Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA166C1C6E5711F1A84B4C18CF1D38B0.roa
File: DA166C1C6E5711F1A84B4C18CF1D38B0.roa (raw, json)
Hash identifier: qs08JN8REbj5qC41K2CSPgIN0w7n/rOrIE60Pv1BHYc=
Subject key identifier: 59:59:FB:32:1F:32:60:7C:C1:E2:11:88:70:0C:18:BA:AB:44:B1:4C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D459
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA166C1C6E5711F1A84B4C18CF1D38B0.roa
Signing time: Mon 22 Jun 2026 16:31:43 +0000
ROA not before: Mon 22 Jun 2026 16:31:38 +0000
ROA not after: Mon 28 Dec 2026 16:31:38 +0000
asID: 8786
IP address blocks: 154.84.32.0/21 maxlen: 24
154.84.40.0/21 maxlen: 24
154.84.48.0/21 maxlen: 24
154.84.56.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119897 (0x1d459)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 22 16:31:38 2026 GMT
Not After : Dec 28 16:31:38 2026 GMT
Subject: CN=6a39636f-5f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f0:43:a5:8d:18:ca:5c:fa:ee:c8:13:7d:24:
a8:2c:42:1b:61:d4:29:41:20:1a:da:c3:42:3d:1b:
27:68:97:b7:ea:fc:3a:3c:bf:b4:04:0a:6f:4e:33:
5b:20:2b:0c:6a:2f:97:1c:a6:36:f2:5f:f0:18:c2:
60:17:09:1a:81:cb:f3:86:49:7e:47:36:f4:59:6f:
02:07:0e:c3:40:0a:ae:5e:f4:82:05:e2:20:79:f5:
b9:33:9c:17:05:29:c9:e8:53:55:d2:64:0e:f0:ef:
4b:85:43:88:7f:0f:4f:ef:6f:29:49:fd:83:53:3e:
e3:a5:88:ac:b3:9e:01:4d:b6:2b:e7:d3:b6:dc:23:
55:9a:22:c5:44:bc:aa:34:80:e6:6a:89:57:ee:b0:
f6:59:49:b1:aa:a8:76:6c:73:8a:fe:30:98:90:f4:
19:d3:22:16:ff:30:24:0b:86:c6:57:89:48:68:a0:
07:81:9a:dd:d8:f4:14:41:31:24:eb:1a:06:11:59:
e9:b5:e9:61:c7:89:4e:ac:59:31:57:14:3f:32:c5:
9e:c2:cf:f4:72:b2:a5:7b:7f:d2:7b:59:4e:40:2e:
b7:35:76:9b:7c:cd:ac:7e:fa:7b:cf:6c:cd:d7:e4:
ac:cd:87:5f:1f:48:ea:25:9f:6f:98:a3:09:5b:d4:
41:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:59:FB:32:1F:32:60:7C:C1:E2:11:88:70:0C:18:BA:AB:44:B1:4C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DA166C1C6E5711F1A84B4C18CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.32.0/19
Signature Algorithm: sha256WithRSAEncryption
3f:83:d3:fc:db:6d:a3:2b:88:c4:f1:c4:78:d5:3e:41:ff:4b:
89:8b:ef:31:ab:31:cf:d8:18:cf:6b:53:37:e7:39:bf:aa:cd:
c3:bf:bf:42:fe:4e:34:40:bc:a8:55:fa:d5:ea:b7:ea:e8:a8:
c3:a6:32:ff:04:73:4f:34:e0:f2:50:93:81:cd:f5:0e:3d:b2:
9f:8f:5c:90:0b:14:fd:6c:1d:92:e5:3c:b7:1e:be:4b:59:23:
d4:91:65:31:07:88:ae:72:7e:6e:a4:b5:74:15:5e:cf:26:23:
a6:96:9b:68:70:fa:1a:4f:1f:86:f3:0b:2a:cd:e1:42:a1:69:
43:d8:7f:ca:35:a9:53:29:56:2a:64:e4:1e:1c:a1:4e:c1:69:
e3:21:27:db:df:1e:e1:68:c8:8e:f2:10:a4:60:60:46:43:aa:
83:a7:a6:1b:23:eb:cb:6a:e9:25:55:7a:fe:1e:bf:9e:29:25:
9d:04:eb:57:f5:b7:61:48:3d:d8:f9:23:45:6f:bf:7b:fa:66:
ed:a6:51:d6:2a:31:b7:cc:f7:07:67:4a:af:17:aa:5c:a9:41:
7b:fb:75:d9:95:27:92:38:5d:f0:ab:81:05:b2:25:fe:75:05:
41:63:41:b6:9b:a9:9a:63:1e:d7:b3:5f:3d:a2:cc:1e:1a:3a:
b6:3b:68:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:53:45 2026 by rpki-client