Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2020412E791111F19D823BD1CE1D38B0.roa
File: 2020412E791111F19D823BD1CE1D38B0.roa (raw, json)
Hash identifier: Wqzp7U04gVSeUvNGKHzwB91Lv0KESHU6yWex/5onvAI=
Subject key identifier: C3:F8:E8:5A:95:A0:C6:18:E9:B2:C4:4B:D0:C9:E8:F5:01:CE:77:79
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D72C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2020412E791111F19D823BD1CE1D38B0.roa
Signing time: Mon 06 Jul 2026 08:03:09 +0000
ROA not before: Mon 06 Jul 2026 08:03:04 +0000
ROA not after: Tue 11 Aug 2026 08:03:04 +0000
asID: 401664
IP address blocks: 154.81.8.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120620 (0x1d72c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 6 08:03:04 2026 GMT
Not After : Aug 11 08:03:04 2026 GMT
Subject: CN=6a4b613d-498a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:65:3d:2a:4b:c7:f3:0d:8f:64:08:d5:2d:99:
d4:1f:13:19:d1:a0:c1:b9:f0:5d:16:2d:6e:91:fa:
9f:86:6c:b9:1d:8b:8a:1e:0b:6d:78:ab:ac:33:56:
2d:8d:49:c5:8c:cb:65:38:24:c2:33:3b:93:d3:31:
76:be:ad:39:b9:b7:d3:4a:b7:09:8b:60:15:54:3c:
31:8c:7c:0b:5b:4d:24:d6:0c:f4:b8:8c:dd:35:81:
d9:5d:17:8d:7d:79:ab:5b:13:c2:55:9f:ac:80:1c:
db:e3:c9:bc:75:07:cf:11:09:cb:7d:d7:1c:73:da:
27:08:4d:10:a0:4c:c4:47:5f:4f:89:53:53:cd:05:
52:c5:6b:75:cd:6f:0f:4f:69:6e:7d:a4:6d:99:da:
4b:db:9a:ab:ae:cd:85:b2:c9:af:fd:f8:ee:e9:2e:
d8:66:27:01:37:ff:4e:31:12:1f:28:23:5d:e0:4e:
9d:56:c9:af:14:51:74:4e:2d:09:bc:80:46:1c:31:
24:a7:e7:12:40:64:23:92:a9:a2:b3:3f:49:00:8c:
c6:1a:f1:13:f8:74:f6:d4:a1:33:4b:d7:03:c9:35:
24:2a:27:12:6b:87:89:20:51:08:70:47:44:4c:5c:
5f:09:8f:89:0f:4d:69:65:89:62:31:35:d9:e0:77:
88:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:F8:E8:5A:95:A0:C6:18:E9:B2:C4:4B:D0:C9:E8:F5:01:CE:77:79
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2020412E791111F19D823BD1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.8.0/23
Signature Algorithm: sha256WithRSAEncryption
36:2f:83:ff:80:73:43:bc:3f:c0:2d:79:a1:af:f8:54:f5:c6:
41:43:7c:ca:80:f0:e6:67:17:4c:15:52:9b:7f:b1:c8:d2:59:
a6:2f:ea:ea:6a:86:bd:7f:57:52:6c:de:d6:d3:71:c9:02:45:
86:e7:77:9a:a3:a5:f6:b0:a8:4f:9d:fb:1c:d4:0f:6b:89:b3:
9d:30:99:9d:29:a5:4a:d2:c2:85:55:56:a6:05:78:8a:2c:6c:
01:b1:81:e6:c7:3f:5c:f4:83:21:a1:85:76:52:37:3c:a8:3e:
c1:5a:87:e8:df:db:c1:9d:b6:ae:77:87:60:16:a2:a5:6c:0c:
02:eb:5c:fe:c1:f0:25:1c:5f:bd:14:b3:b0:ae:83:d5:5b:d0:
8f:c5:e1:a2:96:ad:af:4c:ca:2a:11:f5:01:df:4c:fe:a8:a1:
88:ca:b9:8d:32:78:e4:c4:72:fc:50:09:f0:84:2d:40:6d:1c:
67:fc:a8:dd:db:8d:11:b4:72:46:c3:18:92:0d:f1:45:45:50:
d8:58:9d:07:00:ba:c0:19:89:81:74:38:8a:13:ea:1e:29:7d:
ee:52:b5:c0:32:37:3b:55:77:d3:2e:bd:54:23:e6:59:ce:27:
a4:85:b2:bc:f7:c8:ad:60:b5:84:02:a1:46:ae:e2:93:69:c3:
f0:5e:83:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:20:17 2026 by rpki-client