Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/241E1BAA79DB11F1AB0AB31CCF1D38B0.roa
File: 241E1BAA79DB11F1AB0AB31CCF1D38B0.roa (raw, json)
Hash identifier: RJeBCQ6uIIR63YQ6epJjo2XKZzM2LHoDt0B6Vk5+TfE=
Subject key identifier: F3:7A:7A:C2:7C:10:52:7A:15:26:CF:42:AD:4E:27:07:BD:1A:AA:99
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D763
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/241E1BAA79DB11F1AB0AB31CCF1D38B0.roa
Signing time: Tue 07 Jul 2026 08:09:14 +0000
ROA not before: Tue 07 Jul 2026 08:09:09 +0000
ROA not after: Wed 05 Aug 2026 08:09:09 +0000
asID: 274913
IP address blocks: 154.88.180.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120675 (0x1d763)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 7 08:09:09 2026 GMT
Not After : Aug 5 08:09:09 2026 GMT
Subject: CN=6a4cb42a-21fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:17:62:80:de:75:53:43:02:bd:6d:60:8d:5e:
4d:0d:fd:25:88:0e:0e:e3:0d:22:64:5e:5b:10:f1:
91:32:58:23:92:98:e0:16:56:dc:1a:21:85:e4:8e:
b0:a9:aa:2a:73:58:4c:0f:84:e7:14:58:72:61:0a:
ba:35:b3:16:04:0c:0b:c5:bf:fb:38:b7:10:dc:75:
22:42:81:0a:e5:06:ce:67:f4:71:bb:42:ff:44:cc:
54:98:d7:98:e8:08:da:a6:50:b6:d2:a7:14:07:82:
8d:18:e6:78:fb:19:59:d3:38:1b:d8:f6:76:bf:2e:
70:c0:e0:bd:5c:ae:49:85:5f:d5:4c:4a:15:c2:c8:
e0:97:b2:00:a9:60:3c:95:56:d5:61:c5:6d:83:2b:
a5:ea:8e:dd:9e:e8:a3:91:9c:d0:e9:93:7b:00:a3:
be:5e:ec:2e:2b:7f:d9:b4:e3:23:14:26:c4:d6:79:
b9:ea:1a:45:4a:62:f8:76:be:6a:8b:f4:69:87:90:
8e:c6:4d:df:17:6b:a3:53:a6:01:89:95:35:e1:eb:
92:78:a3:e7:b0:25:41:24:77:9f:27:73:15:29:34:
17:85:6e:21:49:c0:71:3b:7d:d8:00:b0:eb:1a:49:
e2:0d:3c:20:9b:25:d0:99:48:43:97:22:38:56:d4:
f1:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:7A:7A:C2:7C:10:52:7A:15:26:CF:42:AD:4E:27:07:BD:1A:AA:99
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/241E1BAA79DB11F1AB0AB31CCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.180.0/23
Signature Algorithm: sha256WithRSAEncryption
48:0f:16:db:a3:05:8e:e3:bc:58:5d:5d:c2:1e:24:2f:b3:b5:
75:51:ad:63:36:8e:1c:db:b8:30:d0:21:2a:42:ee:1a:9b:48:
e6:c5:7d:b5:79:aa:94:1e:60:9f:88:f8:a6:3c:8e:b3:8f:0c:
d5:fd:e3:6f:24:c7:31:61:ce:be:55:c7:5e:10:a7:5f:b9:6b:
66:a4:79:25:d3:bf:85:3b:4f:56:b8:9f:92:23:1a:6a:4a:b8:
38:3b:6c:d4:b1:02:4b:62:e3:67:35:79:2a:4c:64:1e:ca:8d:
e6:17:74:5f:78:df:4f:5c:21:41:d8:95:84:71:26:dd:fe:7c:
20:c1:b3:ac:10:24:47:b2:89:49:83:49:d7:25:5e:22:e7:46:
d9:43:49:fa:df:31:eb:21:3d:97:65:91:87:29:67:9c:fe:a1:
df:68:ca:10:ce:cc:7f:b1:c4:33:9d:a0:8f:e5:a4:4a:ed:23:
51:ff:a7:80:3e:1c:09:e3:81:0a:a7:01:f4:dd:af:7b:f3:72:
f2:81:5c:38:af:ac:39:99:a1:50:18:37:62:da:60:e3:f2:e8:
48:ea:18:d2:bd:4c:5b:7d:55:fa:4c:73:c9:80:26:d6:d0:2e:
99:a8:a7:69:06:59:a3:5a:a8:63:06:0d:f1:53:7e:d3:de:75:
3f:25:8b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:43:50 2026 by rpki-client