Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E054C682720811F1B6790012CF1D38B0.roa
File: E054C682720811F1B6790012CF1D38B0.roa (raw, json)
Hash identifier: Tx9EY8MO3Kbqpd8reiQUwFF1cNHTjke4uxfZLB13Fkc=
Subject key identifier: B4:DF:9F:F0:67:4D:6A:82:79:23:BC:F5:57:34:9F:CA:73:86:3F:3C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D58E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E054C682720811F1B6790012CF1D38B0.roa
Signing time: Sat 27 Jun 2026 09:16:28 +0000
ROA not before: Sat 27 Jun 2026 09:16:23 +0000
ROA not after: Sun 02 Aug 2026 09:16:23 +0000
asID: 209242
IP address blocks: 154.206.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 08:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120206 (0x1d58e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 27 09:16:23 2026 GMT
Not After : Aug 2 09:16:23 2026 GMT
Subject: CN=6a3f94ec-85f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:78:60:14:87:85:b5:df:2d:80:58:14:27:0e:
d1:7c:a4:60:df:11:f0:f8:b6:20:f5:72:af:06:55:
64:f0:47:b0:fe:bf:08:77:fd:06:c8:3f:0c:e7:36:
d4:1e:c3:31:0c:86:18:29:46:9f:75:87:39:d8:a2:
21:c3:c0:9d:9a:9b:22:db:41:d9:08:4b:8a:c7:0f:
dc:fa:a9:f7:5c:08:28:25:33:51:a4:ae:94:d0:83:
c4:68:36:14:43:33:8c:05:e6:0b:f5:99:04:d8:01:
bd:83:e5:a6:32:ea:c8:b5:ea:04:53:d4:58:4a:96:
e9:24:53:a1:fb:3b:91:70:9d:88:94:24:84:eb:e6:
77:8d:5e:72:ed:2f:2b:ac:b1:ce:1f:1c:48:48:24:
d3:3c:a5:26:b2:1d:a3:b9:01:42:99:c2:dc:b8:60:
79:5f:29:b9:20:0a:ed:5b:48:0f:61:7a:85:c1:fa:
db:69:71:60:71:79:b0:fb:5f:2c:41:5f:4a:f6:36:
2e:27:21:79:60:a2:78:ee:3f:12:88:aa:e1:ac:b2:
fc:14:95:e0:d7:74:23:77:57:69:b8:28:37:3c:47:
e8:7c:bf:85:ba:ac:5a:5d:63:58:28:11:58:7d:2b:
64:70:05:a6:54:55:61:41:e1:de:77:85:7f:59:8e:
9d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:DF:9F:F0:67:4D:6A:82:79:23:BC:F5:57:34:9F:CA:73:86:3F:3C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E054C682720811F1B6790012CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.12.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:4b:ac:a7:ed:07:c9:42:3d:6f:e6:a1:2f:fe:e2:a6:1d:71:
7f:a0:d1:93:5c:76:62:b2:a7:b2:dd:cf:56:23:5d:53:13:b6:
75:ff:82:c5:9b:93:8c:96:23:2f:93:bf:b0:9d:ee:10:29:fd:
1f:7b:e2:08:1c:58:17:ed:b0:38:f2:b1:a2:da:2e:30:00:5d:
60:37:77:cf:14:42:41:0d:3a:52:80:f2:e4:06:51:11:6f:46:
40:70:94:26:8c:0b:a3:8f:b9:45:ac:89:47:2b:8f:63:e1:43:
ff:6e:f8:e5:31:88:b7:36:17:27:c4:ad:9a:26:87:ed:cf:98:
f8:d9:89:9e:59:bb:22:eb:ab:dc:fb:8c:48:a7:41:d4:8f:a6:
0b:7d:e8:30:2a:4a:14:04:a5:f1:5b:6a:3b:40:23:f0:53:ad:
77:a7:7c:41:40:8e:a2:83:69:18:d0:33:3b:e3:b4:33:de:fd:
f5:80:52:d3:17:a2:1f:67:b2:a1:2e:ae:98:c7:4a:e2:2e:45:
5e:98:ec:51:0b:3a:ff:9d:9a:84:a6:fe:fc:92:18:6b:37:d6:
c2:45:6a:e9:8b:5c:f1:10:5a:45:8c:d3:32:64:bf:04:7e:bf:
f1:37:16:4a:fd:af:1c:ed:04:8d:3c:ca:24:37:55:e9:69:33:
9d:06:a9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:22:59 2026 by rpki-client