Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/222DE06A73F411F1AED946B3CE1D38B0.roa
File: 222DE06A73F411F1AED946B3CE1D38B0.roa (raw, json)
Hash identifier: eya8Oil0TO0fKGnJU+hwm17J/jKuqJsDfcZZLukjv5g=
Subject key identifier: A9:52:1A:51:4A:CE:BE:91:8F:01:7E:1C:C3:5E:3D:F9:72:71:87:A2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D616
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/222DE06A73F411F1AED946B3CE1D38B0.roa
Signing time: Mon 29 Jun 2026 19:53:01 +0000
ROA not before: Mon 29 Jun 2026 19:52:57 +0000
ROA not after: Sun 02 Aug 2026 19:52:57 +0000
asID: 209242
IP address blocks: 154.206.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 08:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120342 (0x1d616)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 29 19:52:57 2026 GMT
Not After : Aug 2 19:52:57 2026 GMT
Subject: CN=6a42cd1d-879d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:84:8d:9f:8b:c4:9e:9a:ec:f3:cc:50:a7:51:
e2:b4:cd:41:0a:7b:24:b3:6e:27:ae:2d:ee:df:dd:
51:f1:91:bf:92:88:60:83:92:84:3b:b1:65:9f:9f:
d0:58:80:42:a5:8f:dd:20:23:af:28:9e:f9:32:a2:
a1:c1:10:05:01:66:e9:71:42:c0:54:ef:2e:c1:7c:
7b:60:02:8a:a4:97:7e:62:93:33:6a:da:d2:02:b9:
6f:69:83:28:8c:ab:52:6f:6c:1d:47:b2:4d:5f:b7:
7c:5f:d5:57:98:ed:87:a8:5b:89:03:f7:5d:23:2c:
63:99:46:d8:5c:fd:83:e9:73:9a:76:84:18:a4:28:
c5:28:61:2e:df:15:96:ae:78:de:94:26:8d:66:79:
66:9d:8c:dd:b9:e3:4e:30:fd:49:6b:a3:ec:9a:25:
eb:86:55:56:20:49:c5:19:6e:e0:a9:74:03:b2:8d:
25:41:28:19:7b:b7:b2:23:27:ca:a2:da:ab:35:2f:
43:5d:f5:66:b4:f5:e5:3a:62:82:94:12:58:fd:9b:
04:12:6e:8c:3f:aa:2b:eb:62:37:32:70:aa:cf:7c:
f7:b1:17:b9:b4:2e:97:87:8e:cc:33:06:bd:ee:c5:
88:f8:9d:42:f5:e7:a7:00:8f:12:dd:48:f1:f1:81:
c3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:52:1A:51:4A:CE:BE:91:8F:01:7E:1C:C3:5E:3D:F9:72:71:87:A2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/222DE06A73F411F1AED946B3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.12.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:5b:d8:52:cd:36:7a:33:5a:1f:0b:25:df:6c:b4:60:8d:d7:
31:af:fa:e5:fa:62:0d:76:83:46:08:41:07:fb:f1:26:ec:18:
3a:eb:ce:00:7c:b5:2d:9a:5e:4a:1a:8d:0c:ae:8e:e3:6b:5f:
28:e8:56:9e:bd:75:00:d2:76:6b:27:a9:a8:72:ff:fb:7b:dc:
02:31:80:0e:c8:f3:e5:fc:c6:be:ea:f1:ca:90:f9:f8:ad:90:
79:e7:f2:e9:c5:6a:11:eb:0d:fe:98:fb:45:01:0b:12:49:1d:
b9:b6:d5:ec:36:56:a0:b9:b1:ca:cb:76:68:f1:4e:e3:1d:48:
db:18:02:ad:e3:45:96:70:bb:93:d7:f2:45:31:47:88:5d:e5:
56:4d:09:cd:d2:df:c1:f7:54:05:a1:fb:ff:c6:0f:23:dc:60:
35:99:fd:64:b0:d1:fb:f2:e8:f1:fe:69:6c:a7:94:1f:70:6a:
bb:be:ac:31:18:e6:d4:d9:ce:cd:5c:3b:13:22:10:8d:1b:b6:
38:57:24:16:f2:46:50:16:da:20:e0:9d:aa:da:06:3c:8e:de:
2d:5b:8d:99:56:d3:bc:6e:91:3d:12:a7:89:8a:8b:1a:f8:d9:
c4:57:bc:10:df:e2:45:a8:93:84:f1:37:d2:c6:23:4a:05:23:
27:6c:73:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:54:47 2026 by rpki-client