Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0558DA76791711F1BEF54BF2CE1D38B0.roa
File: 0558DA76791711F1BEF54BF2CE1D38B0.roa (raw, json)
Hash identifier: /UwCQrFHKPu80QKbjxGC7bNxHjR7MhcTVYMp2G8J7eU=
Subject key identifier: 28:E6:E0:C1:A3:10:73:CC:E1:C4:A5:B0:C2:2C:DC:AB:D7:AF:35:B1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D736
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0558DA76791711F1BEF54BF2CE1D38B0.roa
Signing time: Mon 06 Jul 2026 08:45:21 +0000
ROA not before: Mon 06 Jul 2026 08:45:16 +0000
ROA not after: Fri 14 Aug 2026 08:45:16 +0000
asID: 272854
IP address blocks: 154.194.13.0/24 maxlen: 24
154.194.14.0/24 maxlen: 24
154.194.54.0/24 maxlen: 24
154.197.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120630 (0x1d736)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 6 08:45:16 2026 GMT
Not After : Aug 14 08:45:16 2026 GMT
Subject: CN=6a4b6b21-fed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8b:9b:ab:3a:94:2c:a2:07:d3:ae:c1:a0:37:
a5:22:55:14:7d:b2:d0:56:9b:f4:b7:85:94:38:44:
2d:21:6f:e5:1e:e9:3c:b5:4d:76:80:9a:18:10:05:
ad:9b:ab:42:df:04:dd:62:9d:18:4d:ee:13:32:b4:
e5:f3:11:6f:ec:be:9b:a6:f3:05:27:af:ab:9e:05:
ff:3c:91:02:8d:c0:55:4b:c7:8f:12:bb:f7:67:60:
c0:61:18:93:32:03:f3:98:f6:56:a5:75:36:d5:ab:
7f:f8:9b:ad:14:01:ab:21:a3:dd:08:07:a9:c7:9b:
0f:ae:46:59:9c:e0:10:87:2c:7f:7f:02:9d:63:64:
82:97:b3:dd:4a:ab:0c:9a:83:bc:7f:a3:6f:be:13:
26:e1:4a:dd:2b:8e:83:f7:5c:f8:8a:53:4f:35:23:
2f:47:88:f4:79:ab:39:ac:d4:42:6e:a7:af:8d:c3:
fd:17:b4:10:e8:2e:5e:f7:cb:14:be:7f:94:70:c6:
79:42:e6:ff:3e:ef:d8:18:38:58:31:bd:52:9b:ae:
4a:af:b2:be:bb:66:e4:7c:ab:3d:c6:7d:b5:cf:27:
b6:12:57:12:fa:11:e4:4d:df:ad:c1:7f:52:dd:c5:
ac:08:40:4f:05:03:9a:05:0f:29:74:30:f6:71:1e:
92:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:E6:E0:C1:A3:10:73:CC:E1:C4:A5:B0:C2:2C:DC:AB:D7:AF:35:B1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0558DA76791711F1BEF54BF2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.13.0-154.194.14.255
154.194.54.0/24
154.197.1.0/24
Signature Algorithm: sha256WithRSAEncryption
81:63:45:ba:58:87:31:a1:fd:d8:14:65:3d:eb:fd:5e:cf:c9:
f0:a4:c1:59:63:c0:c6:70:7c:df:39:f3:c8:99:77:12:42:25:
5a:9d:4b:35:a6:76:b4:21:ea:b8:df:16:6e:81:19:e6:9f:06:
00:5f:27:ff:32:12:6c:87:cb:79:44:36:f8:5f:1c:48:e9:f6:
d3:cf:6f:4d:2f:61:56:3f:2f:76:76:b6:72:48:24:bc:dd:6a:
d2:db:61:55:ab:df:8e:7a:82:bd:ec:7c:01:af:2d:e9:84:00:
ee:04:18:1d:2a:00:94:60:6c:ac:af:32:18:6c:47:c9:98:1d:
b5:58:1b:34:14:36:e3:0b:78:6f:25:b9:a1:e2:75:3c:76:7d:
10:e4:60:b9:59:e3:ee:fd:07:d5:a3:1c:3c:5d:ff:6d:5f:96:
22:63:61:16:bb:b0:36:ee:3a:0f:aa:6e:ed:8f:41:6a:e3:de:
e7:9e:ae:03:73:8e:cd:a9:9f:ba:37:4f:df:32:04:86:1b:6c:
1a:34:c5:fc:cb:f3:e5:2e:72:5b:71:7d:f3:fc:1f:c3:0c:09:
cb:cf:5e:2d:37:df:34:fb:6e:f0:a0:3f:c5:29:af:37:fd:b5:
e6:e3:55:81:74:e5:a2:46:34:c7:d6:cf:28:ec:70:68:40:d1:
b6:15:d3:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:06:02 2026 by rpki-client