d:62:e0:12:44:36:5b:03:ce:d1:99:
2d:8d:f9:f1:a6:ec:5b:9f:e4:72:3b:fb:bc:10:64:0e:27:e7:
3f:49:7d:41:a8:db:20:35:30:ed:2c:bd:6e:43:93:b0:b5:3b:
37:03:86:78:16:8b:29:3c:e4:ed:bd:65:20:83:9c:5a:d5:32:
12:4d:43:3d:b1:ae:56:20:84:b5:96:e1:47:6c:5f:de:26:c8:
a7:26:ad:b9:78:60:7c:93:b5:83:58:7f:18:41:22:2d:27:bc:
89:40:5f:05:d8:a2:10:e6:91:09:3b:44:bb:c1:fb:71:aa:57:
ae:ee:2c:d7:c2:1e:74:8c:d4:a6:9b:ec:dd:44:3f:c8:44:be:
29:2b:de:df:08:7b:db:2f:52:ab:70:89:f4:7e:38:60:d5:1e:
93:0c:60:9a:fc:d0:bc:86:91:01:0f:06:b6:3d:1d:12:28:73:
d5:46:af:9b:9a:b2:77:2d:ab:61:39:3e:d3:6d:bb:0d:6a:25:
44:5e:b6:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:51:24 2026 by rpki-client