Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EDE06B0672E611F193711BD5CE1D38B0.roa
File: EDE06B0672E611F193711BD5CE1D38B0.roa (raw, json)
Hash identifier: 9Z6qSiedNWP40/Dr85U5+6AkEno0ADXwnEHJH6pSblI=
Subject key identifier: 25:25:B9:91:D4:EE:1A:40:56:3D:7D:81:94:59:A4:D4:E4:4A:FB:51
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D5C1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EDE06B0672E611F193711BD5CE1D38B0.roa
Signing time: Sun 28 Jun 2026 11:45:59 +0000
ROA not before: Sun 28 Jun 2026 11:45:54 +0000
ROA not after: Thu 30 Jul 2026 11:45:54 +0000
asID: 32043
IP address blocks: 154.95.6.0/23 maxlen: 24
154.95.8.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120257 (0x1d5c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 28 11:45:54 2026 GMT
Not After : Jul 30 11:45:54 2026 GMT
Subject: CN=6a410977-deea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c4:ba:b0:d0:a9:26:19:92:d2:97:69:5e:24:
ba:07:0c:26:1b:85:2e:25:95:23:49:98:13:91:66:
f2:8b:36:2b:f7:d5:57:01:1e:d2:2e:4f:52:59:c1:
c8:88:f9:fd:42:fe:88:06:e0:97:d3:d3:75:45:47:
d0:d0:13:92:5b:4b:32:dc:97:6f:1d:52:67:a4:38:
89:c7:af:b2:6a:f8:f5:35:8d:ce:10:e3:4e:1b:c7:
c3:0d:09:b2:3b:e9:21:ba:27:c7:2c:73:0a:81:26:
39:24:04:ec:bc:e8:95:75:71:90:37:08:a2:81:38:
0c:d3:1f:12:68:f6:4e:f5:25:5c:dd:2d:d9:59:13:
41:f0:ea:14:93:b6:0f:21:d1:a1:44:03:f7:d3:8e:
fd:b4:34:43:cd:6f:cc:4c:aa:da:00:97:74:74:22:
0c:40:91:40:de:31:07:b9:f6:01:c6:09:08:23:43:
b3:ef:cf:c3:b2:1f:30:8e:9e:6d:15:88:78:a6:e5:
c7:44:0e:ae:f7:19:1d:3d:60:60:36:db:25:3f:65:
74:58:6e:12:3e:a7:68:39:33:4e:19:4f:c2:9c:13:
17:80:ef:de:8e:98:ff:50:ef:ee:d2:76:b8:f6:3d:
cf:d3:e2:31:1c:6c:9d:36:52:82:96:7b:27:61:a1:
51:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:25:B9:91:D4:EE:1A:40:56:3D:7D:81:94:59:A4:D4:E4:4A:FB:51
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/EDE06B0672E611F193711BD5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.6.0-154.95.9.255
Signature Algorithm: sha256WithRSAEncryption
a1:c9:e2:bb:77:cc:66:b7:8a:e6:aa:4f:bf:5c:27:c8:cd:56:
b5:1a:13:d9:59:be:08:98:54:2c:a3:a9:2e:a2:fe:68:cf:56:
fc:b4:ee:0e:93:f6:bd:db:e3:db:a4:55:c9:db:5a:2e:b6:5c:
be:3f:6f:eb:eb:c4:18:e0:ce:5c:ab:00:49:61:a4:15:84:dd:
5d:c4:74:c6:f8:55:62:0d:68:c4:e0:3c:fd:a6:b5:f1:10:8e:
68:28:cc:37:c6:de:21:fb:2a:1f:7b:5a:96:61:00:08:d9:68:
73:04:e8:5e:5f:d5:54:d7:c3:9b:8e:77:a8:e0:b6:00:c6:b1:
64:bd:81:dc:1d:05:4a:bf:1c:f0:e9:07:86:f9:c7:f4:04:c4:
84:54:fb:ef:8b:7f:fc:41:d1:aa:1b:5e:9d:44:cb:71:7e:4e:
ac:38:37:2f:00:25:96:47:a3:dc:d3:e0:1c:cf:85:0e:2b:a7:
c4:15:bf:a5:d3:2f:f5:67:65:1a:b1:86:18:7b:ce:98:1d:68:
b3:d2:f2:42:f3:a3:72:8c:40:f3:c5:69:43:4f:58:9b:86:95:
fb:ca:f6:8e:14:ce:df:4d:a8:ca:fb:da:37:dd:b3:61:c2:fa:
f9:8e:01:8d:83:90:6d:4c:b1:47:9c:a3:09:8b:0f:02:b6:97:
a7:71:5f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:12:29 2026 by rpki-client