Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/101189A475E311F1BD5A6802CF1D38B0.roa
File: 101189A475E311F1BD5A6802CF1D38B0.roa (raw, json)
Hash identifier: pmK3eRHpJjRbaOGJqpL3D58Pw0vwm6X1N4a2AXlwBBo=
Subject key identifier: 96:E1:59:57:38:C6:92:0E:20:5E:E5:30:1D:D5:D6:32:76:A0:0A:20
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D666
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/101189A475E311F1BD5A6802CF1D38B0.roa
Signing time: Thu 02 Jul 2026 06:55:52 +0000
ROA not before: Thu 02 Jul 2026 06:55:46 +0000
ROA not after: Sun 09 Aug 2026 06:55:46 +0000
asID: 151352
IP address blocks: 154.82.136.0/23 maxlen: 24
154.82.136.0/24 maxlen: 24
154.82.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120422 (0x1d666)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 2 06:55:46 2026 GMT
Not After : Aug 9 06:55:46 2026 GMT
Subject: CN=6a460b77-6997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c7:bc:05:96:3d:ec:57:3c:4f:38:7d:bd:ae:
ff:6e:9e:5d:df:e8:09:e4:5c:a7:0a:85:46:a1:c5:
5f:be:16:62:db:24:82:fa:56:b6:82:d0:74:a3:72:
9c:4d:0c:32:2d:0e:47:ec:97:8e:bf:cd:7e:fb:86:
ea:ba:02:c7:6c:92:59:fd:95:29:11:54:b4:c2:36:
7e:dd:d7:76:ec:ec:b5:71:31:4e:bb:fd:06:9d:e5:
d7:ac:7c:85:7d:97:4d:2a:97:2f:07:9b:54:33:9a:
4d:e4:ef:62:3d:2b:94:5d:d3:3a:43:08:3f:6b:3b:
5c:a6:20:86:86:1d:30:70:ac:0a:68:01:42:a5:40:
71:b5:ae:97:63:32:c9:19:8d:9a:49:3f:e6:a8:6b:
87:53:30:4f:e4:f9:35:cb:06:ba:8d:20:38:57:bd:
86:6f:04:23:e3:3d:53:06:09:da:af:11:3e:5b:2e:
56:7b:12:4c:fc:19:cc:74:58:81:e0:7f:47:8f:2f:
3f:45:27:c8:40:7e:c1:b9:20:c9:42:d9:ba:07:6a:
2d:03:ee:3b:14:80:4a:ad:ab:e2:df:ea:11:b6:92:
c7:a3:15:18:6a:2b:8e:f6:a9:66:ab:7a:1d:c6:a7:
bb:f2:fd:8e:0a:86:c4:4c:f8:42:24:53:5b:8e:b9:
04:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:E1:59:57:38:C6:92:0E:20:5E:E5:30:1D:D5:D6:32:76:A0:0A:20
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/101189A475E311F1BD5A6802CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.136.0/23
Signature Algorithm: sha256WithRSAEncryption
46:c6:97:aa:37:04:99:f1:5b:ca:e1:8b:c2:20:59:66:b2:40:
36:ac:ce:53:52:38:06:64:a3:92:4f:87:48:fd:7f:58:08:13:
50:ff:77:25:d7:dc:16:94:e1:b5:34:50:c3:de:1d:81:61:fd:
18:29:42:df:f5:d8:85:af:36:3e:43:58:54:d9:98:45:2f:59:
d1:32:f2:ea:76:79:94:87:0e:b8:6b:bd:24:16:92:25:e7:ad:
f2:ae:c8:24:db:49:a0:3a:38:fd:85:a1:74:76:87:47:c5:ef:
56:da:54:9e:57:0b:e6:03:0e:f6:53:df:1e:7d:d6:83:84:dd:
03:2d:14:27:ce:8e:96:01:b0:7d:cf:11:06:ca:5f:1e:ac:58:
d4:ff:66:7a:fd:ab:a9:e9:33:1b:83:80:ab:62:cc:72:65:d2:
38:69:bb:0c:bd:51:c5:49:35:38:5a:c7:38:f2:0d:14:c1:8e:
61:9f:25:ab:31:ab:b5:a3:2d:cd:12:bf:76:c1:80:b1:fc:85:
8e:c0:22:ba:ad:d3:6e:03:f7:dc:94:a2:b9:15:e6:89:e4:13:
52:28:c4:0b:2c:18:c2:f9:b5:09:bb:d0:16:6e:43:12:ed:26:
e8:73:79:9d:8b:a6:1b:2d:b1:8b:72:b9:7c:6b:1c:93:08:df:
04:c6:97:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:33:13 2026 by rpki-client