Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8F458AC69B211F19EC72F16CF1D38B0.roa
File: D8F458AC69B211F19EC72F16CF1D38B0.roa (raw, json)
Hash identifier: 9tWUOWA1Ax7WNvuyKze4EFzTD0pT7Kxo3Us+x+ZwI9o=
Subject key identifier: 84:5C:A0:33:C2:AF:60:E3:10:B0:52:19:96:D7:34:CF:BB:D0:48:66
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D385
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8F458AC69B211F19EC72F16CF1D38B0.roa
Signing time: Tue 16 Jun 2026 18:40:29 +0000
ROA not before: Tue 16 Jun 2026 18:40:23 +0000
ROA not after: Thu 24 Dec 2026 18:40:23 +0000
asID: 24173
IP address blocks: 154.81.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119685 (0x1d385)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 16 18:40:23 2026 GMT
Not After : Dec 24 18:40:23 2026 GMT
Subject: CN=6a31989d-47be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e6:23:d5:dc:35:92:a2:aa:69:31:63:6d:6c:
ec:ba:0f:0a:be:1c:34:4c:a1:5f:c0:d2:ec:c6:b6:
b4:dd:b3:c3:b0:50:26:8b:de:ce:de:b9:fb:24:59:
fa:88:dd:64:ba:04:2a:c8:41:a8:4b:2b:48:15:2b:
84:86:56:0d:6d:1e:86:20:c1:cd:49:ac:4d:3d:53:
02:a9:ac:ba:79:eb:26:b0:41:be:d1:e8:d2:b1:a8:
89:fc:fa:cd:a7:3c:71:41:d0:4b:29:ac:ac:8f:b9:
67:1a:57:ec:9b:10:0a:b7:81:ef:08:53:5b:0f:21:
70:7e:02:f8:92:9e:9a:61:2c:3d:6e:dc:59:b4:7a:
e4:6e:02:3f:23:59:86:f5:35:d4:76:b2:1d:b3:47:
15:1c:ff:ea:19:40:61:5d:6b:de:df:e5:83:e2:35:
24:7e:ac:de:b2:68:f8:cf:e6:dc:a6:a1:fb:d1:fc:
cb:dc:43:86:c6:bd:d9:12:43:58:44:eb:e5:45:80:
b2:a3:20:d7:75:04:17:12:5e:33:28:48:3c:d5:d5:
db:02:51:9f:e1:91:85:1f:77:a7:bc:c4:9d:11:70:
a0:cc:d9:4d:b4:16:27:4f:e4:a2:b4:2d:19:00:c4:
58:d6:3b:43:fb:72:2e:c8:48:d2:f9:3e:50:1f:67:
82:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:5C:A0:33:C2:AF:60:E3:10:B0:52:19:96:D7:34:CF:BB:D0:48:66
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8F458AC69B211F19EC72F16CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.60.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:e4:54:5e:dc:55:22:6e:16:33:09:24:76:4a:e8:5b:3d:5d:
97:b8:3d:2e:56:27:7d:2a:4c:04:80:5c:00:9e:48:8f:d9:a9:
fb:86:53:c2:41:e5:59:7b:89:4d:75:30:7e:11:4c:9f:df:11:
c9:e4:6b:18:e2:ef:a0:e4:a2:03:f7:15:1a:45:90:f2:21:f9:
ef:ec:f0:d0:07:7f:60:54:e5:6b:c0:ad:36:07:a4:95:49:83:
fd:87:58:55:26:f6:6b:0b:d4:b4:3d:09:cd:8b:f8:17:12:23:
33:52:ce:46:27:0d:d9:4f:87:35:64:ce:4f:a9:48:17:82:57:
e1:88:68:9b:94:de:26:ed:44:8e:d1:d2:ca:88:99:2d:68:22:
a7:7f:38:37:02:d2:18:56:dd:12:75:b6:ac:11:6f:21:da:30:
5e:e1:86:df:98:63:8c:cb:ab:5c:b1:27:be:f7:70:d2:38:22:
39:d9:c2:53:d2:9c:fd:85:4b:cd:f2:99:d5:e3:df:d1:6c:d3:
db:6a:35:10:f5:b0:0e:aa:83:8e:84:68:11:76:e0:33:cf:85:
f6:e3:41:99:70:2b:00:3d:50:e5:db:c3:4d:d3:ff:17:09:90:
13:38:13:39:46:0b:dc:94:40:66:40:17:e0:8d:8f:a5:ae:71:
5e:15:72:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:51:35 2026 by rpki-client