Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B4B2F8A84D111F1AAA7FAD4CE1D38B0.roa
File: 1B4B2F8A84D111F1AAA7FAD4CE1D38B0.roa (raw, json)
Hash identifier: FHsxVSRnlsyouuN5AFZk8IKXd+o2ihuxDD+vSlPuDBs=
Subject key identifier: 5F:ED:8D:90:0C:65:7F:62:D5:C2:1C:88:A3:53:52:3F:6F:36:74:DF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DA4C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B4B2F8A84D111F1AAA7FAD4CE1D38B0.roa
Signing time: Tue 21 Jul 2026 06:55:08 +0000
ROA not before: Tue 21 Jul 2026 06:55:03 +0000
ROA not after: Tue 01 Sep 2026 06:55:03 +0000
asID: 984
IP address blocks: 154.82.132.0/24 maxlen: 24
154.82.135.0/24 maxlen: 24
154.90.133.0/24 maxlen: 24
154.95.2.0/24 maxlen: 24
154.95.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 08:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121420 (0x1da4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 06:55:03 2026 GMT
Not After : Sep 1 06:55:03 2026 GMT
Subject: CN=6a5f17cc-1694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:21:c7:9d:4d:85:3b:97:76:d7:a8:2d:3d:3b:
dd:09:b1:b1:8a:2f:c0:1b:d5:3c:9e:47:69:e5:60:
c7:83:a6:be:87:88:9c:c9:8d:43:e9:1b:14:22:27:
15:70:76:3d:02:c3:e6:1f:e0:9d:dc:64:9c:b5:eb:
77:1e:bf:1f:ab:4b:74:3c:ba:9a:10:2e:1f:88:27:
4d:5e:6e:68:74:21:81:7e:24:a7:49:7f:d3:9e:68:
5d:a5:2e:26:cb:e8:35:1b:16:14:ef:00:67:f5:09:
82:5e:db:a5:3c:5d:22:2d:54:4f:8e:8d:a5:e3:c5:
b1:2a:51:53:eb:5a:c8:22:d7:07:b4:6e:61:86:82:
57:5d:3b:b2:b0:20:06:05:d0:92:48:e6:9e:97:a3:
2d:35:5a:1b:00:39:55:5d:f5:2a:43:c0:94:cb:58:
11:7c:7e:cc:32:85:1b:ce:87:99:c7:8b:38:98:a3:
a1:d1:a2:5d:b5:9b:c6:d5:e0:31:00:c9:c1:13:a6:
44:02:85:45:df:49:03:fc:95:e2:63:2b:99:b9:0c:
e2:4c:56:c8:e3:c5:a5:89:4c:e8:37:5d:d9:6b:4d:
63:8a:3e:81:44:78:12:e3:7a:b4:90:c9:33:be:5a:
a7:4c:ef:b5:e0:d0:21:50:ac:7a:40:80:f3:f4:32:
86:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:ED:8D:90:0C:65:7F:62:D5:C2:1C:88:A3:53:52:3F:6F:36:74:DF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B4B2F8A84D111F1AAA7FAD4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.132.0/24
154.82.135.0/24
154.90.133.0/24
154.95.2.0/23
Signature Algorithm: sha256WithRSAEncryption
c1:d3:d5:34:d0:27:5b:24:1f:76:cb:24:5d:ac:cd:38:fe:b5:
9b:e9:21:8e:e5:99:43:d4:e0:ee:c0:a2:55:f3:21:42:9f:9a:
ef:fa:06:53:cb:ef:c3:8a:12:23:35:40:30:f0:e6:e7:b0:74:
8a:ee:b1:df:67:73:1d:e5:ca:c8:62:04:d8:14:33:e0:5b:fc:
52:16:86:25:37:c5:88:c9:04:13:39:3d:53:4e:1e:52:aa:51:
55:fd:7b:64:5d:9e:3b:1d:13:fe:69:62:ba:9c:bb:6b:93:7a:
d7:a8:fe:a6:88:55:28:3f:be:e4:d0:87:52:8b:37:e3:05:34:
8e:22:66:b1:6b:1b:43:b1:e7:ca:bd:8d:87:fd:64:99:d5:ed:
22:ce:05:08:ca:0b:f7:23:b7:44:f8:b5:51:bc:e1:4e:b1:00:
10:b0:24:3b:9c:4f:5b:58:7e:b6:b9:3d:0d:a6:36:a6:01:29:
12:ae:78:ee:ad:28:ad:1c:cd:ad:52:5a:ba:56:d6:10:07:4f:
a7:a5:38:83:e9:9c:a6:28:05:f3:ea:cf:47:f8:76:4f:c8:9d:
a9:b5:c5:0a:0f:58:28:01:a8:ac:97:42:f7:82:ef:0d:89:1b:
1c:e6:15:c1:67:ab:e8:c2:2d:21:38:12:78:e5:33:7e:0e:7c:
a0:61:fa:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:33:47 2026 by rpki-client