Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA1A1D345BD211F1B69081C5CE1D38B0.roa
File: FA1A1D345BD211F1B69081C5CE1D38B0.roa (raw, json)
Hash identifier: 5yDaxfK6/IcG+ylC4vrWBhh/e5o+C0EEvXKJRGezrUA=
Subject key identifier: 53:6A:5E:D3:A4:B1:78:91:DE:CF:6B:89:2A:79:74:09:FC:63:EC:E2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D0DA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA1A1D345BD211F1B69081C5CE1D38B0.roa
Signing time: Sat 30 May 2026 02:55:13 +0000
ROA not before: Sat 30 May 2026 02:55:08 +0000
ROA not after: Tue 07 Jul 2026 02:55:08 +0000
asID: 49505
IP address blocks: 154.211.17.0/24 maxlen: 24
154.211.18.0/24 maxlen: 24
154.211.19.0/24 maxlen: 24
154.212.28.0/24 maxlen: 24
154.212.29.0/24 maxlen: 24
154.212.30.0/24 maxlen: 24
154.212.31.0/24 maxlen: 24
154.213.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 13 Jun 2026 00:07:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119002 (0x1d0da)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 30 02:55:08 2026 GMT
Not After : Jul 7 02:55:08 2026 GMT
Subject: CN=6a1a5190-e85e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:df:11:e9:91:1d:b6:d1:bd:b8:69:11:70:38:
1c:3d:2d:8f:51:7d:16:b4:d3:c2:eb:41:b0:e6:ce:
ce:b2:0e:3c:65:04:38:59:f3:fe:e0:0b:03:68:8a:
20:07:6c:12:c6:c3:d0:87:56:7b:16:9d:83:50:75:
8e:bb:63:ac:bc:29:c8:2e:99:00:ba:f7:86:9c:0f:
f9:5b:fb:c1:f5:99:92:25:6c:33:6f:c0:0e:0a:66:
29:fa:21:d2:c8:20:20:a2:b5:e8:79:d7:f6:ab:36:
f5:02:b6:1a:99:42:53:51:f9:1b:65:07:bf:82:67:
bb:a0:32:3a:b0:b8:ca:38:55:48:8b:dc:00:1d:3d:
72:92:ad:69:60:c8:91:4f:4c:fa:92:9a:8f:19:16:
31:e6:30:92:25:52:4b:43:2d:ef:6b:8b:27:15:9a:
a6:c9:ff:03:6b:a1:9e:67:43:82:27:a8:22:55:0b:
25:fd:88:dc:35:0f:9f:09:0b:2e:59:3e:03:b9:9e:
78:1f:5b:15:3a:da:32:77:20:5c:5f:3f:72:cc:e9:
dc:da:3f:86:70:09:c6:5e:f5:f1:ea:46:15:a5:9d:
f0:9a:7e:64:1f:3c:42:e9:60:50:6f:6b:1d:56:1a:
3d:73:70:02:ad:73:b9:9b:d6:2d:bd:73:7e:7d:be:
e2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:6A:5E:D3:A4:B1:78:91:DE:CF:6B:89:2A:79:74:09:FC:63:EC:E2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA1A1D345BD211F1B69081C5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.17.0-154.211.19.255
154.212.28.0/22
154.213.0.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:0c:b7:2a:ba:65:15:bf:7f:81:71:4a:69:b6:1b:0b:be:7b:
73:e8:74:ec:d2:96:f2:99:6d:67:a3:75:0c:b7:e4:16:57:66:
0f:10:64:7e:bc:9e:5f:6c:ab:ff:ce:35:c1:93:b0:f1:86:7f:
70:c5:df:f4:1e:3a:a9:ea:33:ba:c8:b2:66:99:6f:87:23:53:
ca:04:eb:31:06:8f:a2:fc:e0:56:34:d4:03:64:92:5d:e2:0d:
8d:e5:18:df:c3:70:a2:99:18:1c:32:a9:57:00:bc:4b:4d:7c:
80:37:fd:df:81:6b:21:23:6c:96:c9:97:d6:11:31:13:5d:9a:
e1:f8:90:29:69:06:9a:6a:6c:b3:58:ef:cc:02:c7:39:e9:9b:
05:64:14:7c:91:56:b1:b2:46:79:dd:9a:0f:37:2d:82:23:4c:
4f:87:02:90:9f:85:66:7d:7d:71:98:0b:6f:6c:bf:1e:0e:f1:
ea:ef:da:d5:67:29:d7:80:f9:28:59:00:65:b3:85:55:40:4b:
70:a1:96:41:4f:fe:dd:76:f5:23:9f:39:ed:10:b9:b3:2c:85:
09:e9:64:be:ea:e5:07:9c:67:04:c7:1c:72:ed:ea:bc:4d:5c:
f3:0a:a2:e0:79:66:2c:2b:0c:60:15:03:16:0b:37:51:f5:64:
60:0d:bf:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:52:06 2026 by rpki-client