Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/343C14084C8E11F182CD64DECE1D38B0.roa
File: 343C14084C8E11F182CD64DECE1D38B0.roa (raw, json)
Hash identifier: woii74SWpjR15gMhDM7JNwvu7VkCUYFzDA1P3E63xj0=
Subject key identifier: 1D:0B:E7:7E:23:43:A9:F5:FE:8F:5B:53:FA:CA:9B:42:A0:B4:F5:92
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CACF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/343C14084C8E11F182CD64DECE1D38B0.roa
Signing time: Sun 10 May 2026 16:35:07 +0000
ROA not before: Sun 10 May 2026 16:35:01 +0000
ROA not after: Wed 10 Jun 2026 16:35:01 +0000
asID: 1405
IP address blocks: 154.83.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117455 (0x1cacf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 10 16:35:01 2026 GMT
Not After : Jun 10 16:35:01 2026 GMT
Subject: CN=6a00b3bb-a019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:eb:59:d9:07:75:26:76:2b:5c:42:76:bb:0e:
51:3a:e4:9a:5c:25:e0:65:f4:98:15:2e:11:fa:12:
e6:fc:0a:65:84:8b:23:c5:02:fb:5c:cb:a6:6c:cf:
84:1b:9f:3a:1f:63:97:83:fd:62:7c:43:7f:ef:93:
6a:f5:fd:a8:90:99:66:e9:d6:90:ab:f3:9d:ba:f3:
f0:7f:b6:f6:a4:64:97:70:3a:ed:e9:ac:6a:46:7c:
7e:29:95:77:90:a3:81:c0:d1:cf:aa:5d:d4:0c:4c:
df:93:67:33:cf:3f:bd:e2:36:58:25:5c:99:c8:0d:
2c:21:60:fc:37:22:87:e0:93:b1:d1:9c:ba:13:b1:
74:f3:23:65:f8:ff:be:c9:1d:41:73:f7:8f:70:d6:
90:a1:50:0a:30:cf:26:af:d7:88:9e:03:14:01:da:
41:b5:38:4a:77:b6:46:46:df:93:2e:5e:1c:2f:fd:
0a:4c:bf:27:59:8c:9a:05:f0:f8:89:17:da:47:e8:
0b:d9:a4:72:97:2f:10:c0:3c:92:60:e3:db:d1:75:
35:e3:67:ae:e0:40:8f:3d:0f:86:29:f0:07:90:03:
c3:ea:67:b7:cc:dc:c4:88:03:0a:0a:9f:62:90:b5:
84:99:73:0f:85:e7:a0:c8:8b:9d:fa:01:00:0b:23:
d9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:0B:E7:7E:23:43:A9:F5:FE:8F:5B:53:FA:CA:9B:42:A0:B4:F5:92
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/343C14084C8E11F182CD64DECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.88.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:41:b0:19:aa:0b:92:b7:32:8f:40:7f:d1:f3:50:95:25:97:
c4:01:06:4c:b2:e8:00:39:f4:cb:c2:2f:2f:68:71:7f:73:d8:
8f:1f:fe:32:10:c5:f5:91:da:c1:de:72:60:90:ef:e2:4b:be:
69:41:e4:78:5d:b2:13:bc:3b:48:48:ed:72:5b:c0:e8:78:83:
59:7c:4b:e1:55:81:8f:25:d6:77:ba:84:d8:80:f0:eb:8c:43:
78:d2:dd:be:ce:a0:dc:80:91:62:d2:b6:37:c8:3a:62:9b:b7:
6f:d5:e4:ce:7f:79:63:3c:17:a3:9c:22:1b:84:a9:c8:cb:e6:
5e:b2:d4:0e:0b:97:a4:c9:db:49:44:19:a7:68:0f:5d:04:a5:
22:cb:21:37:da:1f:12:02:1c:86:3c:2f:8b:82:97:dc:c0:d6:
78:f3:6e:ad:40:34:4d:68:e3:0a:a2:71:17:ab:87:6f:e2:83:
e7:78:5c:24:ef:a2:9b:d2:d3:df:7b:63:26:ae:34:1a:77:28:
72:aa:58:e1:46:9b:e3:10:24:43:37:78:57:fe:a2:5c:17:5d:
36:a9:7d:24:c2:56:09:6b:e6:de:e7:65:d6:30:0b:56:2d:68:
26:18:7b:22:cf:e5:db:fe:24:b7:fc:20:0a:88:cb:d7:5c:8f:
52:80:04:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:45:17 2026 by rpki-client