Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8C2A7B062FA11F193CB37D5CE1D38B0.roa
File: F8C2A7B062FA11F193CB37D5CE1D38B0.roa (raw, json)
Hash identifier: snimspbISeVmxjGDukcPvcWDYXIAHsBt2L4OrVlkHLs=
Subject key identifier: AA:64:EB:E7:01:91:F8:33:7D:AF:32:56:08:74:47:D6:FC:0E:30:15
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D236
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8C2A7B062FA11F193CB37D5CE1D38B0.roa
Signing time: Mon 08 Jun 2026 05:29:08 +0000
ROA not before: Mon 08 Jun 2026 05:29:04 +0000
ROA not after: Tue 07 Jul 2026 05:29:04 +0000
asID: 59711
IP address blocks: 154.84.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 13 Jun 2026 00:07:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119350 (0x1d236)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 8 05:29:04 2026 GMT
Not After : Jul 7 05:29:04 2026 GMT
Subject: CN=6a265324-5d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4b:44:56:3a:fd:92:d7:0e:fa:29:ba:c0:74:
73:b6:fd:8e:c9:9a:c3:38:a1:0e:2b:11:46:79:d4:
9a:21:42:32:e4:67:e3:0d:96:40:01:85:5a:2e:80:
c0:dd:af:40:ef:13:29:3d:20:16:76:2d:3b:5c:41:
6f:cf:fe:d9:19:6a:83:9b:4d:c7:f8:a8:77:b7:2a:
d0:b3:a8:75:d9:9b:60:06:ed:a8:42:1f:0f:10:b3:
53:8f:2d:64:9e:4d:ac:b5:6c:65:60:81:32:c7:1d:
17:b8:a0:37:e3:be:67:32:34:e6:1d:d0:c2:17:cb:
25:5b:fa:ed:ed:de:e1:3b:40:17:e4:d4:b4:a6:bb:
4b:56:d3:33:25:9a:da:a8:77:c4:98:e6:a8:ca:85:
74:da:09:aa:32:d1:35:60:6b:4b:45:6d:30:65:23:
ab:27:2a:05:76:00:e8:e4:ce:35:87:bd:91:ca:6a:
2a:48:03:d6:85:2e:18:5a:80:5e:f7:69:13:64:7f:
51:a9:3c:6e:67:16:0b:48:08:51:d5:bb:7e:08:c2:
f7:a7:e0:d7:58:90:17:93:b5:35:1c:d4:08:c2:7d:
90:0a:47:dd:c4:52:49:3a:af:fb:f6:7c:2d:f5:d3:
8a:c3:38:6b:5c:d1:52:60:38:c1:f2:90:62:7b:6e:
a4:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:64:EB:E7:01:91:F8:33:7D:AF:32:56:08:74:47:D6:FC:0E:30:15
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8C2A7B062FA11F193CB37D5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.170.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:46:cb:d7:db:07:8c:c5:61:4a:31:0a:47:c4:fc:17:10:98:
8c:a6:f7:88:d2:d3:53:ac:a1:e3:ae:93:b1:6b:bc:e4:1a:9b:
4c:95:9a:3e:d0:ba:15:7c:10:d1:ed:d9:8e:98:1e:ed:5e:08:
ca:7f:7c:5b:0c:38:9d:34:fd:14:36:16:54:b4:19:e5:e9:67:
9d:dc:30:33:f5:7e:ef:e3:38:04:a1:5c:d3:79:c5:84:bf:77:
d5:9d:92:2e:0c:9f:98:1b:b8:13:11:99:da:5b:47:33:23:a4:
17:3b:73:40:bd:37:ab:b2:71:a9:02:c4:ef:36:2c:ca:b5:19:
0e:56:3d:bc:95:c8:0d:0f:83:f5:75:7e:d6:20:0a:04:98:e4:
9f:e9:28:45:65:cf:8a:12:1f:17:42:91:af:c1:da:fe:e2:7d:
9b:c2:fd:4e:25:54:07:81:cd:55:5c:6a:61:7f:96:58:18:e3:
0e:dc:8c:a3:e5:0d:90:eb:e2:e4:5c:4b:b1:01:dd:fc:5a:eb:
5c:a8:f1:cc:60:0a:96:53:52:f2:c9:b7:61:f4:69:63:9a:ac:
83:f9:72:48:fe:24:83:a4:9e:86:4b:64:52:57:e3:18:c3:bf:
3f:a2:6a:1e:96:7e:70:4e:56:82:7d:53:5e:aa:41:14:e3:4d:
82:c0:d1:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 16:45:10 2026 by rpki-client