Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D96FF06785911F191A108F7CE1D38B0.roa
File: 0D96FF06785911F191A108F7CE1D38B0.roa (raw, json)
Hash identifier: 1bS5McBbG58qLeYYb/BCQ2XIhJCHvRLpWhKy6dgO6DY=
Subject key identifier: B1:D5:6A:71:E3:D4:09:2B:2D:15:66:CF:F2:48:DA:12:08:B2:FE:63
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D714
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D96FF06785911F191A108F7CE1D38B0.roa
Signing time: Sun 05 Jul 2026 10:05:30 +0000
ROA not before: Sun 05 Jul 2026 10:05:26 +0000
ROA not after: Sun 16 Aug 2026 10:05:26 +0000
asID: 401701
IP address blocks: 154.222.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120596 (0x1d714)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 5 10:05:26 2026 GMT
Not After : Aug 16 10:05:26 2026 GMT
Subject: CN=6a4a2c6a-abdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:15:9a:33:c3:6a:1d:89:59:06:df:47:f8:23:
b5:9a:9f:39:eb:e5:9b:fe:b5:a0:9f:6b:9c:52:27:
bd:d5:0a:40:fd:34:f5:dc:2f:87:5a:80:50:2d:38:
7c:8f:f7:79:a1:4f:1f:12:18:d8:8a:2a:fa:4e:06:
a9:aa:72:bf:83:8c:34:29:54:4d:b4:d0:70:ec:c1:
5a:b2:da:aa:ea:c5:dc:f4:b8:14:d4:52:81:61:10:
48:ec:e5:f7:ab:d7:3e:a2:46:8c:4b:d9:9f:ee:9c:
02:6a:f0:78:1a:d4:95:cb:70:0f:7a:64:61:3f:4a:
3e:03:71:ef:f4:e4:ff:c2:98:31:b1:b2:24:b8:13:
8d:30:de:a2:65:40:ff:f9:e0:33:f8:39:70:09:95:
5f:04:1c:2a:95:d1:ab:f7:57:f8:5c:64:b8:a2:1c:
da:17:87:bb:97:ca:b6:4c:6e:ad:1d:4a:ef:52:98:
17:a9:56:6f:84:ed:1a:b6:1f:a7:89:64:72:bf:97:
91:45:88:7b:2e:3b:9c:64:33:98:62:05:35:4c:2c:
15:ec:5d:fb:6c:2a:13:e3:1c:eb:95:82:ce:8d:53:
de:ec:c0:e8:54:1b:cb:19:85:5f:48:87:c1:0c:97:
74:a2:62:51:5d:eb:b9:06:57:0c:15:b2:53:89:3b:
a2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D5:6A:71:E3:D4:09:2B:2D:15:66:CF:F2:48:DA:12:08:B2:FE:63
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D96FF06785911F191A108F7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.16.0/20
Signature Algorithm: sha256WithRSAEncryption
5d:7a:ac:9e:84:5e:7a:39:d1:80:55:e6:d2:9e:d1:06:46:e9:
f9:31:e7:bd:c1:d8:3d:a6:3d:60:d7:8d:0d:c9:a7:61:94:7d:
80:57:54:23:9c:8a:91:e5:5a:05:20:f0:1a:b0:03:59:04:01:
57:fd:24:8c:1c:98:fd:6c:a0:71:40:04:cb:e2:a3:15:b6:e3:
b1:a0:48:8f:c9:56:df:31:76:3b:11:b0:24:00:bf:ac:28:a8:
1d:5c:51:93:de:cc:86:40:ab:30:fa:f9:b4:33:43:e4:97:71:
10:b2:ac:5d:7b:f3:92:6f:5c:e5:e9:d7:9d:77:bc:aa:c5:5d:
b4:5d:26:93:5a:da:f6:51:34:69:26:0f:5a:05:c5:cb:27:e3:
ec:b0:86:f6:88:c8:2a:3e:76:19:f2:6a:95:d8:a1:99:7d:de:
cc:59:c3:34:83:c9:03:ea:b6:dc:c2:bc:66:e8:a9:3c:07:47:
a0:77:c0:39:0a:fa:59:f6:f5:f4:c0:22:fd:90:07:9b:51:1f:
21:8a:5e:ea:51:ab:da:59:aa:35:7f:87:13:35:f9:54:37:52:
a3:ce:b3:02:9d:af:e8:56:77:32:ca:94:2e:72:d5:8a:57:7c:
c9:83:ff:4b:7d:a0:66:0d:94:18:bf:25:38:72:fc:01:7c:22:
b3:3e:9c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:38:18 2026 by rpki-client