Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3326903E850F11F1915538C8CE1D38B0.roa
File: 3326903E850F11F1915538C8CE1D38B0.roa (raw, json)
Hash identifier: fiIim5f+ZP4hKN4BKUoAur6CuuqICi/Kk5bnodEZdPw=
Subject key identifier: 9D:F0:65:07:0B:1B:BF:7E:53:6C:1C:5E:F0:03:BA:5F:05:09:8B:41
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DAAC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3326903E850F11F1915538C8CE1D38B0.roa
Signing time: Tue 21 Jul 2026 14:19:36 +0000
ROA not before: Tue 21 Jul 2026 14:19:31 +0000
ROA not after: Thu 03 Sep 2026 14:19:31 +0000
asID: 63023
IP address blocks: 154.222.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121516 (0x1daac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 14:19:31 2026 GMT
Not After : Sep 3 14:19:31 2026 GMT
Subject: CN=6a5f7ff8-c5fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:92:2e:48:40:e8:82:53:fa:35:4e:66:a9:d9:
5b:8f:8b:05:41:58:b8:e1:96:f8:85:7c:6f:bd:e1:
af:f2:ab:7b:89:cd:b1:e2:25:15:79:13:f1:de:df:
e0:a1:31:0f:36:3d:40:fa:e9:5f:f0:b1:00:f4:53:
89:59:51:9c:d7:32:11:50:b0:a3:b1:56:93:c7:7e:
71:44:5d:f0:21:96:34:15:d5:d3:80:e6:b4:cd:77:
9b:71:d4:2d:cf:f5:38:9e:33:a4:f9:28:01:0c:51:
00:29:34:a2:97:db:c2:97:87:c8:09:00:29:31:7b:
1f:84:0e:f5:33:7b:c2:1e:4b:9a:3e:74:af:12:f6:
b5:e4:a5:de:7f:49:58:4a:55:70:6d:9c:5f:9d:ca:
41:9b:2a:c7:ef:52:2b:43:f2:44:55:24:62:1e:c3:
64:f0:ab:c7:90:c7:ef:5a:9b:a8:89:88:fe:9d:8a:
f0:94:22:a1:95:15:a5:a4:c9:43:f7:b2:93:2a:6e:
56:90:64:63:c6:3a:14:08:18:99:0c:e4:74:44:0d:
26:ad:e4:08:65:52:e7:eb:01:1e:3c:eb:50:28:3b:
5a:fc:d7:95:56:29:3d:c8:3d:85:6c:11:d5:80:fc:
ad:19:ce:10:2c:f5:ac:50:be:d7:0a:b5:4f:b0:3c:
ba:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:F0:65:07:0B:1B:BF:7E:53:6C:1C:5E:F0:03:BA:5F:05:09:8B:41
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3326903E850F11F1915538C8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.11.0/24
Signature Algorithm: sha256WithRSAEncryption
89:f7:40:49:3a:b8:dc:71:b7:fb:1a:87:45:a6:b8:4a:f8:b1:
ec:ce:96:e5:52:e5:c8:cc:f8:c9:e1:43:6e:44:f2:35:ea:20:
a1:f6:ed:b0:fe:cc:a3:6c:2d:cd:2e:bf:de:3a:45:07:f2:07:
9f:c3:71:07:0e:64:1e:57:cf:07:30:d9:51:db:5d:22:8c:ab:
0e:ef:92:45:14:00:0a:89:6f:68:2c:56:44:ea:92:5c:34:53:
03:cd:9f:37:a4:bf:43:ed:cf:3c:20:11:df:57:f9:10:e8:fb:
31:60:dc:dd:2b:89:8c:58:25:73:87:fd:b4:75:11:de:2e:a6:
5e:b2:32:fc:34:c9:7a:72:d6:20:18:e4:a9:d0:db:46:59:59:
66:dc:3f:c4:80:86:3d:11:ec:7a:e1:f2:f1:49:59:28:17:b9:
b0:bf:42:d9:b7:40:e4:bb:7c:1c:8f:07:a7:a3:12:9f:cc:40:
0d:4b:7e:26:e4:a4:67:99:33:a7:35:20:9c:93:fc:5e:1b:2b:
55:a8:f2:58:84:6b:52:6f:e4:ad:28:03:e3:2f:0b:6b:2c:9b:
57:0f:f7:55:ef:ca:fa:15:e0:9d:c9:68:2f:22:81:cf:df:ce:
1a:ff:2b:7f:7b:e4:f8:e0:bd:2f:84:fb:ee:f3:e3:79:52:79:
9c:33:98:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:24:52 2026 by rpki-client