Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6ECBD12A7C5511F18EA93BE6CE1D38B0.roa
File: 6ECBD12A7C5511F18EA93BE6CE1D38B0.roa (raw, json)
Hash identifier: gzFrOC2JhqYTKWFgihcCrpraQdxeKamcT+HXYbZjHH4=
Subject key identifier: 37:53:32:12:AC:11:6D:43:19:17:5E:87:17:A6:82:30:81:5B:E0:0F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D809
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6ECBD12A7C5511F18EA93BE6CE1D38B0.roa
Signing time: Fri 10 Jul 2026 11:49:40 +0000
ROA not before: Fri 10 Jul 2026 11:49:35 +0000
ROA not after: Mon 10 Aug 2026 11:49:35 +0000
asID: 139646
IP address blocks: 154.86.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120841 (0x1d809)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 10 11:49:35 2026 GMT
Not After : Aug 10 11:49:35 2026 GMT
Subject: CN=6a50dc54-9bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f0:d5:24:7b:d6:80:e8:59:db:24:ea:ae:3f:
fd:c3:26:10:7d:74:b8:f9:07:82:ca:04:be:7c:90:
83:92:c4:62:a0:fc:5f:78:e6:84:e7:2d:ff:ac:33:
48:e8:dc:ec:e7:51:3c:d9:2d:bd:6e:86:39:b6:96:
dd:33:a8:88:bd:80:c3:e1:c8:d1:93:46:c1:47:36:
0a:28:aa:63:ec:bb:6e:67:39:01:c1:7d:23:53:75:
ae:17:53:cb:85:13:5d:c0:e4:ad:56:d3:ca:fe:27:
07:89:13:4c:38:83:44:09:3c:f0:5a:78:bc:e7:9c:
2f:91:a2:5c:65:d9:a8:ed:84:c7:7d:fb:e7:a1:0d:
53:44:62:45:6c:df:d2:4f:4d:8a:e4:3d:af:5e:87:
9c:aa:26:a9:65:8e:c8:f1:c3:56:be:5f:4c:77:ab:
aa:62:43:18:2d:1d:6e:f1:98:01:ac:fa:b9:d1:88:
45:66:d5:47:9e:aa:88:a0:66:9e:27:23:f2:0f:04:
e1:8c:10:9f:b9:b9:22:90:56:f1:04:a5:d0:d4:61:
d7:d7:1b:0c:b8:ed:1e:eb:6c:dd:79:98:64:d1:3a:
a1:97:2e:0a:29:b8:89:6a:4e:61:cb:ae:8a:33:d7:
d3:d1:3a:ca:db:7c:3e:88:60:21:a4:50:20:03:0d:
b2:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:53:32:12:AC:11:6D:43:19:17:5E:87:17:A6:82:30:81:5B:E0:0F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6ECBD12A7C5511F18EA93BE6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.0.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:79:ab:16:ca:33:64:56:54:fa:ef:d5:66:5b:f5:35:9e:a6:
7e:c2:26:25:9a:58:df:c2:a0:0c:6a:b5:1b:b7:c5:9c:c1:d5:
2d:6f:40:84:1a:ae:40:2d:06:5f:7e:ae:93:97:f0:80:77:f0:
71:16:28:f4:56:fe:3d:97:b9:42:ef:73:5e:6a:b4:73:d4:8f:
74:d8:f3:17:59:eb:7b:3b:2a:f0:21:42:a8:5d:44:19:1e:45:
46:31:5d:06:02:31:01:a4:58:fe:f4:64:f6:4a:b4:f5:62:fd:
f3:86:b1:92:38:10:c6:28:0b:d8:c2:d8:1b:ca:71:99:3c:ec:
30:fd:f4:b6:c3:01:9a:53:b0:77:f2:a4:8b:7b:a5:c5:db:43:
9b:e7:13:47:b4:57:51:24:3f:3d:0d:b3:0e:87:a0:24:70:3b:
bc:4c:21:28:ca:ef:3c:98:aa:e3:22:b4:11:45:f6:33:59:d9:
25:65:9b:53:e1:9e:8f:34:e8:30:3c:eb:1d:73:5f:20:26:83:
56:7b:35:d9:d1:5e:22:2b:ee:22:f3:82:65:6e:36:a3:26:3c:
4f:8e:7e:a5:38:0a:1f:ac:26:02:52:ee:00:73:cb:bc:44:a0:
47:d6:c8:bd:ce:41:03:15:d9:ce:8f:8d:2b:42:4e:08:99:dd:
91:3d:2e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:56:59 2026 by rpki-client