Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FED21A6866111F19A65BDDFCE1D38B0.roa
File: 6FED21A6866111F19A65BDDFCE1D38B0.roa (raw, json)
Hash identifier: 8EXE4VZ8YGun0EKHgWALlJvrYjw1oX4p9too5Ftjt6s=
Subject key identifier: 74:50:B3:72:6D:36:76:B8:10:16:02:7F:B0:B0:6D:1D:3F:08:03:67
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DAFD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FED21A6866111F19A65BDDFCE1D38B0.roa
Signing time: Thu 23 Jul 2026 06:40:48 +0000
ROA not before: Thu 23 Jul 2026 06:40:43 +0000
ROA not after: Sat 22 May 2027 06:40:43 +0000
asID: 150293
IP address blocks: 154.210.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121597 (0x1dafd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 23 06:40:43 2026 GMT
Not After : May 22 06:40:43 2027 GMT
Subject: CN=6a61b76f-800e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1b:46:18:be:80:ad:3c:23:ec:74:cf:0a:04:
5a:13:86:3e:83:66:2a:c6:fd:97:e0:08:b8:2c:49:
2f:2c:5b:8f:ad:ff:7f:30:1d:19:e7:79:18:19:ab:
4e:f3:46:31:63:db:33:94:0c:d7:24:5a:79:f6:b6:
57:ce:46:14:d2:dd:6c:5a:3b:27:fa:49:83:72:c6:
65:1b:be:3b:34:20:a3:2f:f8:b3:51:a2:35:38:ce:
e3:4b:33:a9:6e:c0:ab:6e:2a:94:e0:cf:4c:8f:8c:
f0:ad:7a:13:f6:dd:7b:dc:e8:3c:a6:a6:03:2d:90:
2e:44:4c:1f:d4:0b:a3:9b:56:33:65:f3:73:c2:87:
05:4d:74:d6:df:59:cf:9a:1d:e1:d2:39:34:29:a0:
26:7b:5f:18:6d:b7:ab:ed:5c:21:67:15:f6:4d:0d:
e8:10:66:1a:0d:f4:9b:d1:94:29:2f:24:5e:3e:72:
b3:bd:91:63:97:21:7f:22:5a:02:cd:b8:d3:e1:b1:
ed:0c:52:ee:5d:b7:e0:8f:dd:a9:ff:93:a1:54:7c:
f7:d6:50:02:88:56:a5:3b:af:81:4f:a0:8d:48:98:
03:27:e5:77:e6:a2:d0:53:06:be:12:27:af:a1:0e:
97:60:bc:20:a9:4a:bc:37:f2:86:d0:94:06:50:49:
6f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:50:B3:72:6D:36:76:B8:10:16:02:7F:B0:B0:6D:1D:3F:08:03:67
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6FED21A6866111F19A65BDDFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.1.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:1d:50:ac:ef:f1:52:6a:f1:70:69:8b:1a:43:9d:ef:41:e5:
83:e7:01:74:17:4e:6e:61:1d:f6:ba:0a:98:94:41:2f:14:89:
a5:c4:03:6a:1d:dc:db:08:af:50:ec:e9:1d:e4:6e:f5:7a:ff:
e1:34:a4:94:31:f5:6c:ca:63:ed:29:84:93:ed:a8:d0:96:86:
cd:e6:cb:48:8d:1d:2f:13:99:0a:69:a4:ac:e2:1a:77:57:fb:
a3:86:86:16:df:28:cf:b3:93:41:f0:2c:64:33:cd:66:03:ae:
f5:04:33:57:71:5d:ca:bd:a7:88:e6:d5:a1:75:48:38:ad:56:
9a:d6:43:81:db:ab:cd:03:52:91:0e:da:56:fc:9f:f3:48:c3:
25:50:d3:40:ef:c0:87:33:e4:d4:13:9b:67:07:44:bd:cb:95:
7c:61:fb:b4:95:26:52:92:23:09:91:7f:1a:73:bb:fc:2a:fd:
c7:ed:34:98:28:20:73:46:3a:39:73:7a:f6:84:8d:7e:ed:9f:
7c:2e:9e:bb:89:cd:66:e3:26:06:2a:e6:7a:2a:a2:6c:6d:c6:
f1:89:1b:bc:90:b8:0c:e9:2d:37:70:e6:ca:fe:a1:35:c1:2c:
27:d0:78:b9:9a:31:7f:2d:22:c6:0e:3c:b6:5f:41:31:89:eb:
6e:d8:75:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:09:42 2026 by rpki-client