Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C883384842C11F19A141DE4CE1D38B0.roa
File: 6C883384842C11F19A141DE4CE1D38B0.roa (raw, json)
Hash identifier: m3BIfAqdp+SLk6NDcYDZ5jsF0kZcL7hI6kcsAe1COLs=
Subject key identifier: 98:49:A1:0A:2A:BC:04:A5:22:6E:15:03:09:AE:CD:BE:12:B9:FB:D3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DA00
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C883384842C11F19A141DE4CE1D38B0.roa
Signing time: Mon 20 Jul 2026 11:16:16 +0000
ROA not before: Mon 20 Jul 2026 11:16:12 +0000
ROA not after: Thu 27 Aug 2026 11:16:12 +0000
asID: 154132
IP address blocks: 154.94.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 08:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121344 (0x1da00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 20 11:16:12 2026 GMT
Not After : Aug 27 11:16:12 2026 GMT
Subject: CN=6a5e0380-6ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7b:55:65:a2:cc:8d:1f:df:0b:e2:0d:f6:92:
b3:41:da:53:4a:73:66:64:6f:83:80:df:5c:1d:7f:
26:5b:30:e7:e1:9d:de:a2:64:90:0c:2c:4c:a3:ad:
c9:30:b3:22:f8:72:e8:6f:aa:f7:23:2b:20:8d:70:
38:b5:b3:27:7e:51:fd:06:33:d7:02:f5:64:6b:20:
f9:78:e5:b8:df:f3:f5:33:bc:1c:c2:80:e5:5f:f6:
7d:49:e5:0b:ff:40:ff:08:92:f4:42:f9:bf:97:d4:
df:23:27:a8:41:0e:e9:e3:06:a2:57:18:56:07:47:
90:85:e4:f1:19:59:f3:11:6b:83:59:35:54:fe:4c:
ee:3e:27:47:f3:42:82:d3:e5:5a:e3:8b:42:b4:91:
80:45:6a:b1:bf:89:ed:b5:58:db:ec:8a:c7:ca:1e:
f7:87:32:17:f0:4a:ce:ae:7e:99:04:9f:10:56:52:
58:8b:8a:ef:aa:8a:22:0e:65:13:29:63:98:a7:79:
dc:91:51:36:0b:ec:63:ea:57:67:79:5e:a9:d8:11:
f2:28:8b:39:1e:e4:8a:37:eb:ef:32:4a:dd:f5:b7:
f9:ac:0b:3b:99:2c:4c:67:64:29:07:d6:8d:de:78:
c9:36:d8:37:15:e0:10:f2:d0:cc:e6:b5:b9:1c:fb:
8b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:49:A1:0A:2A:BC:04:A5:22:6E:15:03:09:AE:CD:BE:12:B9:FB:D3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6C883384842C11F19A141DE4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.60.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:93:4c:f2:db:1e:a1:ed:50:f1:ab:58:a7:d9:ec:b5:2d:35:
73:60:34:e2:d5:63:b1:03:0a:e6:7d:61:99:89:c8:8f:39:8e:
dc:c7:06:24:94:d9:0f:52:1e:dd:1c:63:3d:db:85:fb:1e:6a:
f2:22:36:9a:d4:14:ae:3f:24:c9:5b:65:c3:c8:a8:2c:03:7b:
12:55:b2:61:98:43:39:a7:d2:ce:e4:57:0f:8f:ff:0c:45:d8:
2a:5d:57:90:2f:92:c0:24:96:9b:77:43:c2:41:ee:75:8d:2f:
bc:9d:88:80:57:60:c9:77:82:0b:01:9c:62:c2:c8:cd:b9:af:
1a:9e:64:74:3b:5a:d5:f2:85:26:69:87:64:07:f9:ea:e1:c8:
d3:1f:11:f6:f5:37:7b:00:c1:21:a6:46:f1:05:27:7e:2f:c0:
9e:d8:c2:3a:b4:6f:55:9b:eb:c5:1c:4e:27:fd:e4:8d:00:bd:
3f:19:77:fd:f7:59:b4:c0:cd:ef:dc:15:a1:ce:87:2d:07:ca:
11:e2:2a:74:52:24:a4:5c:b0:b4:9a:ab:86:d0:99:ab:fe:40:
04:b4:a2:ff:e1:41:0b:45:26:d8:91:59:90:10:17:bf:bc:ad:
6c:a4:7d:9f:ad:71:ef:48:25:ca:2f:db:f9:62:28:57:c6:8f:
24:71:be:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:56:07 2026 by rpki-client