Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B510352730011F196296FECCE1D38B0.roa
File: 1B510352730011F196296FECCE1D38B0.roa (raw, json)
Hash identifier: 2o5vKbvZMs+8btsns5aI+VrzkJdWUCduAj5DG5MO2wo=
Subject key identifier: 3A:DD:DE:2E:7A:9A:97:54:A0:28:F4:75:E0:53:B8:3C:54:83:D3:86
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D5D5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B510352730011F196296FECCE1D38B0.roa
Signing time: Sun 28 Jun 2026 14:46:13 +0000
ROA not before: Sun 28 Jun 2026 14:46:08 +0000
ROA not after: Wed 05 Aug 2026 14:46:08 +0000
asID: 15221
IP address blocks: 154.198.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120277 (0x1d5d5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 28 14:46:08 2026 GMT
Not After : Aug 5 14:46:08 2026 GMT
Subject: CN=6a4133b5-1a84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:63:3f:00:a4:3f:9e:1f:c0:07:b3:2b:b1:24:
34:d6:fb:60:9d:a4:8e:47:b7:73:40:f4:f6:f8:d4:
15:a3:4b:e2:4e:60:e0:81:2c:a1:12:60:8a:64:5e:
ed:ec:d2:59:18:d4:a8:6a:1e:c3:0f:11:68:ef:c1:
87:c4:c7:22:fa:20:3b:0f:0c:2f:46:64:f5:5c:24:
94:28:1d:b7:4c:7a:3b:6c:00:b9:a9:cb:d1:8d:ae:
ff:dc:ad:7a:55:69:21:b8:6e:19:3c:9b:5e:4a:85:
5b:a7:70:f1:b9:fb:f7:69:6d:bf:39:49:b7:2f:4c:
1c:ae:a1:04:9d:9e:6f:de:b7:4b:04:c5:bb:b7:0a:
02:ea:96:5e:33:91:54:6a:d1:31:c7:31:1e:ca:00:
ad:41:36:5c:47:77:38:b3:01:4c:93:cd:9b:07:15:
79:ac:3d:30:88:61:d2:68:82:09:7f:12:54:b5:31:
9a:3a:e9:55:23:52:02:8f:70:ab:b0:2f:14:e5:ec:
09:0f:82:4f:c9:24:c1:99:a0:37:36:5d:11:b3:a1:
84:29:7a:d6:ed:db:61:e0:f3:68:d9:22:8f:18:ce:
1b:85:7f:23:6a:34:56:ee:c5:09:f4:0d:6a:06:5f:
12:ed:02:64:dd:dd:28:c5:ac:e6:b7:01:07:16:ee:
a4:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:DD:DE:2E:7A:9A:97:54:A0:28:F4:75:E0:53:B8:3C:54:83:D3:86
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B510352730011F196296FECCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.32.0/22
Signature Algorithm: sha256WithRSAEncryption
11:5e:91:1c:ed:5e:33:11:4f:94:43:fd:92:85:c5:cf:79:b8:
c6:12:6a:f1:71:44:64:37:a0:31:7c:03:95:ca:41:46:07:ce:
d2:d0:c3:8c:9a:f5:1c:a2:50:68:a6:71:10:19:16:5b:67:cd:
e8:98:d5:2b:d0:c0:a0:d9:ad:4c:73:23:e7:37:d3:c1:c0:33:
a3:65:a3:fb:b2:0a:da:dd:1a:c2:20:37:2c:be:eb:bd:e6:c3:
b1:72:a2:83:6c:a0:40:9e:6d:d8:e2:63:cb:18:e7:e2:18:71:
51:ee:8f:93:fd:e9:e1:9e:83:49:fd:4a:5e:f0:77:c4:22:e4:
54:ee:f5:fa:73:96:68:03:8c:95:68:f7:a8:34:ec:19:8b:b8:
95:6d:2d:34:1e:63:8a:e6:02:f5:f5:a5:01:fe:7c:38:db:98:
99:17:dd:03:0c:03:50:b1:df:04:b2:0f:86:34:42:b2:49:56:
3d:fd:d4:5f:f2:f4:84:96:09:e7:a1:51:92:ea:06:ca:d3:ac:
c4:6d:37:cc:cf:08:8e:d7:13:9c:81:65:8b:94:01:f1:02:b6:
be:5a:24:62:da:4e:f6:d1:48:58:f6:cc:a0:74:ef:13:03:1a:
ff:6c:6c:d2:81:d6:27:bf:e1:ea:cd:fa:af:54:d9:f3:01:de:
b9:ec:e0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:55:51 2026 by rpki-client