Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30A6E31A4D0911F1BBF82AD5CE1D38B0.roa
File: 30A6E31A4D0911F1BBF82AD5CE1D38B0.roa (raw, json)
Hash identifier: Ohutx4LJllWzhDC710RJrOCv9ZqjBZU3aFbtf2rgMJ8=
Subject key identifier: 81:E6:B2:03:20:42:F4:ED:E1:B3:42:3E:20:D0:CF:09:28:0F:78:1E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CAFC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30A6E31A4D0911F1BBF82AD5CE1D38B0.roa
Signing time: Mon 11 May 2026 07:15:29 +0000
ROA not before: Mon 11 May 2026 07:15:25 +0000
ROA not after: Wed 24 Jun 2026 07:15:25 +0000
asID: 214413
IP address blocks: 154.82.0.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 05:45:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117500 (0x1cafc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 11 07:15:25 2026 GMT
Not After : Jun 24 07:15:25 2026 GMT
Subject: CN=6a018211-578f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2c:0c:90:38:8a:e4:c4:d2:60:8a:b5:02:f8:
e8:4c:bc:7f:84:6f:f9:72:6b:48:5b:12:c4:3a:de:
73:09:2a:20:7f:6c:ea:e8:87:6a:71:f0:39:1a:02:
be:2a:09:3e:49:bc:79:b7:1c:75:57:c2:a3:a8:75:
22:59:65:b5:ea:e6:7b:cd:84:5c:d8:0c:a8:bf:08:
ef:5e:06:39:24:aa:6a:cc:a3:fb:43:28:9b:d8:6d:
b8:30:97:c5:40:db:00:db:33:b5:6b:4b:2a:20:83:
12:b9:22:35:78:28:98:09:ba:03:29:e2:0c:82:ca:
96:84:30:e1:5f:e9:7e:d3:13:04:d4:2f:80:64:11:
60:ae:77:b0:fc:c9:af:28:d2:c7:2e:85:56:5e:dd:
ba:84:b6:64:f8:b1:7b:91:9b:ed:7c:43:db:aa:26:
4b:5c:88:e2:f3:35:74:f8:e3:61:17:a9:a0:b4:b6:
54:a5:ee:7e:36:4c:53:43:52:ae:57:66:b1:78:23:
89:8e:aa:a6:9a:3e:24:d9:c8:16:13:0c:aa:3f:ae:
ad:33:a0:7c:5e:0e:ba:af:53:e9:fe:a5:ba:ab:23:
59:3d:18:c6:3a:b0:94:b5:74:ef:e4:40:f0:5c:95:
17:60:67:af:9d:5b:fa:f0:aa:51:c9:31:6c:3d:6e:
ce:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:E6:B2:03:20:42:F4:ED:E1:B3:42:3E:20:D0:CF:09:28:0F:78:1E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/30A6E31A4D0911F1BBF82AD5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.0.0/23
Signature Algorithm: sha256WithRSAEncryption
21:27:80:62:9a:3b:27:b2:8e:69:82:75:9d:6f:50:c7:09:3e:
a4:5e:de:67:9d:82:97:67:bf:8c:62:c6:fb:70:f7:8b:4a:ec:
7d:94:fe:6c:48:c8:27:e4:21:aa:24:85:0f:92:0c:9f:d8:83:
fb:d7:58:fb:1f:a9:70:58:db:06:e9:1a:31:50:52:e7:8f:23:
79:19:ac:42:31:3d:51:8b:1c:c1:25:f2:01:f5:22:77:93:18:
4a:16:c3:a6:0a:7b:48:43:ff:16:e3:12:4c:50:4f:7f:d6:9a:
df:5a:5e:0d:dd:75:bc:42:54:ae:c1:45:cb:5e:2a:29:91:06:
9f:c9:d9:45:98:b2:2c:6f:9d:d1:8f:42:47:3c:7f:2e:41:b3:
9f:16:83:d9:01:3d:b8:16:bc:39:82:18:b4:e8:3a:9e:38:31:
67:2e:2c:94:2f:fd:ab:bf:98:70:20:73:60:9e:25:c5:64:87:
78:49:96:88:db:45:6e:06:67:76:a1:05:f0:13:ff:76:21:d2:
f7:91:65:04:d6:26:b8:89:d9:41:a6:63:b7:27:cb:dd:81:42:
81:a7:36:12:c3:e2:8e:73:fc:1e:64:57:90:f6:37:0a:3e:73:
b9:2b:85:dd:de:14:be:07:72:36:40:1b:84:f3:5e:43:ba:2a:
47:a3:4e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:22:50 2026 by rpki-client