Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/616C54364CE011F18EF9FCCECE1D38B0.roa
File: 616C54364CE011F18EF9FCCECE1D38B0.roa (raw, json)
Hash identifier: 8kRGdP7AS3FQCJJUlAKFV/8NHPlIAGqzjbRxEXclkYA=
Subject key identifier: 16:FB:71:B1:34:E3:47:9F:86:AC:6A:5D:D7:1F:AE:1D:D6:63:54:9D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CADA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/616C54364CE011F18EF9FCCECE1D38B0.roa
Signing time: Mon 11 May 2026 02:23:22 +0000
ROA not before: Mon 11 May 2026 02:23:17 +0000
ROA not after: Thu 21 May 2026 02:23:17 +0000
asID: 17497
IP address blocks: 154.211.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117466 (0x1cada)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 11 02:23:17 2026 GMT
Not After : May 21 02:23:17 2026 GMT
Subject: CN=6a013d9a-b887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:69:ae:7b:04:0e:70:02:57:09:04:e4:98:2b:
0e:f3:3e:11:23:d4:e3:40:dd:d5:d2:75:83:90:e3:
4b:1b:c1:cc:ef:26:6c:58:64:18:8f:e7:ce:1a:b3:
d0:50:ed:85:86:a3:65:91:a8:8c:03:35:40:0b:01:
72:6f:68:2a:3f:73:76:40:d6:4b:da:31:9f:a0:28:
34:a1:f1:32:6a:2f:3a:52:03:f8:39:b4:49:bc:91:
89:35:fd:92:fb:7f:70:13:79:a6:a6:ca:ce:77:5f:
60:ac:30:9d:6f:36:4c:ab:f5:2e:3a:59:3d:a9:40:
ae:6b:9e:47:c7:0c:fd:75:53:ca:f5:68:a2:55:b8:
35:54:e9:b6:76:94:c8:7c:31:d7:a2:6a:7c:f4:85:
be:ab:20:39:41:eb:58:41:07:c6:3b:7f:c2:9c:d4:
15:c0:4c:6b:53:59:5d:1e:50:be:2b:44:e7:76:4d:
9c:88:bc:07:e3:5f:48:5c:c2:45:e5:ca:1b:c8:00:
7e:1f:7d:e7:61:8e:6f:8b:fa:60:01:07:09:cc:c0:
a6:c8:5b:7d:c2:a0:90:e4:a6:0d:00:d6:4a:a3:d7:
2f:df:84:fc:77:9a:2b:55:b2:95:fb:49:c7:b2:b7:
b9:1c:7e:9d:f7:54:88:9d:0a:4a:76:2e:c5:28:98:
3a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:FB:71:B1:34:E3:47:9F:86:AC:6A:5D:D7:1F:AE:1D:D6:63:54:9D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/616C54364CE011F18EF9FCCECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.128.0/24
Signature Algorithm: sha256WithRSAEncryption
62:0f:bf:d8:ce:cb:15:db:f6:de:37:58:1e:5f:03:72:2f:e8:
89:7d:e0:bd:68:4e:ee:ae:93:f9:10:40:d5:a2:89:0a:34:8d:
bd:49:11:e7:8b:b3:05:84:40:c0:65:ef:4b:44:2b:8d:d2:da:
81:11:b2:3b:72:41:2f:aa:44:5d:bd:2a:83:4e:7b:0d:20:74:
f0:3d:6c:26:c2:88:d1:13:06:c9:16:98:2a:2a:38:bb:e7:e3:
6e:80:1f:bf:14:60:53:48:52:78:f4:b0:c0:ba:1e:b2:1e:ba:
51:ed:18:83:e8:e6:bf:b0:5f:a8:e3:a6:2e:36:87:71:0b:e3:
42:46:a3:71:70:25:e4:d5:56:de:d6:d0:f3:3a:fa:5e:d2:b3:
c6:66:9d:12:ef:e3:c9:d2:c9:6b:bf:76:14:82:af:5c:be:14:
d0:46:16:7c:69:2f:ae:ff:0c:a7:c9:a5:85:d3:7c:79:60:ab:
54:0c:30:a3:94:64:34:03:04:71:03:8f:24:37:a5:10:71:5e:
c7:87:29:c2:7c:d4:85:86:1f:52:43:06:9e:71:d7:8b:4f:d1:
76:fb:5b:ef:90:ae:0f:e9:3a:f9:6a:38:5a:99:56:db:59:25:
40:41:70:47:49:fb:98:56:28:5c:6f:9e:ad:47:69:b0:ce:c7:
f6:d3:70:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:52:59 2026 by rpki-client