Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A1D3A28771511F1A058FABBCE1D38B0.roa
File: 6A1D3A28771511F1A058FABBCE1D38B0.roa (raw, json)
Hash identifier: M+PmpN2RPHAiHX8v2MGyfLYr7xgmWsXKbRl3k1Dz+EE=
Subject key identifier: 11:6E:32:9F:C3:2D:DB:A0:DD:59:A5:5C:2A:15:C5:2B:37:1B:B0:46
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D6E6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A1D3A28771511F1A058FABBCE1D38B0.roa
Signing time: Fri 03 Jul 2026 19:28:49 +0000
ROA not before: Fri 03 Jul 2026 19:28:44 +0000
ROA not after: Wed 12 Aug 2026 19:28:44 +0000
asID: 212042
IP address blocks: 154.83.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120550 (0x1d6e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 3 19:28:44 2026 GMT
Not After : Aug 12 19:28:44 2026 GMT
Subject: CN=6a480d70-054d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:02:59:c7:b5:1e:ed:f3:7e:95:7a:c9:2e:8b:
79:93:fe:3e:54:16:0e:d7:b3:b4:56:dc:f8:0b:79:
6e:60:45:42:a2:a8:6c:66:3c:03:da:ce:30:e2:a2:
3b:85:fd:28:1c:dc:59:e9:c3:e0:79:35:10:5c:cf:
f3:b5:38:f9:17:a8:05:e3:8b:bd:6f:6b:26:9a:d3:
24:38:d1:f5:ca:9b:23:a6:9a:0b:2f:22:65:e4:9b:
96:7e:30:5c:3a:0d:34:00:86:26:a7:7d:da:0b:b5:
89:4b:1c:ac:77:3a:f7:e3:de:99:dd:18:c2:2a:9e:
e4:bc:6e:53:82:9f:d6:7d:90:bf:2b:93:34:83:74:
75:69:36:a8:7b:ef:58:48:8e:4f:11:82:4b:85:1f:
4b:a1:7e:03:a1:01:03:6b:d1:10:80:ff:97:a3:d3:
63:ff:8d:0d:36:1b:f7:84:de:8f:7f:f8:29:5d:cd:
93:e1:68:80:da:e2:c8:07:16:78:f0:29:10:17:1b:
d7:3f:6a:f8:a9:6a:29:90:ec:c6:0f:e3:6e:2e:ab:
21:af:76:7c:c1:be:85:3c:ec:0d:66:a8:92:6d:9f:
fa:59:4d:76:9d:c8:d1:88:e7:8c:00:c3:c9:a0:a1:
16:2e:f8:d4:30:1c:3b:7a:59:7e:9d:61:13:f0:c8:
d0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:6E:32:9F:C3:2D:DB:A0:DD:59:A5:5C:2A:15:C5:2B:37:1B:B0:46
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A1D3A28771511F1A058FABBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.136.0/24
Signature Algorithm: sha256WithRSAEncryption
50:42:41:84:76:95:e6:e8:60:3d:99:5f:07:76:4b:38:df:de:
38:79:54:6f:f0:e3:5b:87:2c:d0:18:3c:1e:7e:e9:b3:25:f5:
00:12:3d:62:38:07:5c:45:e3:56:61:12:2a:bb:77:de:ce:b5:
b7:de:b2:e8:46:66:8d:fe:2c:04:fb:12:cf:80:5b:6f:c8:0a:
07:b6:0a:26:b8:b3:f0:57:07:df:82:21:d8:6a:d8:d3:24:b2:
37:f9:7a:ea:b2:8f:bf:65:9f:10:8c:c9:62:d0:ae:5e:6d:29:
32:92:38:8f:d6:03:df:98:e7:02:72:7c:61:ff:56:9a:36:68:
68:a5:b8:38:09:b4:ae:f9:9c:04:5e:11:39:38:df:bd:2a:d6:
70:33:ac:1f:b8:89:75:af:e1:cf:5c:0b:8b:66:fa:36:be:6b:
68:18:31:81:4b:0f:81:95:8e:e1:6f:1f:6f:8b:ff:cb:43:3f:
b3:3d:8a:60:4d:18:22:ed:74:e5:db:87:26:fc:91:80:e2:aa:
86:a5:05:43:12:f3:01:f7:8c:d0:a7:4b:51:6c:8c:51:41:e5:
39:43:4a:6d:72:18:fe:1d:e2:78:47:03:06:9a:11:f6:3a:db:
2c:d9:96:8b:44:ff:db:ef:d2:3d:bb:ec:41:92:97:b0:6f:4e:
6c:c8:06:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:49:22 2026 by rpki-client