Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C06A23E44D0011F1B677E0A2CE1D38B0.roa
File: C06A23E44D0011F1B677E0A2CE1D38B0.roa (raw, json)
Hash identifier: Zuu3U5gtHghtYjz7wImkHltsimALJoX7VckUUIUsNYY=
Subject key identifier: 0C:DF:25:D0:FF:A6:AF:50:82:0E:29:E3:58:8E:EE:88:9C:C4:FB:38
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CAEA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C06A23E44D0011F1B677E0A2CE1D38B0.roa
Signing time: Mon 11 May 2026 06:15:05 +0000
ROA not before: Mon 11 May 2026 06:15:00 +0000
ROA not after: Mon 18 May 2026 06:15:00 +0000
asID: 136907
IP address blocks: 154.81.16.0/20 maxlen: 24
154.83.0.0/23 maxlen: 24
154.86.32.0/20 maxlen: 24
154.86.48.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 06:17:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117482 (0x1caea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 11 06:15:00 2026 GMT
Not After : May 18 06:15:00 2026 GMT
Subject: CN=6a0173e9-e933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:8d:af:ca:27:3e:16:12:bc:eb:a3:92:c4:67:
e4:80:cb:02:bd:c9:57:6c:a4:4b:0d:0a:cf:c7:87:
9c:83:51:d2:d1:8d:61:56:9f:15:84:b0:ac:b2:93:
b1:13:9f:e5:f1:4d:b4:c9:4c:d9:5b:c0:b9:47:4e:
04:e2:cf:0b:96:0a:f1:2c:ed:00:fd:08:e7:a5:00:
f5:63:52:ad:90:4f:01:7a:49:b0:9e:10:9d:a0:6d:
73:52:6c:3c:89:ae:f6:11:2c:5a:6b:8f:c0:f3:27:
95:dc:6a:67:a5:10:20:1b:51:7d:6d:69:38:a8:b8:
b3:c5:3e:da:77:68:aa:0c:2a:bf:21:a5:af:df:cb:
14:cb:77:e2:f6:7c:42:b9:b1:52:96:6f:28:11:d3:
f2:ce:c9:05:70:5b:c1:05:de:99:61:ab:4f:3c:80:
98:05:d5:44:39:3e:2f:e7:ad:36:83:bb:04:9d:2e:
46:9d:9a:ee:e7:05:98:0e:af:be:0c:16:86:3c:a0:
ed:42:ad:d7:bb:17:d4:ed:38:ec:e5:8a:bc:92:a6:
e0:26:85:72:5c:cd:f2:f1:3e:4d:f3:e2:42:61:44:
ca:ec:f8:36:9c:a0:8b:95:0d:9c:82:22:8e:d7:eb:
00:93:0f:ca:c4:12:c5:d5:d4:e0:f6:61:63:25:3c:
0d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:DF:25:D0:FF:A6:AF:50:82:0E:29:E3:58:8E:EE:88:9C:C4:FB:38
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C06A23E44D0011F1B677E0A2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.16.0/20
154.83.0.0/23
154.86.32.0/19
Signature Algorithm: sha256WithRSAEncryption
1a:a6:75:64:0e:07:0a:a1:a6:1d:00:2b:0e:25:f1:b9:d8:82:
fd:c5:0c:8e:cd:d4:80:de:68:c1:bc:27:74:0e:9d:ae:38:33:
a3:14:ff:9e:bb:83:a6:ee:62:8c:af:83:6e:bd:01:a8:a0:53:
53:02:9a:ad:13:84:f9:71:f8:39:5f:1b:d1:85:0f:b2:c7:7e:
5d:24:5c:4d:02:4f:a2:4f:2c:ff:57:87:c9:c2:e6:f4:30:ab:
10:77:44:5d:7f:c2:d1:24:03:c1:f9:d0:f7:69:9e:ae:d0:af:
1e:43:19:a8:2d:72:3d:76:78:df:81:a3:6f:66:25:1b:2c:89:
c9:ea:da:ff:ee:1c:25:a3:b2:c2:5a:ed:61:7f:3b:20:45:4f:
e3:1a:1d:b8:96:9a:49:f2:13:c1:61:ca:ac:53:be:d0:c5:46:
04:2a:02:98:a7:1b:2e:1f:8b:8c:2b:2d:14:d4:2c:73:1a:23:
0f:15:9a:3a:27:0f:56:aa:ee:c2:bd:38:bf:8b:e9:a9:22:e1:
94:7b:f2:97:b0:ad:0a:9d:f4:ec:ef:38:9c:b8:68:a7:43:56:
72:28:72:85:a6:ee:b2:13:ad:57:20:f3:fc:20:18:cf:3a:c0:
33:a7:a7:85:b3:66:77:ad:94:8e:60:3a:ef:2f:eb:cc:54:14:
cb:2a:6f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:46:15 2026 by rpki-client