Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9CBDF926A4811F19BCB83B1CE1D38B0.roa
File: E9CBDF926A4811F19BCB83B1CE1D38B0.roa (raw, json)
Hash identifier: xuQJgJvVUYR18DVF4KL1U6hb41LY7XA08hpaCEXzBjU=
Subject key identifier: D0:1E:5A:86:46:74:22:0C:70:2E:7D:8D:3F:9C:1F:B5:69:CA:08:25
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D3C2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9CBDF926A4811F19BCB83B1CE1D38B0.roa
Signing time: Wed 17 Jun 2026 12:34:42 +0000
ROA not before: Wed 17 Jun 2026 12:34:37 +0000
ROA not after: Fri 24 Jul 2026 12:34:37 +0000
asID: 139923
IP address blocks: 154.89.151.0/24 maxlen: 24
154.89.152.0/23 maxlen: 24
154.89.157.0/24 maxlen: 24
154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119746 (0x1d3c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 17 12:34:37 2026 GMT
Not After : Jul 24 12:34:37 2026 GMT
Subject: CN=6a329462-c00d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d6:5a:99:dd:90:89:b2:03:34:b7:69:c7:6a:
19:bc:64:8f:88:84:5f:bd:b8:bc:ea:fb:c0:0a:64:
0f:8d:a6:49:a0:87:8a:62:29:38:2d:1b:80:01:33:
89:da:42:f8:44:60:d4:22:4e:a3:e8:39:34:ea:9a:
01:c3:e5:20:d4:73:2e:07:70:1b:4f:02:cb:37:4a:
da:ee:34:58:27:d8:7e:9b:aa:1a:d4:6e:7e:53:7d:
ac:a8:32:d3:54:d2:78:97:44:a9:57:88:a2:08:56:
b3:9f:3a:50:7a:3a:5e:63:15:0e:50:e4:83:a9:5b:
e9:2f:0e:80:17:c6:6c:16:33:3f:b1:76:a0:c2:8b:
0a:36:22:3f:89:eb:8c:e3:04:2f:60:38:24:a9:08:
0b:d7:30:91:03:7d:14:98:58:3f:e6:e6:a6:67:9c:
8b:53:a6:ee:a8:67:0f:ef:01:8e:31:db:2e:2a:28:
b8:00:c2:0f:90:79:02:06:ea:63:99:6e:2b:5a:e7:
1c:92:23:6e:47:14:eb:35:35:95:78:61:c3:03:96:
29:5e:38:47:da:fb:2f:89:b3:26:b7:91:f5:36:e6:
e3:d8:12:43:57:3e:75:1d:15:4e:6c:21:eb:64:45:
c4:2a:75:3e:46:cc:08:73:b5:4f:74:dc:c1:8c:44:
5e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:1E:5A:86:46:74:22:0C:70:2E:7D:8D:3F:9C:1F:B5:69:CA:08:25
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E9CBDF926A4811F19BCB83B1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.151.0-154.89.153.255
154.89.157.0/24
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
70:27:69:7a:db:f4:4e:49:9e:7e:79:aa:77:9c:ab:66:3f:f1:
25:b4:1a:42:a0:90:22:da:66:a8:c0:4d:5a:b1:f9:fb:2e:80:
6d:79:9f:29:cd:45:8e:21:b5:57:99:68:4f:64:d6:4d:c0:d0:
7c:0a:f5:15:48:75:71:b8:4d:67:ad:f5:9f:d1:58:ac:bd:97:
78:49:68:eb:c2:39:fe:e8:8f:8a:72:65:fb:61:e6:4f:96:02:
eb:a3:8b:33:4e:1a:24:77:38:49:f8:80:c7:f2:e4:57:66:84:
bf:9f:89:ab:29:b8:8a:c7:d4:79:53:43:1a:70:0e:cb:a5:ec:
49:2f:f0:90:fb:51:03:28:9d:57:27:fe:ff:77:df:e8:bd:1e:
56:a9:a8:23:ce:09:50:32:19:2a:fd:4f:5b:a0:34:19:54:4c:
d6:54:93:82:72:c0:9a:9e:b6:29:cd:c7:73:38:d6:8f:f1:1e:
ed:21:b2:d9:85:e2:27:d7:78:e3:33:db:30:09:c9:7b:fb:84:
cd:62:25:db:90:a6:70:b6:40:c0:9a:97:90:5c:c7:ef:51:f5:
7b:90:f7:1e:28:2f:12:0c:1f:da:c7:42:1d:4b:f1:db:49:3c:
db:4d:49:3f:6b:79:72:61:17:52:66:97:31:d7:0a:03:37:b9:
39:fd:d2:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:53:46 2026 by rpki-client