Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8775FD24C6911F1A2B3CD05CF1D38B0.roa
File: F8775FD24C6911F1A2B3CD05CF1D38B0.roa (raw, json)
Hash identifier: 3HoWhl2IVgB2JQ8m9LJY4XurEDmtUBcrANHF+dApiRw=
Subject key identifier: 35:D6:22:C8:55:F5:93:68:E0:1F:69:02:7E:BB:BA:C0:38:3A:79:6B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CABF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8775FD24C6911F1A2B3CD05CF1D38B0.roa
Signing time: Sun 10 May 2026 12:15:45 +0000
ROA not before: Sun 10 May 2026 12:15:40 +0000
ROA not after: Tue 16 Jun 2026 12:15:40 +0000
asID: 151419
IP address blocks: 154.88.66.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 14 May 2026 12:11:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117439 (0x1cabf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 10 12:15:40 2026 GMT
Not After : Jun 16 12:15:40 2026 GMT
Subject: CN=6a0076f1-a9e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:01:f7:af:7f:c3:43:08:4a:0d:11:ce:86:26:
1e:41:8e:d5:8e:43:22:19:5b:eb:eb:6c:f7:73:ff:
e1:fc:13:7b:8f:e1:0b:ae:88:f6:e6:29:55:15:45:
86:1f:31:07:8e:d6:f0:43:05:2a:39:70:11:a1:90:
97:5a:7e:b5:a7:f7:ba:a6:73:bd:f0:29:03:51:13:
fe:f7:c4:88:21:8b:6a:9b:12:62:af:57:44:21:c2:
76:b7:4c:8c:7e:82:fa:fe:e4:b5:81:25:c7:4b:d7:
57:7a:c2:20:2b:cb:a2:c7:a4:e2:36:15:0f:86:81:
18:3a:93:91:2d:fb:4c:1b:ff:0a:5e:8b:ea:d8:0f:
3a:21:30:b3:33:23:21:8e:8e:73:5e:eb:7c:52:08:
22:5f:11:2f:79:cb:ed:f2:a8:5d:9a:6e:18:b3:2b:
68:5e:24:b1:7e:3c:67:aa:1d:f7:56:37:0d:ab:b3:
45:f7:b3:9c:0a:ef:ed:4c:f7:96:25:a0:4e:2e:e3:
b5:73:e2:31:25:77:c0:ef:4a:d5:c9:6c:77:92:26:
44:48:e1:9d:4c:3a:91:54:b9:49:0e:be:a4:12:f8:
c2:2b:45:88:fb:0d:3d:d3:53:84:25:15:15:04:13:
db:83:24:11:65:e2:9e:4a:79:0c:3c:34:97:53:0e:
f4:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:D6:22:C8:55:F5:93:68:E0:1F:69:02:7E:BB:BA:C0:38:3A:79:6B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8775FD24C6911F1A2B3CD05CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.66.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:de:c7:8f:99:63:5e:0c:99:8c:e2:a7:21:fc:d0:70:35:7d:
e9:43:ff:30:10:6e:38:8a:88:f0:d8:4c:c2:b7:72:2a:24:bc:
9e:30:33:b9:a3:0a:57:9d:07:bb:cd:1c:e4:6e:9a:55:c0:de:
06:07:73:89:bd:15:c4:f8:f2:0b:a0:24:4b:14:1e:91:30:97:
8e:59:9f:aa:c6:cf:ce:f9:89:0d:46:fc:f2:e3:a4:f0:b5:9f:
b3:34:b5:01:eb:1d:f7:b1:78:95:ba:b5:1d:25:1a:05:27:a9:
5f:33:f3:15:5d:b1:63:97:da:94:19:80:b1:ed:74:69:cf:55:
9c:17:74:ad:79:49:bb:9b:72:89:e7:50:af:d5:02:c6:46:07:
cf:5b:9b:e6:fc:63:99:1f:b6:6e:af:e7:64:83:f1:9f:5d:92:
97:39:ce:1b:da:9d:de:2a:e8:b2:d5:c5:4d:37:df:1a:84:b2:
c5:8b:75:e1:48:58:8b:19:e7:49:ff:8e:18:c5:71:8b:17:bf:
4c:8b:48:04:9d:50:76:39:6c:27:f7:fe:84:86:e8:65:30:a3:
20:44:e6:a8:47:af:91:38:8b:cd:04:98:db:5b:b4:53:63:2e:
cb:05:6d:16:ca:63:d1:01:bc:91:20:46:95:80:9c:fc:dc:25:
f6:7a:cf:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:53:07 2026 by rpki-client