Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24B4549C76E011F1B2E953FECE1D38B0.roa
File: 24B4549C76E011F1B2E953FECE1D38B0.roa (raw, json)
Hash identifier: /OoA23cpJTW1x6uFDGfiab0dZYljBI2E4TSAL8I2Qno=
Subject key identifier: BD:CB:E2:5B:72:D1:AA:B2:E7:20:F9:B4:94:9B:F1:1C:B7:B8:90:F7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D6BA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24B4549C76E011F1B2E953FECE1D38B0.roa
Signing time: Fri 03 Jul 2026 13:07:29 +0000
ROA not before: Fri 03 Jul 2026 13:07:24 +0000
ROA not after: Thu 06 Aug 2026 13:07:24 +0000
asID: 395886
IP address blocks: 154.86.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 08:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120506 (0x1d6ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 3 13:07:24 2026 GMT
Not After : Aug 6 13:07:24 2026 GMT
Subject: CN=6a47b411-06d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e1:3d:6d:28:cd:9c:c1:7e:f8:85:ce:f9:cc:
d6:d0:f9:83:f3:0e:4a:35:84:42:76:b4:38:b8:39:
c4:05:f7:79:92:86:a5:9a:b1:6d:7c:d4:47:14:17:
40:0c:c6:9f:4d:58:ff:0f:fc:36:c0:ee:89:c2:61:
22:85:e3:0c:e0:8e:59:46:79:f7:cd:33:d3:88:e1:
a5:cf:19:14:49:e8:c4:53:7a:d4:bb:3b:24:d0:93:
b0:83:b5:cf:f9:77:9a:04:07:a4:e2:02:d6:bf:e5:
69:59:1f:18:5e:76:a2:75:37:be:9f:08:54:74:e1:
ba:29:77:28:68:cd:1f:6b:c1:98:be:2a:3a:ec:04:
d9:31:16:e0:54:1c:b8:87:f1:48:58:af:3e:a2:c1:
59:24:9d:04:7e:b4:d3:45:08:dc:d0:97:f7:5c:30:
ec:72:3b:46:bf:e0:ec:6b:15:92:5e:ab:0f:34:fc:
49:70:b5:a0:ab:60:bf:b5:1b:42:93:0b:77:8a:60:
84:76:56:91:3c:5d:73:02:9d:82:a8:66:18:03:ac:
5b:80:c0:38:fc:51:86:2a:76:81:61:1d:9b:7b:e1:
7a:d0:b3:e0:00:fb:cf:60:3b:ff:c9:e1:a2:ea:44:
22:da:eb:77:a2:3f:d5:c1:34:a9:e9:1e:62:fe:cf:
03:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:CB:E2:5B:72:D1:AA:B2:E7:20:F9:B4:94:9B:F1:1C:B7:B8:90:F7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/24B4549C76E011F1B2E953FECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.16.0/20
Signature Algorithm: sha256WithRSAEncryption
78:32:c9:cf:d4:aa:c6:7e:9e:2e:eb:67:25:e4:e3:7f:83:21:
a5:33:71:c9:bb:58:ee:07:d2:01:82:c4:82:42:20:36:cf:81:
85:91:78:c1:21:7d:e5:8a:6a:7a:26:fe:d3:83:3f:d9:cc:93:
a9:41:6d:85:5b:a3:85:f6:8c:d5:c3:4a:12:eb:8d:d4:97:59:
00:94:cf:3e:08:04:d5:a3:45:cc:7d:a4:6f:70:e1:76:dc:94:
9f:8b:64:2a:d7:01:3f:02:75:46:6b:89:5d:fe:98:2f:32:8c:
76:25:6d:b9:9b:60:ea:d6:3a:df:e3:90:c2:14:c5:6d:e8:3e:
2f:14:cf:b0:84:f2:86:44:92:e0:10:db:14:d2:8e:93:e2:03:
c4:f0:be:1e:05:41:36:e0:d8:7e:d0:82:da:f8:a7:1c:2b:50:
55:55:cd:a9:80:c5:0b:5a:f4:86:05:36:40:f3:6e:22:e4:38:
dd:d1:d1:18:28:0c:4b:8b:90:a1:43:f1:bd:2a:7f:a1:2f:bf:
4e:4b:0a:82:e9:5b:ad:07:1b:20:6f:b9:3d:55:17:66:07:d5:
08:e0:df:09:1f:b2:54:53:e0:c6:aa:9a:c8:b1:2b:81:f3:25:
4a:2f:0e:f1:fb:2f:04:0d:7d:16:64:a9:71:ad:b8:80:27:8b:
99:46:8a:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:40:39 2026 by rpki-client