Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA60E29E460D11F1AB7675DECE1D38B0.roa
File: FA60E29E460D11F1AB7675DECE1D38B0.roa (raw, json)
Hash identifier: i6Mg0TTx9vr32N28opiTan5YCmLris44X7mzUMLj0+A=
Subject key identifier: 38:9B:7B:EC:99:9F:C8:EC:B7:11:79:48:B9:B4:21:17:F4:C9:39:65
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C933
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA60E29E460D11F1AB7675DECE1D38B0.roa
Signing time: Sat 02 May 2026 10:02:50 +0000
ROA not before: Sat 02 May 2026 10:01:57 +0000
ROA not after: Mon 08 Jun 2026 10:01:57 +0000
asID: 198243
IP address blocks: 154.222.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117043 (0x1c933)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 2 10:01:57 2026 GMT
Not After : Jun 8 10:01:57 2026 GMT
Subject: CN=69f5cbc9-f2aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ac:50:63:f5:b9:eb:c4:d9:13:96:5f:a2:1b:
a6:3e:b3:eb:0c:67:29:a1:f6:3d:f9:23:ff:9b:6a:
7d:43:a1:a9:36:11:b3:ad:b5:50:af:0c:64:4f:d7:
35:1c:83:5c:2e:6b:2e:08:12:c4:03:fd:30:f6:74:
51:b5:78:46:a8:37:49:a4:96:70:f3:98:a9:8d:a5:
9c:5e:db:6a:68:4f:13:ea:24:a5:a9:bb:e8:69:02:
76:62:e5:6d:63:32:bb:a5:f1:75:e0:cf:a5:72:ce:
70:da:d5:44:d6:cc:61:2d:f8:12:c8:a3:d7:d1:f3:
8e:65:12:31:14:62:a0:b1:56:44:e3:f1:d6:ba:3f:
d9:2a:72:02:6b:04:e1:83:27:7a:e2:ad:f5:f7:e5:
62:08:68:6e:50:90:a8:1b:94:cf:8b:82:de:0e:60:
36:13:f0:26:fa:21:b1:dd:38:d9:4d:f3:d7:33:6e:
f2:13:0c:13:0e:c5:b9:1d:21:05:c8:20:ff:1b:b3:
3e:5e:40:1d:d3:d0:9e:aa:10:cc:0b:ea:28:a3:9e:
ca:16:4d:9f:12:c0:09:3e:b2:36:40:ca:34:aa:3e:
f9:b4:fc:10:23:e0:82:de:1c:a2:b9:a6:3f:2d:ea:
b0:7c:6f:a6:70:4f:b9:4d:07:76:a4:62:74:9f:ad:
eb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:9B:7B:EC:99:9F:C8:EC:B7:11:79:48:B9:B4:21:17:F4:C9:39:65
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FA60E29E460D11F1AB7675DECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.86.0/24
Signature Algorithm: sha256WithRSAEncryption
96:61:57:a4:e4:55:05:97:f9:c7:e4:69:9a:65:d0:ac:1c:f0:
60:54:7c:7e:3e:db:59:be:9a:bf:24:2c:26:6c:2b:a8:71:1d:
86:c7:e2:8b:d2:ce:8b:a3:c9:d8:3f:a6:9d:6a:7b:6a:ae:c2:
24:38:6a:81:44:e9:10:42:42:98:b8:ef:64:ed:fb:f0:b5:49:
27:c5:e4:a3:df:44:72:77:e8:97:0d:04:bc:d7:77:c0:ae:74:
c8:56:fe:dc:42:7d:19:e9:3e:a2:52:32:4c:d6:78:fd:a6:ed:
53:5f:c0:b9:c9:ff:48:16:8d:6c:40:af:5a:f5:78:7a:1d:a0:
2e:70:89:ab:62:75:27:8a:e6:b5:df:b1:a5:60:97:cb:45:1b:
62:d3:f5:76:f8:ca:e4:51:27:a1:fe:a1:f2:45:46:91:d0:6c:
91:4d:92:df:a8:72:88:47:14:cf:56:3a:00:c5:88:50:86:c8:
fc:f4:12:c5:19:ac:33:b3:9c:56:57:4d:e5:50:2b:fa:f3:43:
36:05:f3:21:df:71:51:92:81:48:25:fc:34:04:d1:40:80:54:
3d:21:0a:d9:43:9a:68:2b:ee:84:fc:81:4f:52:23:b2:f9:be:
13:9e:cb:f1:73:e7:b2:b3:1b:e7:84:c7:53:6f:04:4a:63:2a:
74:f3:3f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 11:02:32 2026 by rpki-client