Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6D406587E0611F1B6CBECB0CE1D38B0.roa
File: E6D406587E0611F1B6CBECB0CE1D38B0.roa (raw, json)
Hash identifier: wI9Qjztw6roc0EQ2a68vd2zemgXYMk6waveSpa4fIq4=
Subject key identifier: E5:90:4D:9B:CF:95:FB:3B:CE:0B:C9:3E:6E:36:5C:76:04:7C:D6:DE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D89D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6D406587E0611F1B6CBECB0CE1D38B0.roa
Signing time: Sun 12 Jul 2026 15:32:34 +0000
ROA not before: Sun 12 Jul 2026 15:32:29 +0000
ROA not after: Sat 15 Aug 2026 15:32:29 +0000
asID: 397423
IP address blocks: 154.202.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 08:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120989 (0x1d89d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 12 15:32:29 2026 GMT
Not After : Aug 15 15:32:29 2026 GMT
Subject: CN=6a53b391-3003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8f:29:4b:18:1f:84:7e:f5:70:a0:b7:15:48:
ed:cc:c5:01:c1:df:78:44:84:87:b5:cb:8a:26:88:
f0:0b:a6:c7:ac:f9:ed:24:86:09:6e:80:77:84:83:
fc:d4:df:24:1d:da:c0:37:d8:c8:32:34:99:49:d1:
b2:b4:00:e3:70:06:59:58:05:a3:64:3b:cb:76:f8:
4a:e4:85:78:9b:9b:fb:62:ac:2f:d7:22:a8:6a:91:
97:7d:00:89:8e:bd:53:5c:eb:47:ca:c7:a7:2d:48:
c7:0f:47:5a:24:ed:9d:f4:25:81:1e:ea:bd:b1:d9:
7f:a1:d6:1a:c5:23:ac:f5:bd:da:bb:1a:21:1a:c8:
bc:f9:d3:ab:a3:2a:cb:10:4b:dd:45:f1:99:c1:7a:
b1:dd:3d:a2:e3:34:49:db:20:e2:04:5a:f4:99:9f:
1f:0b:60:19:3a:8c:5f:ab:e4:51:43:e8:b4:6e:63:
4e:65:0d:ed:b3:b9:87:24:61:ed:66:71:53:cd:d5:
22:4b:ce:42:81:09:33:82:db:3c:5d:2e:e4:31:c2:
ef:02:92:f7:a9:23:89:6e:c2:dc:cc:f7:8b:6e:07:
2a:53:9b:92:0f:79:38:0c:13:3f:b2:79:d7:ba:b1:
23:38:50:8d:8d:7f:4b:45:68:1b:6b:71:99:3e:2e:
30:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:90:4D:9B:CF:95:FB:3B:CE:0B:C9:3E:6E:36:5C:76:04:7C:D6:DE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6D406587E0611F1B6CBECB0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.3.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:07:be:89:61:70:18:ef:90:9a:df:8c:a5:84:d2:4c:36:5e:
c3:5d:34:c1:a2:fd:38:af:e6:33:68:7f:fc:dc:43:d9:fe:63:
dc:87:06:28:de:2d:27:03:bf:8a:54:8f:cb:cf:8c:f6:44:74:
b0:23:be:6e:00:f6:90:7f:7d:59:42:03:81:6d:84:4b:7a:0e:
9c:f3:df:c3:de:63:75:6c:59:4e:93:6c:c1:6c:0b:1a:41:f4:
e5:ae:52:0b:cf:95:ab:d6:a5:87:27:c8:3e:40:5f:81:62:ed:
52:ad:97:82:cc:a4:09:2b:1f:59:1b:ea:f3:6f:68:1c:f7:d1:
dd:fb:69:89:8d:5c:b4:6f:e7:40:72:82:0c:40:28:a3:d5:9a:
1d:30:60:f9:22:d3:42:db:54:b3:b2:05:51:d1:ce:74:70:08:
06:6b:68:ef:22:18:45:ac:98:a1:6b:59:9e:3b:5c:5d:6a:1f:
f5:e5:90:1e:f8:4c:34:54:b2:86:3c:62:c4:d3:cd:81:32:c5:
61:75:93:7b:1d:c1:f3:ad:f7:5b:f7:d5:1d:96:84:89:96:3e:
57:23:13:e2:36:e1:5e:aa:64:a3:ef:ba:b7:32:78:b3:b5:57:
2f:9c:03:2a:9a:4b:13:83:8e:d7:56:07:b8:04:35:c2:a2:53:
73:a4:fe:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:01:27 2026 by rpki-client