Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A06006085F111F1A9D08FA8CE1D38B0.roa
File: 2A06006085F111F1A9D08FA8CE1D38B0.roa (raw, json)
Hash identifier: m6etnsHFKOttfBwU7sPqDeTJYp8dWNgy45KYC4JKviE=
Subject key identifier: 10:6D:19:68:75:05:57:DC:E3:C1:26:8D:A1:F4:E6:48:FE:77:77:EC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DAD1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A06006085F111F1A9D08FA8CE1D38B0.roa
Signing time: Wed 22 Jul 2026 17:17:07 +0000
ROA not before: Wed 22 Jul 2026 17:15:41 +0000
ROA not after: Wed 09 Sep 2026 17:15:41 +0000
asID: 395793
IP address blocks: 154.93.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121553 (0x1dad1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 22 17:15:41 2026 GMT
Not After : Sep 9 17:15:41 2026 GMT
Subject: CN=6a60fb13-22be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5a:95:c0:75:df:38:39:83:ad:64:ef:ec:95:
a1:c9:92:52:3b:d6:76:0c:3b:5d:ae:35:dc:4c:a7:
37:83:91:67:a5:ba:79:ad:e8:44:b0:46:2a:cd:1a:
86:e0:40:e5:39:36:54:0c:ed:0a:f7:b1:ea:6c:7f:
cf:13:dc:d5:5b:f2:71:84:06:0c:50:0d:e9:54:73:
9b:23:30:e9:d5:2e:ae:9e:ec:90:f8:33:cc:f2:9a:
b9:e6:05:72:ab:bd:27:e0:74:a1:76:1c:13:27:77:
fb:a8:0f:33:45:07:55:e9:6d:54:74:f6:49:71:71:
07:67:30:f6:f6:5c:28:2f:d7:e7:aa:1a:cc:d6:21:
87:88:ba:27:49:55:d9:6c:0a:22:56:c8:c2:58:0f:
2f:1a:1f:1b:7a:98:c8:eb:65:fb:8f:51:e0:41:f8:
d8:cb:28:71:02:80:d9:30:df:dc:44:76:50:4e:7c:
14:36:15:c6:b2:95:bf:21:1e:b9:47:e3:47:c7:37:
83:f0:a5:e3:1c:e1:64:a8:5f:ec:88:13:03:cb:ce:
3b:81:7b:ec:a7:20:62:7f:29:65:64:48:bb:ad:01:
09:2c:1f:e9:9a:e4:ef:89:75:6b:27:ed:33:2b:82:
ec:de:ca:53:b3:a8:10:ef:0b:58:fe:6d:79:a7:db:
b4:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:6D:19:68:75:05:57:DC:E3:C1:26:8D:A1:F4:E6:48:FE:77:77:EC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A06006085F111F1A9D08FA8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.0.0/24
Signature Algorithm: sha256WithRSAEncryption
47:65:e4:ee:9b:9b:90:eb:50:98:99:ee:eb:6d:38:04:7a:44:
82:25:78:91:69:6f:3c:86:f9:80:cf:c3:33:9b:c0:fd:e7:eb:
c9:9b:bd:78:9f:a2:d0:45:72:07:70:e2:39:d9:cb:8b:d5:ea:
45:40:58:dd:68:93:98:db:81:06:fd:d9:44:3c:8b:da:74:fb:
e2:48:da:6b:da:a4:d5:ea:5d:c7:3f:ba:6a:6f:d6:09:90:db:
b1:9b:d1:d9:2b:54:05:25:b2:01:35:d9:1a:bc:59:a3:42:d3:
f4:07:7f:6b:3c:95:47:c8:6c:df:8f:c1:50:97:ac:96:b9:2b:
cd:70:70:a7:8d:df:0c:f3:12:26:25:06:37:8e:59:9c:ce:d1:
48:70:8b:b5:e6:35:01:fd:04:2e:49:a8:17:11:cd:82:2e:01:
36:fa:90:32:9b:83:2b:97:09:76:37:c4:93:7d:60:bc:24:fb:
ba:85:31:00:3e:20:b8:18:55:30:e7:79:c7:6e:21:7f:ba:dc:
22:25:42:c2:43:d1:3a:f2:19:15:a6:f9:c9:2d:f3:8c:27:47:
7b:b9:bf:20:13:ff:bf:d3:e4:b4:13:3b:cb:3c:25:90:0b:88:
f3:c0:fb:6a:a4:f0:be:80:e5:7e:f9:a9:0a:42:39:61:f4:9b:
40:c6:11:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:23:07 2026 by rpki-client