Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/385A23EA713711F19B46E216CF1D38B0.roa
File: 385A23EA713711F19B46E216CF1D38B0.roa (raw, json)
Hash identifier: krKgSMccpj5TBWAm2qESENDRBNg7rtOzjRW39QFJC5E=
Subject key identifier: B2:41:74:18:C2:E8:D3:F4:11:EA:C6:33:AF:E1:07:C3:1C:14:25:09
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D54D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/385A23EA713711F19B46E216CF1D38B0.roa
Signing time: Fri 26 Jun 2026 08:15:41 +0000
ROA not before: Fri 26 Jun 2026 08:15:37 +0000
ROA not after: Mon 31 Aug 2026 08:15:37 +0000
asID: 399077
IP address blocks: 154.91.101.0/24 maxlen: 24
154.91.102.0/24 maxlen: 24
154.91.103.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120141 (0x1d54d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 26 08:15:37 2026 GMT
Not After : Aug 31 08:15:37 2026 GMT
Subject: CN=6a3e352d-6425
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c8:37:f4:1a:c2:43:52:c4:85:d0:7c:c8:3f:
dc:3a:cd:c9:78:80:fb:a5:20:4f:47:c1:71:66:e5:
8b:56:32:dc:4a:50:a6:0d:a5:36:ce:fd:27:dc:99:
4b:99:53:1c:6d:83:c3:91:ce:31:c1:90:2f:80:e8:
eb:ad:47:65:fe:74:ab:f4:55:5e:c1:1e:60:53:36:
b2:90:ca:ff:ee:39:99:88:8d:5a:64:6e:c1:4a:a5:
d8:bb:a2:6d:b4:22:71:af:0c:c1:1f:25:8a:cb:b1:
03:d9:3e:fa:90:80:01:27:b0:73:68:94:70:3b:eb:
0b:da:fa:ce:fd:f5:5b:52:7c:4b:8a:2a:2d:e9:96:
8c:c5:9c:97:a2:1d:12:24:86:d6:35:3b:79:59:51:
57:fc:18:ae:ee:8f:60:a4:3e:d5:73:ec:08:e5:a4:
e8:a5:d6:73:c6:05:e0:f7:e4:de:d1:f2:a4:a6:a1:
9a:22:fe:4c:4c:91:23:c2:0f:96:81:70:d8:6f:c8:
52:13:48:97:74:b9:22:7f:d9:1b:0a:30:12:e5:fc:
e9:b7:0f:0c:ca:f1:2b:2a:d6:48:45:3b:24:39:a0:
ad:a0:2f:5e:6f:2f:75:a3:4e:d9:02:6a:e7:57:7e:
c1:4c:64:e7:c1:4f:5a:40:8e:cd:1f:57:1f:a2:57:
59:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:41:74:18:C2:E8:D3:F4:11:EA:C6:33:AF:E1:07:C3:1C:14:25:09
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/385A23EA713711F19B46E216CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.101.0-154.91.103.255
Signature Algorithm: sha256WithRSAEncryption
5b:21:cb:f1:0e:d0:78:70:61:8c:cb:b8:8e:01:63:02:af:99:
ad:cf:05:34:c4:0b:e6:ef:56:d7:a5:82:62:d7:4d:86:6e:24:
87:dc:c7:78:1b:a8:fb:8b:5b:72:d8:72:29:5e:5f:e8:bb:02:
7a:c2:ed:dd:42:95:4a:d6:e1:26:17:80:0f:67:84:be:0a:5e:
29:cd:f2:7d:eb:44:9e:d4:5e:6c:88:c9:ef:c3:06:4c:7e:24:
39:b2:56:a1:ac:e0:f1:50:b6:4f:7a:b8:55:6d:7a:a1:16:0c:
69:ff:2b:5b:13:92:59:86:38:6a:ff:e0:9a:dc:be:a3:ed:a4:
23:84:1e:3a:2b:56:e4:0d:12:5d:53:b7:01:f0:93:79:0f:54:
a6:75:7f:1a:16:b2:ba:ac:44:9c:e3:9e:a1:ea:37:78:66:97:
5a:71:0f:f6:74:03:47:62:60:65:e4:ae:46:86:68:15:81:40:
ab:12:d8:8a:4b:a4:34:69:f4:c9:ed:38:41:7c:e7:39:05:8b:
cb:21:56:93:d7:b6:87:9d:43:ac:fa:cb:2a:00:68:04:e9:57:
06:8d:1a:27:61:24:46:9b:96:99:2f:da:f9:fe:d6:9a:01:b7:
5f:24:b6:a6:0e:24:06:ea:0f:3c:6f:8c:11:63:c4:76:2c:09:
2b:11:b9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:08:03 2026 by rpki-client