Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E3AE824866711F1B716ED03CF1D38B0.roa
File: 1E3AE824866711F1B716ED03CF1D38B0.roa (raw, json)
Hash identifier: f0LAnR3ArlmSqpAAgyCNXGmT/p0OzcsXNS2CL6z23MY=
Subject key identifier: E8:D1:9F:27:AE:14:6B:47:FC:AE:63:F0:95:A9:70:0B:B8:A7:CF:62
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DB0B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E3AE824866711F1B716ED03CF1D38B0.roa
Signing time: Thu 23 Jul 2026 07:21:27 +0000
ROA not before: Thu 23 Jul 2026 07:21:23 +0000
ROA not after: Sun 30 Aug 2026 07:21:23 +0000
asID: 55933
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121611 (0x1db0b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 23 07:21:23 2026 GMT
Not After : Aug 30 07:21:23 2026 GMT
Subject: CN=6a61c0f7-974c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2b:fd:8a:4d:3b:f6:36:90:68:d3:b9:a7:f2:
9a:90:a5:d9:3c:b3:40:3c:20:94:7d:ea:17:76:60:
11:c2:5b:c7:78:10:6d:9c:e8:78:e5:db:54:29:c7:
99:fb:b9:db:8a:7b:df:74:ae:cc:d7:88:fa:ef:17:
ac:a1:5d:bc:4a:06:ce:32:31:4b:4d:ce:20:16:23:
e2:cf:7a:b6:d5:e7:48:8d:26:47:f1:ee:68:98:5c:
4f:fd:20:f4:9d:4c:63:61:7e:46:f1:9a:8f:6e:27:
e9:cb:ed:96:a7:d4:51:64:90:44:fc:c7:10:d3:d3:
c7:bc:88:d2:ef:58:5a:7e:0a:fb:d8:01:1b:49:55:
ea:d1:fe:cf:8b:e7:f6:7e:70:ff:89:55:6d:bf:34:
11:10:c9:90:89:5a:4f:f4:49:35:b1:d9:b8:a0:73:
f8:9e:a2:fe:12:48:0d:53:44:69:0a:a0:51:23:54:
d9:13:dc:b3:3f:8a:0e:14:4b:86:3d:80:1c:fc:57:
f4:49:8a:ee:25:5d:b5:6c:fc:6e:a7:41:23:5c:06:
52:da:45:52:b8:a2:84:31:60:9f:40:79:7d:32:f6:
1d:46:5b:63:48:24:47:da:3e:d1:b7:ff:b0:a1:d0:
4c:f0:54:fa:01:94:c6:99:4e:23:ff:f2:06:47:1d:
49:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:D1:9F:27:AE:14:6B:47:FC:AE:63:F0:95:A9:70:0B:B8:A7:CF:62
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E3AE824866711F1B716ED03CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
57:97:b1:4b:c3:58:f3:c7:78:85:49:4e:98:3f:52:20:35:4d:
de:e8:3f:5b:f9:f6:c8:66:4b:42:17:c4:c4:c2:c7:2a:ba:4d:
d7:66:25:a8:68:a3:ad:d8:72:c6:52:d6:4b:09:fd:e4:68:cc:
be:9d:a5:a1:60:78:7e:4a:47:c3:43:c9:05:c4:f0:39:e8:fe:
b6:50:0a:1a:45:00:56:2c:4f:6d:57:ff:33:46:26:87:9b:57:
45:74:f6:87:fb:5b:0f:da:b4:5f:52:81:43:87:3b:49:20:b3:
4f:67:51:6b:5b:1f:6b:f4:d3:0e:cf:d6:e1:98:a9:f9:89:79:
19:c6:3c:10:01:47:23:bf:bc:f6:c8:98:b4:0e:59:c1:d3:87:
b9:b2:f2:3e:2d:c1:ce:ee:d2:15:7c:c9:57:68:39:4d:a0:5b:
d3:12:49:5f:9a:72:79:62:28:07:74:45:5f:a6:ee:c6:40:af:
c1:0a:d1:8d:b6:53:47:f6:d1:10:ce:24:d4:9b:0d:75:ca:52:
50:24:a9:8d:3c:f0:49:4e:fa:aa:4c:47:3d:bf:de:a2:85:1f:
af:1d:cb:04:04:1f:c2:ae:a7:b4:44:a3:c8:b9:7a:0f:d2:fb:
00:02:2b:64:8e:3b:76:cc:60:8f:b7:d8:45:40:a2:cc:50:b2:
6a:ec:4c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:20:16 2026 by rpki-client