Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4F54AD6692A11F1B1DDECD6CE1D38B0.roa
File: E4F54AD6692A11F1B1DDECD6CE1D38B0.roa (raw, json)
Hash identifier: unhS8hO70BkwdaFPp4RmP3jsIwZpWUL0CPWfKoiiTsc=
Subject key identifier: BC:40:A9:54:AD:8D:E1:A7:79:15:99:7F:5B:77:77:51:19:C5:01:8C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D304
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4F54AD6692A11F1B1DDECD6CE1D38B0.roa
Signing time: Tue 16 Jun 2026 02:27:18 +0000
ROA not before: Tue 16 Jun 2026 02:27:13 +0000
ROA not after: Mon 20 Jul 2026 02:27:13 +0000
asID: 200213
IP address blocks: 154.222.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 18 Jun 2026 00:07:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119556 (0x1d304)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 16 02:27:13 2026 GMT
Not After : Jul 20 02:27:13 2026 GMT
Subject: CN=6a30b486-8a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:57:4d:1c:f3:a9:c2:ce:45:43:a2:16:8a:7c:
a1:66:83:71:93:e7:de:08:9c:f5:90:ce:80:4e:dc:
ac:86:14:5f:b1:c2:b2:31:d7:dc:40:8d:69:49:4e:
25:ae:5d:b3:af:6d:54:99:fe:67:99:d6:c6:4c:b7:
ee:6c:bf:06:bb:88:3d:32:d7:15:a1:60:d7:03:b2:
00:e6:e3:d9:0a:9f:d3:41:8d:74:9b:c5:0e:3b:c9:
15:34:29:37:89:9b:03:8b:23:e4:48:b2:63:61:51:
3d:d4:2f:d1:ed:ec:53:e0:b7:ab:44:a4:10:94:82:
2c:fe:d6:75:1b:0c:3f:7e:d9:6c:85:0f:58:33:50:
c7:b5:4c:d0:ae:c0:f2:73:6c:76:41:b5:e0:4c:80:
69:51:08:57:17:f0:a8:a0:f8:72:06:fc:b8:8e:5e:
7a:5a:4c:bb:7e:79:1e:c4:75:97:2f:78:54:e9:20:
f3:60:0f:89:e5:ec:cd:a9:7b:70:f8:20:2a:0e:17:
e4:b3:50:d9:80:bf:da:e7:b1:f9:d8:06:58:f2:bf:
a4:d6:b1:b1:cb:b6:95:ab:a8:81:d0:31:6e:04:38:
55:7f:51:bd:c0:52:e2:e4:c1:da:74:19:7c:29:8f:
ba:4f:46:2b:3c:56:74:1b:ac:d5:3e:a2:30:5c:47:
2a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:40:A9:54:AD:8D:E1:A7:79:15:99:7F:5B:77:77:51:19:C5:01:8C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4F54AD6692A11F1B1DDECD6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.79.0/24
Signature Algorithm: sha256WithRSAEncryption
73:e0:8f:71:4d:0a:2a:0c:49:33:2c:c4:6a:98:da:aa:50:00:
05:c1:d5:85:0c:9d:77:64:47:2a:93:6e:d9:d2:03:97:76:00:
23:03:a7:15:59:2b:e4:78:00:de:4e:91:31:d4:19:6e:f3:dd:
77:e4:6a:f0:c3:54:a5:31:94:e3:db:5b:02:e5:e8:e9:64:e4:
b0:df:9f:7e:87:5c:8b:54:23:e5:c6:84:26:70:60:09:24:f4:
ff:61:e2:68:fc:8a:6a:35:f6:87:8c:f1:3d:20:78:35:3b:96:
5e:f4:5b:2e:5e:91:40:85:74:6b:76:f0:50:82:89:3f:c8:7b:
6c:00:f8:2f:39:31:b6:8b:20:77:26:0e:49:7f:13:7f:6a:8d:
d8:c0:47:2e:28:98:e3:be:13:bb:d7:5b:7e:ae:c0:c3:fa:36:
1e:5f:fe:58:d5:48:43:d2:9b:8e:f6:89:1a:9b:63:db:b3:74:
c5:19:ff:7d:77:0e:08:b1:0b:58:86:79:42:99:80:38:a2:89:
fa:79:b4:0b:8d:7c:94:f6:98:82:ea:ea:1a:bc:ee:86:c6:5f:
13:03:b9:56:a2:bf:9e:71:40:12:8c:42:d4:52:29:cf:44:ff:
eb:10:26:66:de:4f:73:69:d5:0d:e8:a2:03:ee:88:de:8a:f8:
38:49:a6:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 17:35:54 2026 by rpki-client