Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1FF33B26831011F1B9E82F12CF1D38B0.roa
File: 1FF33B26831011F1B9E82F12CF1D38B0.roa (raw, json)
Hash identifier: eAkhzfQY4VI5dnof81kiIUmB2LNKJYd7Kn/25KZsSSw=
Subject key identifier: 3E:FB:0C:7D:03:1E:DD:97:0A:9D:BD:10:C4:C2:81:F6:0D:1F:5B:EC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D993
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1FF33B26831011F1B9E82F12CF1D38B0.roa
Signing time: Sun 19 Jul 2026 01:21:11 +0000
ROA not before: Sun 19 Jul 2026 01:21:07 +0000
ROA not after: Sun 26 Jul 2026 01:21:07 +0000
asID: 17497
IP address blocks: 154.82.19.0/24 maxlen: 24
154.94.2.0/23 maxlen: 24
154.94.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121235 (0x1d993)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 19 01:21:07 2026 GMT
Not After : Jul 26 01:21:07 2026 GMT
Subject: CN=6a5c2687-7dae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:a3:18:bd:92:25:22:a4:f4:47:31:78:ce:7a:
41:e5:c4:38:f8:62:d7:cf:1f:88:a4:2f:f1:0d:d6:
e4:e1:a6:94:df:14:88:ab:fb:11:26:a3:4c:0e:ab:
b7:c5:f1:84:fd:54:80:47:cf:e3:66:5d:9b:34:a7:
10:7d:c4:78:3a:44:04:dd:f8:ce:fa:1b:a2:f1:15:
34:42:38:9c:a2:08:1e:71:a5:f6:0b:79:87:03:e5:
52:ae:a0:42:16:57:5e:bc:0c:31:21:f3:04:03:3e:
57:e7:ec:05:86:09:d0:2f:0f:76:97:4e:00:88:ae:
40:63:e2:bb:bf:1b:bf:c5:d4:c0:ff:d7:e4:62:34:
db:56:58:4f:86:72:7c:5b:85:64:d4:8c:f9:57:33:
c9:4e:2d:07:91:0d:aa:08:97:fc:14:2d:15:f8:f6:
b5:d6:07:69:c6:ba:66:b3:49:f4:7e:8f:92:78:d3:
82:cf:3a:f9:83:75:04:42:3b:fe:18:fe:87:2d:9f:
53:a0:23:eb:06:a9:6c:a3:46:45:75:62:c6:e3:27:
fb:19:00:e4:b9:24:14:04:25:1f:c4:45:49:04:fb:
50:72:00:42:b7:6a:1b:87:87:e6:5c:11:c3:77:30:
11:d5:e6:7d:66:a7:3f:94:9d:9f:2f:41:dd:06:e4:
11:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:FB:0C:7D:03:1E:DD:97:0A:9D:BD:10:C4:C2:81:F6:0D:1F:5B:EC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1FF33B26831011F1B9E82F12CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.19.0/24
154.94.2.0/23
Signature Algorithm: sha256WithRSAEncryption
b9:8c:e5:48:1a:d7:d7:3f:2a:e5:f5:84:a6:5b:91:b1:24:ea:
26:e4:0e:ed:06:a6:63:e3:cf:0c:d9:a1:a9:e1:17:1c:15:58:
8b:53:f7:9a:99:e9:b3:1a:da:21:3e:4d:96:62:ab:21:eb:66:
99:f7:b7:90:34:19:80:d6:15:cb:3e:3c:80:79:89:b6:25:1b:
4e:5f:13:4c:f5:99:da:4e:cb:70:c0:14:6f:98:70:0c:e5:96:
44:83:2e:b5:89:01:a5:60:5b:04:ed:bf:9e:dd:69:0a:bb:88:
49:f5:6a:53:e2:1e:57:5f:20:07:6b:da:3e:f4:49:3a:7a:9c:
0d:ad:30:40:56:ed:00:8c:f9:54:e3:77:a2:0e:80:40:e0:31:
23:75:e5:cd:ed:01:a3:ee:95:76:8e:79:c4:d4:ba:fd:15:6e:
9b:38:64:29:e8:2a:e9:a4:51:cc:f0:08:b4:09:e6:17:7c:c8:
89:32:1f:87:60:1a:f1:dc:b7:20:8e:9c:de:f0:45:c2:cd:62:
00:fa:d8:32:10:c8:e3:5f:18:0a:f7:45:01:74:60:21:33:95:
f5:ca:ac:10:13:e1:60:ad:4b:7c:54:22:27:7a:a5:66:a4:2e:
66:7f:a3:51:ab:3d:be:88:19:81:a0:9d:9b:ab:d9:20:8d:c2:
a1:1f:60:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:27:53 2026 by rpki-client