Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FD598607C2F11F195B3AE04CF1D38B0.roa
File: 6FD598607C2F11F195B3AE04CF1D38B0.roa (raw, json)
Hash identifier: LO7dLNibufDfpaVnMLWU/08u0IF85QN9fefgaP8CV14=
Subject key identifier: B1:36:76:2C:1F:AD:DA:8F:68:E5:E3:12:3E:8E:3B:66:37:90:DD:3E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D7DD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FD598607C2F11F195B3AE04CF1D38B0.roa
Signing time: Fri 10 Jul 2026 07:17:41 +0000
ROA not before: Fri 10 Jul 2026 07:17:36 +0000
ROA not after: Sun 09 Aug 2026 07:17:36 +0000
asID: 147176
IP address blocks: 154.212.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120797 (0x1d7dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 10 07:17:36 2026 GMT
Not After : Aug 9 07:17:36 2026 GMT
Subject: CN=6a509c95-bb12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:38:a1:18:0b:34:bf:4f:59:19:ec:13:84:bb:
9e:55:ed:81:b7:2d:6a:02:f2:2f:c0:9f:bf:8b:80:
c3:84:bb:00:fc:e8:1b:3e:2f:a2:d7:6a:5f:12:cc:
f8:c9:eb:fe:6d:f8:a2:b5:7f:8b:ee:04:a3:e8:1a:
65:44:6d:c6:2f:2f:ec:7b:b9:f0:54:fc:88:f6:cf:
9a:0b:d6:50:e1:3a:8b:98:3e:b8:84:32:10:cc:d9:
1b:92:ae:aa:48:92:a7:3e:6b:fb:59:9b:f9:48:73:
ef:8f:88:ff:01:6d:c8:8e:23:2a:2e:90:bb:91:56:
96:d2:50:2d:70:77:52:e3:d9:10:35:8f:6b:3b:1e:
13:e0:db:88:96:e5:04:bd:b6:09:4f:cd:8f:59:8c:
a9:7d:a0:48:7d:d1:38:bc:5f:fb:3a:3a:03:d9:19:
91:b0:31:c4:96:ec:db:e4:64:a1:38:4f:62:43:9e:
29:25:c5:20:9b:e3:5f:00:77:a8:42:48:3e:88:e1:
bd:9b:cb:81:54:7d:8e:73:ae:1a:a7:48:20:16:8d:
5b:d7:58:29:30:c8:6d:aa:53:55:01:89:b0:fa:6d:
5a:c6:78:2b:cb:2b:70:1c:70:82:e7:9f:ba:a7:7b:
84:3d:bd:6e:76:e3:f8:92:9a:82:54:c5:0e:16:c2:
ba:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:36:76:2C:1F:AD:DA:8F:68:E5:E3:12:3E:8E:3B:66:37:90:DD:3E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FD598607C2F11F195B3AE04CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.139.0/24
Signature Algorithm: sha256WithRSAEncryption
62:db:6b:21:c9:48:d3:82:48:1a:05:1b:5f:47:8f:58:68:80:
2b:e4:98:c5:04:4a:e7:ff:cb:d7:66:1b:97:f3:5d:04:8f:7a:
00:be:dc:b9:51:f5:1a:e7:67:a0:cb:4e:da:83:07:4c:0c:4e:
75:8b:f1:d0:fd:65:8c:59:54:5f:21:37:01:42:4f:37:98:d3:
17:2f:48:32:2f:94:17:46:d9:38:c2:be:bd:3e:9b:f8:82:71:
ba:a8:a9:2b:47:ca:6d:e8:f1:e9:d8:e7:f2:01:4b:82:e8:63:
93:e7:0e:8d:ee:fa:ee:f3:fe:22:74:e2:00:19:ae:ba:cf:12:
d0:c2:69:d6:c3:86:19:f4:d4:d9:91:62:78:f4:7f:3e:d0:de:
f4:21:65:4f:b2:d2:c9:26:0c:9b:05:bb:3f:54:49:7d:d6:3f:
4b:82:d2:53:7a:1f:09:76:4e:eb:a9:23:ec:5a:46:e2:43:c5:
31:b9:6c:5b:2d:d1:05:78:10:2d:a8:63:d2:3c:37:50:ce:e6:
c6:40:a0:b6:77:99:ce:24:d7:ca:f5:1f:10:c3:fc:24:61:8c:
78:b9:2b:82:3a:f1:7a:3e:09:0f:00:7d:0c:02:76:5a:c0:db:
77:1e:3b:f7:54:57:16:c7:33:24:b0:4e:00:83:25:b7:37:cd:
50:f3:de:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:55:48 2026 by rpki-client