Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/124D65F479E311F1A918A9CBCE1D38B0.roa
File: 124D65F479E311F1A918A9CBCE1D38B0.roa (raw, json)
Hash identifier: Li6tHBF/x0pSKAOE+SLrT2Sg4OKcYe6LHUoKI5bMCEs=
Subject key identifier: E3:71:B9:EF:CF:3F:54:C3:B3:33:F2:10:15:EF:37:84:68:9F:A8:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D76D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/124D65F479E311F1A918A9CBCE1D38B0.roa
Signing time: Tue 07 Jul 2026 09:06:00 +0000
ROA not before: Tue 07 Jul 2026 09:05:55 +0000
ROA not after: Tue 11 Aug 2026 09:05:55 +0000
asID: 17497
IP address blocks: 154.196.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120685 (0x1d76d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 7 09:05:55 2026 GMT
Not After : Aug 11 09:05:55 2026 GMT
Subject: CN=6a4cc178-0a53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:54:cc:04:6a:09:61:e5:99:86:21:7f:c5:74:
f8:2c:4c:fd:58:c5:47:f2:3b:13:8a:a8:fb:08:4d:
fe:45:e5:66:d1:23:91:53:6e:77:4c:9e:62:54:bd:
dc:3b:23:25:83:12:f6:6c:6f:89:a0:e9:43:2a:40:
05:94:6d:d1:6a:25:69:84:b7:6f:91:ed:b3:4d:7c:
ea:16:78:73:bb:04:fa:40:00:d0:90:f3:c7:6e:fb:
e4:bb:6e:0f:bd:0e:38:3b:ef:a5:2f:59:1e:5a:16:
6d:9e:c4:b6:d2:ca:fe:05:d1:23:2c:18:77:2d:a1:
c9:a1:60:77:fd:64:ee:f6:31:42:72:99:5e:9f:b2:
66:7a:63:82:db:0d:86:04:7b:80:86:44:0e:3b:ab:
fe:3f:97:d6:0d:83:dd:22:95:bf:b6:51:c5:09:23:
ba:b5:4c:dd:8a:8b:f0:60:04:33:db:5c:08:16:cb:
71:02:9f:f9:be:3e:98:ec:79:dc:0e:59:68:db:48:
b5:54:ad:c3:b9:02:55:8d:eb:af:9d:c8:e9:5f:24:
4c:f6:ac:f8:78:76:c6:50:9c:ec:8c:c5:0c:4a:94:
ae:3a:6c:e4:62:cb:9b:92:ab:05:ef:c4:e3:ae:51:
52:12:0c:0d:4d:6b:8a:9c:8c:0a:8c:b7:75:d1:c2:
2c:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:71:B9:EF:CF:3F:54:C3:B3:33:F2:10:15:EF:37:84:68:9F:A8:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/124D65F479E311F1A918A9CBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.142.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:c5:fc:a3:35:c8:c8:8f:be:5b:fd:81:9b:3b:3c:fc:65:a4:
ee:2b:4b:e9:5c:52:b1:94:a8:dc:6d:82:e4:26:e2:c0:59:7f:
29:80:33:57:fb:4d:14:be:4c:76:05:87:2e:57:54:03:1e:08:
fd:ca:df:09:ed:51:b4:42:c9:45:db:40:0d:0d:9e:f3:5f:f3:
e9:48:20:15:7d:45:5d:5e:6c:ed:4a:c0:f6:d5:c2:0e:ba:ed:
fc:b5:b0:9f:eb:27:64:f3:52:ae:30:5f:02:ff:8e:c2:ba:36:
09:11:9a:3a:65:dd:0d:7f:0c:07:d1:6c:bb:d5:f3:a9:fc:6b:
d9:f8:85:6f:00:86:5f:3a:12:8d:27:73:ad:38:46:b6:56:12:
e8:62:c0:78:29:c2:5a:be:02:4e:91:c0:23:b7:94:89:e1:f0:
0e:7b:bd:e6:a5:0d:1e:37:b9:2a:ab:b8:12:17:d1:71:fd:82:
da:75:56:da:10:e7:06:88:0f:45:90:ea:25:35:ba:16:d5:0b:
cb:38:40:c9:e0:55:59:5d:07:4e:88:89:5b:50:69:4a:fe:4e:
9d:a3:8c:c2:04:12:06:f3:f7:6d:f3:d3:a6:40:35:35:ae:bd:
5f:b5:5c:37:d6:39:25:7a:4d:ff:b4:13:8b:a6:a7:16:65:11:
5a:48:fb:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:34:46 2026 by rpki-client