Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6942F5E506711F1AE1E40C9CE1D38B0.roa
File: F6942F5E506711F1AE1E40C9CE1D38B0.roa (raw, json)
Hash identifier: rnTQlbON6mOYgVWf1HesPPqiSX2PoqsC3pfmeHM/xuA=
Subject key identifier: D5:33:95:5B:BF:68:CF:97:A0:69:92:B2:84:82:A1:C6:65:2D:F6:42
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CBC0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6942F5E506711F1AE1E40C9CE1D38B0.roa
Signing time: Fri 15 May 2026 14:11:28 +0000
ROA not before: Fri 15 May 2026 14:11:22 +0000
ROA not after: Sat 13 Jun 2026 14:11:22 +0000
asID: 17497
IP address blocks: 154.82.19.0/24 maxlen: 24
154.90.138.0/23 maxlen: 24
154.90.138.0/24 maxlen: 24
154.90.139.0/24 maxlen: 24
154.94.2.0/23 maxlen: 24
154.94.2.0/24 maxlen: 24
154.94.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 13 Jun 2026 00:07:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117696 (0x1cbc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 15 14:11:22 2026 GMT
Not After : Jun 13 14:11:22 2026 GMT
Subject: CN=6a072990-5326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:36:82:b8:6c:f2:d2:c8:47:6e:09:bf:e1:f4:
4d:83:81:ee:d2:ec:e3:3d:8e:02:f0:d2:2c:53:7f:
a8:8e:0e:fd:7b:07:cb:17:bc:27:c2:f8:96:ee:54:
66:fa:e1:3a:c5:d6:ec:3e:e9:92:64:7a:55:3f:1e:
d3:f2:cf:da:60:6c:74:57:ed:03:12:12:55:cd:b1:
da:21:a1:8c:ca:f0:80:1d:ab:fe:9f:31:5e:e2:1c:
d8:0c:c4:11:ed:8d:54:68:fa:c8:8f:69:a1:9e:5b:
19:3f:ef:9f:66:83:5d:55:dd:82:10:6a:5a:e1:b3:
68:0d:8d:04:73:6b:3b:c5:7c:5b:a7:5f:e1:b1:e4:
69:ce:ae:35:b4:62:39:5d:71:c1:79:a7:86:4a:be:
2c:b4:9f:c6:eb:5b:17:57:c4:a0:cb:95:0f:3d:49:
3b:09:f4:d7:57:2f:23:c1:da:c2:aa:ea:d5:16:41:
a1:97:ea:95:b8:db:ec:57:da:46:ae:b5:62:17:0c:
7b:46:e8:8b:0f:d7:0e:3b:1c:67:c3:68:a7:1e:15:
29:a6:75:08:ac:9e:e7:86:ef:5a:f4:66:61:9b:05:
fc:ad:cb:06:5f:87:94:ad:af:bc:67:ce:23:34:53:
24:30:c3:74:32:e1:a3:4a:f1:d4:42:7f:53:62:51:
86:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:33:95:5B:BF:68:CF:97:A0:69:92:B2:84:82:A1:C6:65:2D:F6:42
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6942F5E506711F1AE1E40C9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.19.0/24
154.90.138.0/23
154.94.2.0/23
Signature Algorithm: sha256WithRSAEncryption
34:9f:1a:bd:aa:14:61:65:43:b6:27:c2:d3:b4:24:4c:cd:4a:
0b:40:a6:40:bd:aa:34:61:63:80:a2:2a:a0:5a:fc:e4:76:86:
64:63:de:bf:e6:d7:92:0b:cd:bc:71:90:a3:a4:ba:cf:52:58:
3d:d8:96:03:d5:49:d3:47:c6:98:a2:85:a3:2e:e9:f0:6f:58:
95:fe:c8:c6:11:ef:e6:f7:3a:ce:8c:2c:fd:a1:b3:48:7e:dd:
43:83:0f:df:9d:d7:d1:74:14:49:94:d4:f0:ea:bd:57:ae:df:
86:de:7a:7a:2e:98:82:7b:b0:72:9c:14:1d:dd:9e:78:14:52:
8f:54:ea:09:20:fe:70:b3:08:67:af:b5:38:13:dd:fb:1b:de:
2f:9c:04:05:ff:a0:a6:da:c0:ac:1f:67:58:8f:2e:6c:58:3d:
f1:27:d3:d6:f2:83:78:4f:4a:5e:3a:72:f1:0f:eb:78:67:5d:
75:6a:7a:8f:02:f8:31:2e:6a:87:be:10:a7:55:e5:78:3d:6f:
07:65:a2:6d:1b:ef:36:db:63:47:da:f5:f7:12:26:92:f1:6e:
ce:67:8c:fd:67:3b:69:f5:ec:c0:6a:43:87:98:cf:f1:3a:55:
e9:ae:8f:64:69:67:04:a3:e5:3a:04:94:73:b5:81:ee:50:3b:
39:51:77:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 11:56:39 2026 by rpki-client