Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B9B443676DE11F1AD5B19F2CE1D38B0.roa
File: 0B9B443676DE11F1AD5B19F2CE1D38B0.roa (raw, json)
Hash identifier: FO/1twK9cqNFyt7g+0QPg8gbtFGuWTFj5SuLj/kOxpg=
Subject key identifier: 20:46:22:60:63:99:04:74:31:D9:02:AB:2E:7E:DD:99:AA:C4:27:36
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D6B6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B9B443676DE11F1AD5B19F2CE1D38B0.roa
Signing time: Fri 03 Jul 2026 12:52:28 +0000
ROA not before: Fri 03 Jul 2026 12:52:23 +0000
ROA not after: Sun 02 Aug 2026 12:52:23 +0000
asID: 197646
IP address blocks: 154.83.214.0/24 maxlen: 24
154.83.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120502 (0x1d6b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 3 12:52:23 2026 GMT
Not After : Aug 2 12:52:23 2026 GMT
Subject: CN=6a47b08c-3564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7e:f5:3b:5d:1b:bc:ce:0b:80:03:32:3d:d3:
fc:aa:77:94:42:59:dd:3c:a8:9f:a6:29:14:f8:67:
a8:0e:45:1a:c6:d0:ff:6a:2d:ec:34:07:f5:b1:7d:
fe:3f:b4:33:66:c8:e8:62:b7:1d:69:ab:8f:19:9f:
5c:f4:e6:13:8e:3c:ed:7b:b9:8e:c7:7a:0f:0c:25:
f1:7d:d1:08:cb:5f:40:29:82:4d:1b:ce:b3:59:b3:
01:6e:62:61:03:95:b0:9e:65:d0:92:3b:7b:84:c3:
a2:27:ad:6f:db:ce:d8:c3:53:2a:0b:dc:1d:a1:e8:
b6:bb:4e:f5:d9:31:b3:03:bc:d5:26:73:34:2b:de:
c7:46:c8:63:58:83:9a:fe:89:b5:13:61:d5:4c:a9:
a2:07:f7:66:83:89:3d:66:a4:47:91:00:60:c5:dd:
e4:fa:63:24:1c:33:47:a6:b6:70:4e:cf:30:81:8e:
7b:62:55:05:00:f7:fd:d9:b8:9f:f1:57:29:9a:c2:
38:2c:93:7a:4b:f3:d7:6f:32:63:9f:82:97:92:61:
e0:c8:e0:0f:c1:5b:71:0a:3b:ef:4e:cf:bb:a1:d6:
9c:5e:56:d5:16:f3:b6:c0:07:40:2e:e4:af:c3:b6:
14:c2:01:56:bb:48:c0:a8:3a:48:48:1a:55:ee:6d:
0a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:46:22:60:63:99:04:74:31:D9:02:AB:2E:7E:DD:99:AA:C4:27:36
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B9B443676DE11F1AD5B19F2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.214.0/23
Signature Algorithm: sha256WithRSAEncryption
86:20:22:5d:0a:50:18:2e:00:bc:59:51:89:6b:3b:5e:74:e6:
9d:7c:ec:3c:20:b9:58:3f:55:59:dd:f4:a7:7a:2a:cf:3a:04:
22:0c:74:a7:56:b2:d4:dc:7f:55:28:3f:86:16:8f:91:59:d2:
1e:f2:a5:6b:fa:87:87:34:45:7b:3e:46:04:ac:be:44:63:8d:
96:32:8c:a1:a7:a4:0b:ea:1b:8d:93:bf:ba:a4:90:b1:23:de:
f4:68:67:ed:63:21:b0:d4:3f:ff:38:99:c2:53:70:3b:8d:78:
30:63:d9:d4:3b:59:1c:fc:fc:b6:72:d0:4e:a9:89:26:06:f8:
83:ee:21:c9:f3:35:08:64:37:07:d9:8d:51:20:13:67:7b:7b:
24:d8:21:e3:ec:ba:62:a0:a8:0b:b0:e3:0d:2e:7f:92:3e:9e:
b1:2f:ec:be:b0:a8:a2:f5:88:7f:ca:a5:54:8e:99:61:66:ac:
cc:48:53:1c:9c:35:13:17:6c:73:b8:f9:a0:b3:14:b4:5b:03:
61:dd:fb:b8:d8:dc:9b:a4:2c:d9:c0:f4:2f:35:9e:67:7a:e3:
44:e5:89:d2:9b:80:a1:96:83:67:0c:c5:26:e1:30:15:1f:3e:
37:f8:a9:af:0e:d9:a7:5c:c8:d8:a4:98:a1:2c:ee:13:ed:67:
36:d1:fa:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:53:10 2026 by rpki-client