Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6640E52244C11F1B47863F1DAE4EC9C.roa
File: E6640E52244C11F1B47863F1DAE4EC9C.roa (raw, json)
Hash identifier: /nlCbaQF9rP6LXpVwxBGY7spvnpKyEYeSbtZayTKDrU=
Subject key identifier: 07:34:6E:A6:F6:06:22:31:1D:75:CC:5D:C8:18:84:98:6E:76:AC:EF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C028
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6640E52244C11F1B47863F1DAE4EC9C.roa
Signing time: Fri 20 Mar 2026 11:06:53 +0000
ROA not before: Fri 20 Mar 2026 11:06:48 +0000
ROA not after: Sun 26 Apr 2026 11:06:48 +0000
asID: 154177
IP address blocks: 154.93.104.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114728 (0x1c028)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 20 11:06:48 2026 GMT
Not After : Apr 26 11:06:48 2026 GMT
Subject: CN=69bd2a4d-abf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a3:ec:f5:d6:17:44:9a:6d:87:7e:59:a2:18:
03:22:ff:7e:a6:39:e0:b2:57:d9:3a:e1:cc:3d:74:
19:4b:a9:f1:1e:43:e6:d4:53:6d:44:87:e4:6c:6a:
de:ed:41:d9:01:46:d3:fc:fe:1f:3f:5d:0f:d9:9e:
f5:ea:98:84:a0:b4:9b:75:da:19:47:66:30:d4:dd:
be:c0:2a:3d:eb:2b:b3:88:05:c0:1f:1c:a7:d9:bd:
f5:9f:a6:1e:15:3c:7d:bd:6b:83:8e:61:13:59:80:
99:6e:4d:f2:ee:ff:69:34:c1:d7:89:1e:90:63:ff:
52:43:c0:36:30:73:67:88:64:c2:84:ea:f9:27:98:
8e:87:36:22:68:4e:ea:7a:4e:98:c2:c0:03:bf:74:
38:a7:57:01:10:74:7d:b7:f1:f6:ff:5c:6b:ed:ed:
2c:63:f6:c8:c8:3d:49:65:8f:4c:96:8a:b5:7d:0e:
b3:7e:be:7b:f8:60:7d:bf:be:d9:0b:85:9d:d5:e3:
53:69:44:89:df:66:a1:30:0a:d0:25:e2:db:3d:87:
3e:b8:76:a0:8c:a6:22:f8:bc:9d:41:22:1f:aa:3d:
90:88:24:54:77:58:43:fe:ce:62:b0:77:1b:a6:dd:
a7:0b:ff:ba:e9:77:cb:ce:ae:f9:aa:81:1b:88:e4:
65:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:34:6E:A6:F6:06:22:31:1D:75:CC:5D:C8:18:84:98:6E:76:AC:EF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6640E52244C11F1B47863F1DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.104.0/23
Signature Algorithm: sha256WithRSAEncryption
19:99:74:f8:85:03:76:1d:32:99:04:fe:1e:cc:77:d7:3d:91:
1c:3c:0f:de:ff:e8:20:22:f8:5a:7e:3d:aa:cc:fd:40:4d:f2:
98:4e:b3:c2:17:6d:7b:76:28:f2:0b:7c:ca:e1:a6:a4:92:dc:
56:7e:58:35:7c:d4:64:04:1f:51:fc:de:df:45:e2:ac:b8:7c:
db:b2:64:cd:12:c7:cd:3b:58:46:d3:9c:bb:64:fd:9e:60:40:
e7:2f:40:20:5c:06:03:2c:d4:5c:fa:2d:dc:36:05:d5:a3:7e:
4b:82:01:3d:42:ae:8e:bd:27:c1:57:fd:13:e8:10:e4:d9:c0:
d3:66:2b:6e:65:2e:2b:23:d9:a4:91:f6:73:da:84:93:3e:da:
5b:fe:30:9e:eb:a5:bd:84:6d:06:08:da:e7:20:22:39:0d:4b:
bb:2e:1f:22:33:5d:4b:38:e7:56:c3:18:e7:e7:24:63:48:0d:
15:0e:8f:6a:54:d2:6c:8e:d1:44:a4:4c:02:ec:03:2c:8a:e0:
c4:bc:38:9a:13:bb:f2:68:04:95:2b:cd:b9:b7:bd:a7:64:46:
97:73:c3:f9:7a:e3:a2:60:3d:fb:e7:da:fd:56:62:13:32:10:
0b:f9:7d:cf:ac:05:01:75:4b:71:a6:a2:6b:1d:97:b9:62:6b:
c1:52:2b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:16:06 2026 by rpki-client