Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E00C45A269A611F1AC0AAECFCE1D38B0.roa
File: E00C45A269A611F1AC0AAECFCE1D38B0.roa (raw, json)
Hash identifier: Mij6XxWioKVbk9mXclaN7IRt1yqKvrrmKG/3JZ4pTZo=
Subject key identifier: 58:78:04:0A:56:44:68:EF:E2:4F:1D:F8:F2:F8:FD:6F:AA:57:3A:94
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D371
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E00C45A269A611F1AC0AAECFCE1D38B0.roa
Signing time: Tue 16 Jun 2026 17:14:47 +0000
ROA not before: Tue 16 Jun 2026 17:14:42 +0000
ROA not after: Thu 14 Jun 2029 17:14:42 +0000
asID: 17561
IP address blocks: 154.194.34.0/24 maxlen: 24
154.197.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119665 (0x1d371)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 16 17:14:42 2026 GMT
Not After : Jun 14 17:14:42 2029 GMT
Subject: CN=6a318487-0849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8a:af:58:28:6b:4d:3f:75:ac:fc:c5:86:db:
65:77:8c:db:7f:6a:bf:a2:0c:dc:2f:e4:16:29:b1:
b1:6d:bb:cd:a1:04:3e:55:5a:15:f9:03:c3:4a:27:
12:48:74:ab:92:ff:55:6a:c4:3f:74:09:d0:9d:cb:
65:54:af:a8:62:c8:6f:ed:62:5b:8c:a7:d4:5d:56:
ed:05:68:70:2b:60:36:6b:46:0d:8f:14:14:b6:db:
70:5f:d3:ff:6c:2a:e7:5b:92:60:f7:eb:07:de:1d:
5c:fd:82:61:65:8e:91:bb:f8:69:b1:00:79:6a:6a:
7b:e9:78:79:95:74:89:40:dc:92:f6:ae:37:2e:9d:
cb:51:72:e9:e5:6b:b7:41:1c:3b:6c:86:21:8f:a2:
d8:f9:88:7c:50:8c:a3:9e:a1:b0:be:a9:66:cc:0f:
8b:62:fb:52:be:be:1d:67:be:55:80:cf:70:49:17:
45:fb:f9:af:f1:ee:a8:21:20:64:95:64:4c:e5:c7:
1f:a5:c0:7f:6e:97:26:d0:aa:90:02:89:3c:22:ca:
4e:3a:fc:b9:c0:17:50:d7:77:82:75:0c:dd:67:89:
c1:0e:b3:b6:ba:ca:69:09:cc:89:ec:ac:c5:d4:b5:
cb:57:6d:f4:b8:5d:08:7e:3b:e7:de:11:84:70:76:
6f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:78:04:0A:56:44:68:EF:E2:4F:1D:F8:F2:F8:FD:6F:AA:57:3A:94
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E00C45A269A611F1AC0AAECFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.34.0/24
154.197.83.0/24
Signature Algorithm: sha256WithRSAEncryption
63:13:fe:7b:73:f2:91:81:72:58:04:48:ce:73:66:a0:b1:78:
98:2b:80:c9:20:16:0a:7e:6e:5a:e7:0d:3a:b5:af:5b:46:41:
31:2f:12:c3:20:7d:e9:ab:2d:26:62:7f:52:0d:fa:0d:8e:9d:
cd:6f:57:54:37:c8:d6:c7:1f:04:28:4b:a2:bb:b9:fa:47:d9:
43:69:b5:24:8a:ad:6b:81:80:1c:a7:22:69:6e:a1:1e:cd:05:
8f:9b:6d:66:33:b8:36:ec:c3:71:de:0e:7a:0b:77:8c:d5:65:
64:62:41:ee:d8:2d:b1:83:da:44:fd:31:68:8e:6c:77:8e:21:
e0:90:10:69:ce:73:fa:a3:c5:be:ab:aa:35:bd:bc:88:9c:85:
7b:bf:c6:2f:b8:d0:6e:95:21:bb:b2:13:f8:f3:c1:5f:a2:e8:
46:42:3a:8e:a6:b2:72:da:e0:86:a7:15:d2:5f:4e:fb:1a:a9:
af:7c:0c:6e:fc:3d:0f:8a:b3:d7:02:f5:7d:b2:a3:9a:3e:91:
fc:c5:6f:ce:08:8a:5d:ff:04:85:6f:d6:e5:08:90:8c:42:9b:
e2:d6:20:f6:33:b1:3c:e1:40:51:68:5f:a3:17:b7:9a:44:1c:
77:98:cc:ce:8e:7b:f9:c3:ae:40:62:46:d7:9d:ea:e8:50:55:
70:96:52:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:53:16 2026 by rpki-client