Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E37B6D47AAC11F18A7D2B13CF1D38B0.roa
File: 1E37B6D47AAC11F18A7D2B13CF1D38B0.roa (raw, json)
Hash identifier: wEOgN3OIIQKueuJxE0A0XJ+lEDtKOnbC77EQu8jVICo=
Subject key identifier: EA:7B:3B:F7:5D:72:AB:8B:39:B2:5D:70:81:5A:8E:E9:30:E3:66:10
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D796
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E37B6D47AAC11F18A7D2B13CF1D38B0.roa
Signing time: Wed 08 Jul 2026 09:05:09 +0000
ROA not before: Wed 08 Jul 2026 09:05:04 +0000
ROA not after: Sat 15 Aug 2026 09:05:04 +0000
asID: 199037
IP address blocks: 154.198.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120726 (0x1d796)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 8 09:05:04 2026 GMT
Not After : Aug 15 09:05:04 2026 GMT
Subject: CN=6a4e12c5-2534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fe:9a:52:d3:3c:c4:e1:ba:26:d9:ed:f4:66:
11:b6:da:c0:1e:a9:a1:b1:bd:41:3f:2f:b2:67:2e:
87:5d:3a:42:05:49:3d:76:21:21:fa:fa:33:e4:dc:
4a:7c:8a:73:cd:95:3a:78:dc:c8:21:35:21:fd:a9:
a7:a1:b1:56:80:ff:77:35:c7:1a:fa:e3:15:5d:ba:
eb:d4:75:be:6f:b8:9a:f7:90:06:e4:5b:3c:69:19:
fc:0d:66:93:62:0d:68:cc:8e:e5:e0:f9:ea:4c:61:
f2:77:2e:eb:f3:b6:3c:a0:ec:46:8c:ee:79:26:70:
fd:b4:98:4c:65:3f:1c:11:54:91:aa:03:a5:6c:50:
d6:1b:17:4d:cc:5d:81:7a:29:f4:8f:89:7d:3b:0b:
b4:fe:98:97:20:a2:3c:c1:53:97:91:f4:29:83:02:
47:8b:ee:35:0d:8a:d2:7f:2a:cf:90:12:42:9d:27:
b5:88:1f:1a:64:04:60:4a:6a:b9:33:80:3d:d3:85:
71:39:8f:bc:ba:a7:ed:a1:83:c6:59:dd:68:f5:d4:
3e:2a:8c:4e:8c:ce:ea:f0:e6:df:4b:03:d8:2e:9f:
2d:37:3d:40:cc:1d:75:d2:ac:c7:fd:5f:75:a1:00:
40:d0:f6:21:8c:60:0d:65:b5:e2:22:de:a3:1b:0e:
fd:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:7B:3B:F7:5D:72:AB:8B:39:B2:5D:70:81:5A:8E:E9:30:E3:66:10
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E37B6D47AAC11F18A7D2B13CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.9.0/24
Signature Algorithm: sha256WithRSAEncryption
43:01:78:cc:0f:80:09:04:ae:15:0f:e7:0e:a2:4d:2b:4c:b0:
e3:43:fc:72:f3:2f:3a:60:78:8d:11:b3:7b:c7:fd:cf:21:47:
3c:67:1c:01:51:e7:a8:cc:fd:f2:41:86:da:23:68:91:c8:b5:
68:db:92:11:94:26:14:70:c8:eb:35:fa:fd:ed:15:95:77:cc:
14:e7:d8:c2:a8:6e:62:6b:dc:20:e8:83:76:84:03:9f:0c:b6:
22:ef:e7:68:8a:70:b4:d5:19:ee:0c:b8:5e:28:d1:b8:06:24:
45:33:4e:84:ab:9c:e3:32:ad:06:ec:42:b1:b3:2c:30:4c:4c:
f5:97:55:57:b9:b5:be:e2:3c:8d:91:fd:3a:a8:53:a8:3e:f7:
aa:19:aa:10:bb:cd:3f:c3:9d:58:0e:48:4d:93:54:07:e5:1d:
2a:46:9d:d6:59:34:0e:98:ce:4b:ad:c5:99:30:de:d4:32:33:
b8:80:ad:29:20:f5:53:47:c4:5f:9d:1d:f8:a5:15:88:68:ff:
d1:61:42:96:4d:a9:da:63:7a:15:60:16:a4:06:ee:d3:78:fc:
77:98:f9:76:f4:17:90:c4:d2:b7:1f:af:7c:dd:b3:f4:b5:d2:
4a:4c:94:fb:92:de:a3:ed:8f:88:d7:c2:ca:1f:ed:fc:e0:d4:
cf:9c:d1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:54:08 2026 by rpki-client