Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF0EE868547711F18B2CB8F7CE1D38B0.roa
File: FF0EE868547711F18B2CB8F7CE1D38B0.roa (raw, json)
Hash identifier: 05P5OZwQ2vlD5Cj6xqbty6Byh2yUEyXbl7B5GZzTvrI=
Subject key identifier: A1:54:A6:FA:A2:F6:84:3F:32:E0:1A:6D:90:0C:18:3C:75:82:6D:23
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CD0E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF0EE868547711F18B2CB8F7CE1D38B0.roa
Signing time: Wed 20 May 2026 18:16:18 +0000
ROA not before: Wed 20 May 2026 18:16:14 +0000
ROA not after: Wed 01 Jul 2026 18:16:14 +0000
asID: 214143
IP address blocks: 154.92.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Jun 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118030 (0x1cd0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 20 18:16:14 2026 GMT
Not After : Jul 1 18:16:14 2026 GMT
Subject: CN=6a0dfa72-a132
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:20:85:1f:9b:8e:a9:bf:de:95:a5:ce:c3:f2:
3d:48:eb:da:18:bb:f4:92:69:28:c6:30:9f:68:60:
26:43:12:9f:07:77:62:5d:68:39:20:40:61:ad:1e:
aa:be:d3:a4:24:5a:20:c8:2c:b0:17:24:e7:eb:fd:
1f:d5:bb:05:5e:e6:53:c0:9d:5f:49:d1:95:e4:30:
87:70:47:5e:9f:5c:e4:08:a4:bb:69:e1:56:7e:01:
93:4a:95:6f:8a:14:8b:ee:0d:05:49:24:3a:50:17:
88:0e:3c:be:a2:a4:9d:b9:c8:cd:e6:da:fe:b6:64:
d8:6b:af:09:c5:eb:31:95:7b:10:b3:74:ef:41:a4:
84:be:67:37:75:24:fb:8b:c4:26:6d:19:84:08:a8:
2e:d6:3e:e6:95:40:8c:eb:82:e5:82:f8:17:f3:b6:
f4:aa:d7:3d:ac:75:a3:08:bc:63:5c:96:e6:73:08:
19:cc:97:b3:a4:79:0f:ea:6f:30:9d:72:d9:e0:bd:
5f:f8:47:4b:e3:1d:16:6f:f7:23:f4:d1:79:08:3d:
97:c5:8c:ae:b4:f7:9b:62:8f:df:78:ad:ec:20:1d:
e0:e8:45:98:06:96:c6:f1:ae:e3:59:d2:df:e8:31:
71:eb:02:f3:98:3b:e2:62:fa:b2:79:5c:40:0b:6e:
64:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:54:A6:FA:A2:F6:84:3F:32:E0:1A:6D:90:0C:18:3C:75:82:6D:23
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF0EE868547711F18B2CB8F7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.209.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:cf:40:2b:c4:96:71:be:0b:6f:4a:a8:31:3e:63:e1:8a:a3:
2f:00:0b:2f:8c:fb:c3:f8:3a:bf:8f:df:50:46:19:27:9e:7a:
c0:96:a9:6b:84:48:63:49:48:50:97:b7:63:89:d9:83:aa:2c:
86:1a:16:41:ae:c9:5c:21:3a:1b:b2:dd:34:0a:56:d1:c9:30:
36:8b:2e:56:28:c1:04:0f:b2:30:69:fc:cf:2c:91:a3:00:54:
15:02:5f:c5:16:c5:28:6e:72:f7:40:1a:8b:27:ac:61:f5:f7:
9d:9c:05:4e:1f:fe:8f:7c:ca:c9:6d:e7:64:18:5d:4b:8c:df:
91:ca:8a:5f:79:7d:50:73:19:26:e1:0b:5d:7c:17:18:6f:0a:
b4:41:eb:64:2f:72:55:d6:c2:4e:80:8c:75:b8:ca:7f:cc:b7:
27:2d:cb:5d:b4:ef:c2:d5:80:fd:bf:6b:e9:cf:91:63:fc:3c:
af:9d:31:8d:e9:c6:92:92:cd:8c:e9:18:3e:06:1b:a4:5f:28:
3f:a0:fa:e6:25:0f:35:36:68:fc:4d:ae:47:9e:e5:5c:be:b8:
55:b4:65:0e:10:a5:b7:20:e2:15:4f:fa:55:73:1e:d5:30:bc:
e7:d1:33:bf:ae:40:be:b5:d0:75:7d:0d:00:a7:a3:9d:7c:4d:
e2:88:91:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 07:07:59 2026 by rpki-client