Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6FE3654717511F1A0D8250CCF1D38B0.roa
File: F6FE3654717511F1A0D8250CCF1D38B0.roa (raw, json)
Hash identifier: jZZpJ/sAYHP6hcvheVxWvD5ceQEYKmai4UxQRQoO93M=
Subject key identifier: 33:04:DD:9A:3D:5A:E0:5F:7B:2B:EA:77:72:BF:AC:62:1B:14:2F:C5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D575
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6FE3654717511F1A0D8250CCF1D38B0.roa
Signing time: Fri 26 Jun 2026 15:44:50 +0000
ROA not before: Fri 26 Jun 2026 15:44:45 +0000
ROA not after: Sat 01 Aug 2026 15:44:45 +0000
asID: 17497
IP address blocks: 154.202.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120181 (0x1d575)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 26 15:44:45 2026 GMT
Not After : Aug 1 15:44:45 2026 GMT
Subject: CN=6a3e9e72-5fe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:a4:ed:0a:e7:22:a6:45:62:e9:5b:b6:3a:1f:
1c:f2:a0:c2:cb:9a:6a:f8:37:03:d2:1f:3e:f1:47:
c5:c2:98:ed:f7:e7:e8:f2:4e:02:5c:09:7b:26:7d:
42:9d:1b:9c:04:ee:e6:b3:57:86:75:ff:a2:df:12:
05:ac:00:d0:75:fa:54:17:fc:3f:46:b2:52:62:eb:
24:eb:f4:5e:10:92:b4:84:8f:02:c9:c3:44:ea:ab:
82:ad:83:86:a4:93:ea:b9:5c:27:e0:5b:cd:17:b1:
36:03:f7:df:4b:d3:e2:be:42:e7:85:6c:89:16:51:
81:ff:2e:44:d3:1c:50:9a:2b:1a:9c:81:7c:b6:00:
69:8f:04:e2:9f:92:94:5c:e1:44:6c:50:49:3c:49:
d3:75:3b:2e:09:c8:91:59:b3:b8:7f:fd:fa:06:b4:
70:a3:4e:af:9f:c7:8e:ee:d1:de:26:69:1e:e8:28:
7a:19:1b:51:d3:d5:cb:ef:97:95:d3:cf:77:36:d5:
f5:5c:80:d0:41:27:0d:0d:45:b6:59:80:40:c1:47:
72:cc:78:b0:ed:8e:2f:cd:4a:db:fd:c5:9b:10:ad:
d7:ac:ae:09:09:33:b1:e3:77:6f:f1:0d:13:cb:1f:
bb:0d:ac:10:cd:63:08:7a:0f:39:3c:3a:4d:ad:57:
91:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:04:DD:9A:3D:5A:E0:5F:7B:2B:EA:77:72:BF:AC:62:1B:14:2F:C5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6FE3654717511F1A0D8250CCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.101.0/24
Signature Algorithm: sha256WithRSAEncryption
39:ef:dc:68:54:95:87:00:ad:9e:3f:fa:53:1d:48:65:98:29:
c3:a4:54:a1:8b:17:77:f1:de:70:2b:39:73:a3:9c:d6:6b:09:
bc:0e:65:64:f4:b0:2f:ab:d4:c2:53:c1:41:cb:72:05:12:72:
7c:6d:af:63:e1:b8:12:27:ce:cf:c9:d8:f5:c7:28:3d:94:6a:
d4:e6:dd:ba:ec:0a:e4:fb:fb:99:6e:b8:37:ac:6f:93:d0:f4:
b4:e3:88:07:21:ca:5c:6c:da:04:24:f2:ab:73:fb:34:3d:d8:
cb:ad:a9:6f:b1:f1:eb:1c:dc:41:47:79:9a:ea:87:74:47:6d:
6e:28:72:72:b4:5b:ac:7c:51:61:ae:60:35:10:74:25:98:4e:
25:50:d2:d9:e5:a9:10:20:cc:ba:a7:0c:3b:0f:5c:27:95:4e:
27:2b:9d:9a:a3:f7:50:bc:32:35:2d:5a:09:ac:5d:bb:24:4a:
6a:80:3a:89:01:3e:eb:75:e6:27:a1:f2:b9:42:e6:70:53:20:
02:28:bf:ce:a8:90:41:94:89:19:03:af:5c:a2:dd:ca:02:fb:
38:1e:a4:a5:72:ce:96:80:c2:1c:59:f9:6a:ff:15:52:f3:a4:
e3:18:62:85:c5:b4:75:55:e7:03:4f:f0:d4:4d:08:0e:ac:14:
e2:6d:c1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:46:21 2026 by rpki-client