Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7C795AC562311F1B64F2FB2CE1D38B0.roa
File: F7C795AC562311F1B64F2FB2CE1D38B0.roa (raw, json)
Hash identifier: XrPU+ZjPkonuSB/x08Wbef4PQEm8Moj0YAXvbtFds6I=
Subject key identifier: F6:8D:76:79:26:3D:36:C2:61:C0:AF:C8:32:38:94:94:CF:41:6D:E9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CE5E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7C795AC562311F1B64F2FB2CE1D38B0.roa
Signing time: Fri 22 May 2026 21:19:51 +0000
ROA not before: Fri 22 May 2026 21:19:46 +0000
ROA not after: Tue 22 May 2029 21:19:46 +0000
asID: 17561
IP address blocks: 154.83.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118366 (0x1ce5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 22 21:19:46 2026 GMT
Not After : May 22 21:19:46 2029 GMT
Subject: CN=6a10c877-569d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:08:0e:82:7b:5f:1f:e2:9c:61:2c:66:0d:69:
95:d5:6d:30:b4:02:c2:95:be:18:b0:72:ff:97:4e:
ad:ea:47:5d:c4:74:ef:c1:4b:e5:c8:71:85:49:52:
66:1b:8f:e1:ed:6e:3f:fa:3f:cb:bc:5d:c0:bd:00:
73:2a:08:45:da:6e:6d:ab:cf:13:04:69:82:e7:cd:
7a:dd:26:3f:c3:6f:2e:0f:e4:cc:5f:fb:4f:12:a9:
f0:7f:64:9b:d2:90:b3:95:01:1c:f1:be:85:06:62:
e7:1b:a2:ef:d6:5e:45:f1:dc:b3:0f:5a:3b:df:bd:
0b:5c:3d:7b:4f:61:9f:7d:1e:cb:9b:47:68:18:79:
1e:aa:f6:16:ed:c7:e6:c0:22:dc:85:c0:d5:26:fb:
ff:2e:ca:bb:93:24:fe:92:4f:f2:99:21:b6:58:37:
00:f6:e7:98:b3:40:0f:3a:81:30:3f:8c:8a:03:45:
24:61:c0:23:62:52:b0:f7:f9:9e:16:71:4a:c2:27:
bc:bd:50:ab:fe:fc:39:09:e7:8f:53:14:15:48:bf:
c8:52:9e:1f:3a:17:16:2e:86:68:65:05:77:fb:33:
0c:64:f3:c0:2a:95:bd:53:26:71:87:3b:21:fe:8e:
d6:36:d4:24:5c:6e:7f:4e:1f:37:6c:58:a4:e8:46:
95:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:8D:76:79:26:3D:36:C2:61:C0:AF:C8:32:38:94:94:CF:41:6D:E9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7C795AC562311F1B64F2FB2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.28.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:9b:ff:3e:6b:83:86:02:ec:86:a6:f0:53:8b:d7:94:3e:5c:
f3:50:f2:2c:54:a9:25:c0:8c:8b:ca:66:58:f8:00:67:be:21:
da:d9:15:f1:62:8e:af:8b:12:d7:08:29:cc:c4:45:87:54:73:
77:8d:b5:36:6f:ba:3c:1f:60:17:d4:e0:09:29:60:a4:d2:62:
c2:9d:ac:27:88:06:3c:b1:6c:6b:21:b0:7e:0f:80:83:20:6a:
8c:03:6a:fe:4c:21:8b:de:f8:f9:49:50:32:74:c0:2b:45:4e:
08:5e:3d:cc:67:7a:f8:fb:b8:42:16:2a:4c:3f:9a:ce:19:9c:
99:2e:21:d1:83:6b:a5:e0:e4:e5:0d:db:49:28:5c:50:89:df:
83:b3:7f:78:d9:65:de:3e:31:ba:5a:08:89:09:c3:de:32:ff:
9c:4c:38:8e:19:f1:cf:0d:f1:e3:ff:8b:31:78:2d:7b:49:4e:
31:b6:3d:f2:b6:6e:4c:67:40:44:a7:f1:a4:a0:2a:a7:32:55:
65:ac:df:f6:c3:1b:4d:ac:19:90:a4:66:5e:d0:a9:03:a4:b2:
17:0b:b7:4f:67:f7:f2:2a:78:ce:12:30:b7:f8:f8:e2:6a:3b:
03:ec:c1:df:2c:55:72:da:d2:be:06:1d:41:df:23:4f:23:b6:
c2:76:8b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:50:12 2026 by rpki-client