Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/175F5D327F7311F1BCB8E0DACE1D38B0.roa
File: 175F5D327F7311F1BCB8E0DACE1D38B0.roa (raw, json)
Hash identifier: jneYvS7sEhP+zMRGNBuPDtEuUZPG+XHpBWFZQYknk8g=
Subject key identifier: 68:A2:35:BE:79:19:C0:F1:A9:BE:2E:40:31:DF:A3:A3:A5:06:60:C7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D8EA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/175F5D327F7311F1BCB8E0DACE1D38B0.roa
Signing time: Tue 14 Jul 2026 10:59:32 +0000
ROA not before: Tue 14 Jul 2026 10:59:27 +0000
ROA not after: Fri 21 Aug 2026 10:59:27 +0000
asID: 63099
IP address blocks: 154.222.84.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121066 (0x1d8ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 14 10:59:27 2026 GMT
Not After : Aug 21 10:59:27 2026 GMT
Subject: CN=6a561694-bad3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:63:20:71:ec:f1:b8:6f:a2:2a:4f:f5:75:07:
75:41:41:33:71:74:4e:d8:3f:36:6e:39:ab:bc:2e:
d2:bf:b1:99:7b:82:91:2d:83:71:6e:16:71:56:62:
ee:5c:ec:03:a2:bb:5d:23:c9:e8:7b:34:68:fb:b9:
f1:2f:a1:13:16:a6:bf:97:02:28:0b:06:58:61:94:
f8:ca:7f:a5:19:a9:12:cf:35:a6:95:fe:22:03:00:
d4:ec:98:77:89:17:66:16:89:9c:c4:24:fc:3a:c7:
ed:7c:d2:93:97:e1:f5:e4:bf:36:a9:64:1d:89:4f:
47:5a:05:de:ea:e5:92:a7:39:e0:45:c3:7d:61:67:
ad:a2:4c:1d:a9:0b:70:2c:9c:78:7d:28:26:88:3d:
1c:0e:ef:af:f5:ae:8e:41:d6:fe:ef:1a:a4:f3:4a:
c4:a7:1b:21:73:1f:4d:a5:c7:ef:a0:ff:18:cb:73:
43:e0:b7:d4:31:f1:01:78:72:aa:a6:c0:0c:a9:c6:
7c:7e:ef:01:bb:78:2e:2a:53:54:00:02:02:29:9e:
0a:61:2e:05:e0:d2:40:82:d2:a5:37:d3:4f:93:bb:
f2:1c:57:48:7d:d5:7a:30:4a:fb:b9:a3:41:8c:98:
51:32:d0:8a:df:b9:ac:1b:a4:30:bf:8d:de:1d:06:
fb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A2:35:BE:79:19:C0:F1:A9:BE:2E:40:31:DF:A3:A3:A5:06:60:C7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/175F5D327F7311F1BCB8E0DACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.84.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:09:df:bf:57:9b:24:b4:37:39:5f:22:94:83:f1:61:02:c6:
39:75:07:6e:25:bc:1b:71:b4:71:4c:19:68:49:13:9c:e7:38:
60:b4:c3:93:84:99:39:67:71:ca:d2:71:13:aa:8b:41:36:fe:
38:44:a1:ed:68:cf:a1:c5:e8:80:c5:05:25:30:08:ff:ee:d2:
8f:ed:64:79:82:5b:54:61:3c:35:66:1f:53:c3:40:ca:bf:76:
e4:e3:bc:13:9f:99:5b:4c:f6:0a:0a:fa:dd:c8:86:24:4a:cd:
45:8b:e5:2d:0b:e9:d4:3b:ec:ca:0c:7e:9c:43:23:40:32:f4:
15:43:a7:69:d2:40:95:bc:9b:a0:50:97:69:ec:f6:52:67:ce:
cf:8e:fa:c3:49:b4:4c:13:46:82:c9:d8:70:6e:14:d6:3f:86:
36:43:0f:ec:ca:8e:dc:78:39:c6:7f:12:38:56:ce:b0:da:03:
c9:ab:c7:a8:fe:0e:d9:16:4f:43:4c:05:5c:5f:6b:ff:c7:90:
32:f8:f5:45:42:ef:6a:32:21:c2:47:e4:e8:87:57:87:d8:17:
43:e7:c5:ac:0b:f9:b4:02:12:51:8c:5f:de:da:a7:ee:64:65:
1f:6b:d2:68:fd:66:7e:b6:1a:bc:a2:ce:35:e2:12:9e:85:83:
f8:15:7b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:23:16 2026 by rpki-client