Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE497F306EF611F1B00505E6CE1D38B0.roa
File: FE497F306EF611F1B00505E6CE1D38B0.roa (raw, json)
Hash identifier: 78mTU13NBF6HAcatSuvQ5NTLw/7wpnBZqSVzAOPvB7k=
Subject key identifier: 32:7F:47:72:92:3E:C3:15:A6:D6:9B:1F:3A:65:BE:7E:D8:24:B5:DA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D49A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE497F306EF611F1B00505E6CE1D38B0.roa
Signing time: Tue 23 Jun 2026 11:30:54 +0000
ROA not before: Tue 23 Jun 2026 11:30:49 +0000
ROA not after: Sun 09 Aug 2026 11:30:49 +0000
asID: 63099
IP address blocks: 154.82.163.0/24 maxlen: 24
154.83.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119962 (0x1d49a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 23 11:30:49 2026 GMT
Not After : Aug 9 11:30:49 2026 GMT
Subject: CN=6a3a6e6d-f64e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:11:1f:0c:c6:9e:aa:36:a3:c9:a0:c8:b1:97:
e2:aa:8b:1f:28:d3:95:b0:fc:25:19:7a:ca:0e:53:
43:10:16:49:d5:5b:50:4b:8e:92:5d:2a:5d:06:36:
ba:42:ab:23:8e:25:fe:7f:21:58:e8:d5:5d:27:e6:
08:2b:a9:95:cb:e9:e9:43:04:5f:43:9b:c5:b5:7e:
9b:40:e4:46:d6:8f:11:08:f7:90:e4:1c:b5:53:8d:
9c:68:28:51:8f:6d:8a:35:8a:d8:25:f5:40:03:9a:
43:05:01:77:30:73:e7:5e:91:9d:37:46:af:2c:f9:
aa:cf:39:f7:08:e3:95:f0:33:ba:30:db:c6:fc:b2:
9f:a8:d7:b1:19:21:b8:b8:4a:d7:0b:ef:76:79:1b:
ce:d1:00:1d:08:5e:cc:87:3c:24:fd:27:37:6e:f8:
42:d6:89:50:e6:55:13:f6:8b:f0:3f:02:d2:1f:30:
c3:fa:bb:b7:7f:6d:46:85:38:06:5e:51:a5:93:b5:
b4:dc:5c:04:4f:92:43:b7:ea:d7:69:3c:f5:af:b1:
a5:21:54:6c:9f:72:fb:aa:f8:e4:6d:6a:ad:92:68:
8f:f1:64:24:8f:7b:eb:87:2c:98:a6:27:9f:11:84:
87:f0:e8:ee:83:30:4b:ff:58:03:5d:d0:dd:26:50:
2f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:7F:47:72:92:3E:C3:15:A6:D6:9B:1F:3A:65:BE:7E:D8:24:B5:DA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FE497F306EF611F1B00505E6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.163.0/24
154.83.106.0/24
Signature Algorithm: sha256WithRSAEncryption
90:f8:83:aa:45:88:4b:f8:0c:80:c8:af:3a:f4:b9:2a:b5:fe:
33:c5:f9:f9:96:eb:76:bd:b3:f3:db:b8:46:75:61:b2:98:97:
f9:fa:2a:6a:0a:df:75:cf:21:7c:e5:a3:83:7f:8f:74:5b:50:
18:67:33:fa:c0:e9:f1:d7:84:ee:b0:ee:7a:0d:4a:37:bb:57:
68:d6:cc:f0:00:3f:df:fa:54:20:51:bf:3a:89:96:8d:c7:f7:
60:a2:85:9b:44:69:3b:56:2b:5a:09:6a:f3:8d:a8:93:d2:88:
c1:c1:ee:47:eb:c4:d1:69:0a:5b:e0:15:a5:b4:45:f5:c9:d4:
5e:f7:80:87:87:fe:14:42:e6:21:80:61:9b:1a:11:93:80:86:
b6:da:3e:6e:91:84:4a:63:12:bb:62:21:4e:88:f7:60:c4:ec:
43:a8:0b:1d:7f:d0:bc:15:f5:5b:25:a1:18:ac:b9:3b:3b:2f:
e8:fc:79:fe:a6:94:ca:de:14:85:d8:f4:cc:8c:a2:f3:9f:5e:
f9:5e:72:fa:f8:57:74:1e:91:01:ee:ec:f0:29:d0:39:3b:bc:
99:cd:b2:0b:f0:47:3a:e7:86:6f:2d:d0:bd:6e:d1:ba:03:a0:
1e:8e:92:b2:fd:76:12:51:d2:59:b0:89:b9:b2:d5:3b:f7:93:
df:9a:db:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:53:31 2026 by rpki-client