Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7C16B1E655111F1A2449506CF1D38B0.roa
File: E7C16B1E655111F1A2449506CF1D38B0.roa (raw, json)
Hash identifier: bt7/x0tw9u7LSDhvNYuQFhchoUWcdENUaSECOMpQdmg=
Subject key identifier: 6D:C6:26:83:A9:0C:C8:41:65:8D:17:6C:43:85:66:67:7D:3E:0A:3B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D297
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7C16B1E655111F1A2449506CF1D38B0.roa
Signing time: Thu 11 Jun 2026 04:56:28 +0000
ROA not before: Thu 11 Jun 2026 04:56:24 +0000
ROA not after: Sat 11 Jul 2026 04:56:24 +0000
asID: 62563
IP address blocks: 154.94.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 13 Jun 2026 00:07:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119447 (0x1d297)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 11 04:56:24 2026 GMT
Not After : Jul 11 04:56:24 2026 GMT
Subject: CN=6a2a3ffc-d35c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4d:7a:be:62:7a:49:2d:7d:f6:42:7e:18:8a:
2d:b9:fa:91:8d:07:64:a9:18:a0:3c:d0:ec:0d:de:
11:c3:40:9f:09:45:63:e0:dc:5a:81:94:5e:07:99:
65:e6:2f:1a:16:59:4a:0b:10:08:ce:c7:37:d5:e8:
64:48:57:98:59:1c:1f:ec:b6:9c:34:29:ac:1b:bd:
ae:30:de:54:6b:b8:ca:39:73:18:d5:5d:3c:6d:92:
ef:6a:45:c1:fc:a6:42:d4:b1:8e:e8:e9:30:e8:3e:
d2:1d:fc:11:3d:9e:23:7c:8d:ad:2a:55:a8:88:8d:
37:88:34:7c:b6:a9:8d:9a:19:85:fd:a6:54:38:ae:
98:93:c7:4b:31:97:a9:70:e4:f2:3b:d0:06:53:64:
63:6d:3e:6d:76:b8:cd:e5:e7:51:87:c3:50:e4:25:
1e:5b:35:f1:ef:c6:89:5d:bb:6c:3b:67:93:6a:dc:
d0:2e:b4:2e:1a:74:5d:11:de:53:11:b7:c0:0b:5e:
7e:e9:e6:bb:fa:b5:0f:9f:3f:e5:4d:c2:24:90:11:
d6:66:8e:38:81:04:96:b3:5c:5c:df:9d:0d:be:ce:
b2:af:e5:7c:5e:ce:10:ea:13:fd:26:a1:28:d9:0a:
dd:78:f7:5e:f5:0c:4e:ff:69:13:4e:94:41:ab:10:
1b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:C6:26:83:A9:0C:C8:41:65:8D:17:6C:43:85:66:67:7D:3E:0A:3B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E7C16B1E655111F1A2449506CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.41.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:64:4b:ed:87:11:a6:c0:83:65:a2:8a:c6:e8:ea:47:fa:a2:
8e:8b:d3:c9:5a:93:1d:e5:c0:2c:00:f2:8d:cc:69:5b:ed:da:
57:59:dd:d4:47:eb:b4:4d:6d:4d:a1:13:a8:e8:5e:d6:e7:fa:
e0:1e:75:f8:97:41:d9:22:f4:3b:86:76:c2:42:4f:4d:75:ca:
5b:4f:35:50:24:49:20:86:4e:18:e1:8e:29:b9:d7:9f:b1:35:
68:02:a4:6c:1c:ff:e5:0f:42:21:d6:43:a2:25:95:01:32:c4:
51:fa:66:7d:a4:64:27:76:8d:16:ca:19:d8:5b:00:b9:36:2f:
7d:85:d7:a0:61:0d:5e:d7:3e:75:07:e2:dd:b1:7a:3e:5b:d7:
ba:aa:4b:bb:2c:d2:8c:79:77:f8:10:f2:d1:45:c2:51:d5:c3:
4b:13:53:c8:4c:4b:d1:c6:37:00:58:ee:cb:20:73:f2:83:65:
75:56:3c:15:56:10:83:86:91:a9:c5:b8:7d:1b:7d:cc:d0:42:
9b:32:fd:b8:c4:10:7f:e4:a1:e2:4f:11:95:07:56:28:6b:24:
39:f5:38:ee:57:7c:b2:76:cb:20:82:6e:15:5e:97:89:f7:e5:
ba:41:54:1e:83:88:6d:dd:12:98:d4:c4:56:d7:39:36:74:0f:
ca:a2:f9:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 00:05:51 2026 by rpki-client