Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D596581A582111F189DD8EDFCE1D38B0.roa
File: D596581A582111F189DD8EDFCE1D38B0.roa (raw, json)
Hash identifier: v+bPWP+XQLH6cYr5fVZgdsDovlT8/gFdct1ZI1ON38k=
Subject key identifier: 2F:36:CF:56:2E:39:00:31:12:D3:92:DE:AB:92:56:D1:BE:85:B6:DF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CF68
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D596581A582111F189DD8EDFCE1D38B0.roa
Signing time: Mon 25 May 2026 10:09:40 +0000
ROA not before: Mon 25 May 2026 10:09:32 +0000
ROA not after: Fri 26 Jun 2026 10:09:32 +0000
asID: 140666
IP address blocks: 154.93.104.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118632 (0x1cf68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 25 10:09:32 2026 GMT
Not After : Jun 26 10:09:32 2026 GMT
Subject: CN=6a141fe3-1d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:64:51:16:9c:01:94:00:68:f9:e2:a1:be:48:
ee:c4:1a:d7:4c:3a:5f:f4:00:e1:d3:03:ac:f7:75:
ed:af:1c:1d:e5:c2:12:8f:7b:78:d5:d6:3c:6e:b1:
9f:48:e1:ed:23:89:c1:26:68:21:b2:f6:04:16:e3:
99:1c:f6:0d:70:4f:69:d2:f5:69:b6:63:2d:6e:53:
be:7b:73:0b:3c:77:3d:ab:55:0d:6c:49:73:f7:f6:
4a:95:ce:5c:83:eb:4e:78:8c:98:d2:83:ca:3a:ad:
e7:2c:83:79:aa:b7:73:a0:47:a7:3e:38:0e:67:35:
71:fe:e9:93:46:b7:3d:43:e2:e7:4e:f2:c6:8b:0d:
22:f4:a0:40:1a:de:5b:50:89:b8:e1:59:12:0a:6a:
8d:a7:e5:09:39:38:71:9e:39:84:6a:de:6b:35:a7:
bf:68:a2:bd:1a:de:52:ea:14:69:b3:68:d3:77:78:
de:84:eb:67:a6:60:82:73:b0:5a:4f:53:b2:a4:65:
e8:a2:a1:95:db:2a:46:40:5b:f0:0e:ce:62:c2:5d:
a5:a1:e1:76:6a:10:95:96:19:3e:dd:48:8b:b3:25:
58:5c:e3:95:11:ed:95:f1:c2:19:11:25:7c:06:92:
39:ae:1e:d8:71:9a:d3:40:4e:de:66:64:0f:c7:39:
47:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:36:CF:56:2E:39:00:31:12:D3:92:DE:AB:92:56:D1:BE:85:B6:DF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D596581A582111F189DD8EDFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.104.0/23
Signature Algorithm: sha256WithRSAEncryption
05:4c:e4:71:6c:f9:a1:8c:18:24:b7:4e:0a:8b:2d:f8:4a:64:
9d:8b:74:ea:22:f5:43:f8:98:24:a5:fa:61:0a:59:ca:dd:f1:
6f:5a:dc:84:2e:9e:c9:ef:99:99:81:d0:bf:8c:48:97:01:a2:
fe:e3:a8:7c:47:08:38:cf:a5:50:4c:f9:1a:da:13:5a:18:41:
29:a2:12:9f:ed:16:ad:6c:87:33:e5:d4:d3:51:28:fc:70:86:
3c:a7:41:57:4c:85:db:f2:26:ce:47:95:18:b0:94:50:f7:bc:
46:34:b1:03:e6:f8:aa:ed:a6:26:11:af:2b:56:1b:70:38:f7:
69:35:9e:c5:11:b5:7b:b6:d7:04:31:aa:c0:53:12:2e:ba:db:
84:2a:12:be:4c:e8:70:e2:6d:f2:f2:99:4e:d1:f4:ac:56:2a:
e7:9c:65:a2:6f:de:39:90:13:fc:d2:c8:2c:97:a1:1d:87:33:
5a:d9:d7:54:15:d3:c2:d8:17:a7:bc:b9:9d:05:a3:e8:99:92:
bc:d7:3e:31:b0:ab:99:3c:e9:ce:8b:be:7e:41:9f:52:06:c9:
17:b1:77:75:2a:cc:7e:ca:b2:6d:33:6e:1b:0a:ec:a9:a3:a3:
a7:fc:30:da:00:e3:20:6d:e2:e7:28:43:9e:cd:3f:02:9a:e0:
32:a1:d1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:11:34 2026 by rpki-client