Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7583FA068B511F19E0BF817CF1D38B0.roa
File: F7583FA068B511F19E0BF817CF1D38B0.roa (raw, json)
Hash identifier: yFklU0/SDtsOobIbldTLZUv09V/nYJQikjdWYWX4VrI=
Subject key identifier: 5D:FA:DF:4E:F6:F7:21:F8:52:CC:19:99:0F:63:80:2F:F0:F7:A4:D6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D2C1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7583FA068B511F19E0BF817CF1D38B0.roa
Signing time: Mon 15 Jun 2026 12:30:18 +0000
ROA not before: Mon 15 Jun 2026 12:30:13 +0000
ROA not after: Fri 17 Jul 2026 12:30:13 +0000
asID: 214120
IP address blocks: 154.199.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119489 (0x1d2c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 15 12:30:13 2026 GMT
Not After : Jul 17 12:30:13 2026 GMT
Subject: CN=6a2ff059-da1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ab:84:2b:78:7f:a3:66:f0:5d:d9:cf:b7:dd:
2e:93:ed:59:7f:29:5e:82:94:3f:74:5d:60:66:9d:
e6:c2:a8:0f:ab:3f:51:30:3e:cf:0d:5b:13:c1:9f:
4c:e8:2c:17:b3:6b:55:c6:7c:5c:22:24:75:bd:86:
08:a1:1d:68:2f:98:e0:bc:bc:64:56:94:74:5c:28:
9d:99:b5:ca:2a:8e:c7:a4:77:ca:7a:6c:d5:a0:e2:
9e:40:b0:d4:8f:e3:1b:c6:c5:27:18:3f:4d:9d:88:
46:d5:2b:d3:09:6d:29:cd:04:06:11:a5:a8:a9:09:
ad:98:79:3d:48:7f:c8:ee:98:88:23:ef:65:37:16:
f7:bc:49:ac:ef:83:02:1d:c3:93:22:35:e3:9f:ed:
c9:4e:0f:d5:35:09:15:84:0c:bd:93:91:9a:85:c4:
60:cc:b8:0d:8a:36:57:fc:52:9a:72:0f:bb:c1:ff:
2e:6c:5e:36:31:16:10:f6:8c:35:47:b7:ff:5f:ea:
7d:be:d2:77:8f:21:85:23:1b:d5:6c:e8:a9:5f:54:
a7:fe:f7:6f:71:d8:4a:53:88:04:ba:f1:44:e0:fe:
e1:da:a1:68:59:5e:7e:98:a5:f5:3b:db:6b:e0:22:
f9:de:3b:58:59:0c:65:06:61:12:ec:03:83:88:03:
88:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:FA:DF:4E:F6:F7:21:F8:52:CC:19:99:0F:63:80:2F:F0:F7:A4:D6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7583FA068B511F19E0BF817CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.199.1.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:13:dc:f8:5c:fe:df:4e:7b:91:3f:cd:ee:80:ab:3b:d0:d5:
41:89:eb:50:a6:ad:9f:76:4c:61:67:f9:a0:f7:ee:0e:6c:52:
d3:6f:d0:03:51:15:0a:92:46:3b:2b:78:6c:15:6a:df:ca:d2:
98:4b:60:3c:4c:68:f2:0b:26:5a:e3:d4:2b:ce:0b:da:d9:d2:
94:f9:3a:63:89:f0:0b:bf:0b:c6:2c:99:1e:fe:01:3e:d0:ee:
d1:6b:6a:fd:97:03:0d:da:da:0c:19:c5:4f:1e:1a:ce:a5:c1:
5d:6d:95:1e:2b:88:8c:c0:28:34:f6:bb:d8:0e:89:d6:ed:e2:
ce:b0:84:85:4d:93:13:6e:bd:e8:80:74:fd:13:fb:7b:c3:6a:
82:e7:97:19:01:87:ea:cc:bc:da:db:fd:12:0f:85:57:b6:60:
bc:c2:78:37:97:f2:24:5a:50:f5:38:03:99:8a:38:71:fd:75:
05:df:45:9f:a8:d4:38:c4:9d:74:c0:33:57:a5:f1:ca:7c:dd:
9f:9b:3a:14:ff:03:bd:a7:7f:6f:d4:6c:8c:f6:b3:5f:21:51:
ab:ef:6b:32:1f:65:8c:9a:66:44:23:65:0e:e1:d7:b4:98:f6:
51:8c:5d:08:31:00:ff:42:6c:c3:fa:70:ac:bd:9c:97:96:13:
1c:44:c7:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:53:00 2026 by rpki-client