Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A9392B07F5E11F1B22E79DECE1D38B0.roa
File: 3A9392B07F5E11F1B22E79DECE1D38B0.roa (raw, json)
Hash identifier: ob1PzCL71EFWXb1prF05G5bpgVq7ixyiQPm/u4531eg=
Subject key identifier: F9:FB:22:21:95:B2:4F:31:37:4E:5F:D2:2E:D7:55:9F:5F:50:27:C9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D8D2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A9392B07F5E11F1B22E79DECE1D38B0.roa
Signing time: Tue 14 Jul 2026 08:30:11 +0000
ROA not before: Tue 14 Jul 2026 08:30:07 +0000
ROA not after: Wed 19 Aug 2026 08:30:07 +0000
asID: 11404
IP address blocks: 154.194.236.0/22 maxlen: 24
154.199.96.0/19 maxlen: 24
154.199.128.0/19 maxlen: 24
154.211.224.0/19 maxlen: 24
154.215.32.0/19 maxlen: 24
154.222.160.0/19 maxlen: 24
154.223.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121042 (0x1d8d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 14 08:30:07 2026 GMT
Not After : Aug 19 08:30:07 2026 GMT
Subject: CN=6a55f393-f4fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1a:6e:69:59:52:63:4a:e4:ce:71:fc:e5:8e:
8a:41:54:41:d9:0a:76:82:a6:f7:82:ab:fc:5e:4f:
a5:a8:c9:28:a7:eb:17:17:3e:8f:5a:ca:20:a2:8b:
b2:a8:86:1e:4a:a8:f6:e8:2b:59:b9:a1:27:76:12:
65:51:98:b9:21:fa:cd:f6:75:77:e1:dc:92:d7:93:
e0:a3:89:4f:45:a4:09:e5:cc:88:45:52:b4:42:79:
a2:12:35:ae:41:e4:cd:56:13:3b:58:a9:62:80:54:
e9:08:d9:8c:33:73:18:75:e9:4b:c8:d0:04:5a:8a:
6d:c2:39:81:12:e4:36:0d:6b:3b:23:d6:46:27:68:
99:14:a1:d6:85:9b:60:e7:62:38:42:2c:b5:55:3e:
ee:c4:1c:27:41:8f:c2:75:4f:91:3a:9f:33:54:87:
88:18:e4:fa:a7:a9:3e:0a:ea:54:16:f3:1c:73:77:
47:73:18:91:d5:5f:fe:0b:b7:b1:a3:d4:62:1e:3c:
ac:98:1f:41:a8:c9:a5:8f:2a:86:70:84:e8:04:4e:
b1:1d:f3:c6:b9:87:b7:58:e1:dd:b7:eb:99:f0:e8:
37:33:52:e3:d8:22:7a:7a:70:e6:b8:7a:98:3e:d6:
35:74:ed:28:90:47:a8:01:3f:52:d2:cc:a0:e9:42:
d9:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:FB:22:21:95:B2:4F:31:37:4E:5F:D2:2E:D7:55:9F:5F:50:27:C9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A9392B07F5E11F1B22E79DECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.236.0/22
154.199.96.0-154.199.159.255
154.211.224.0/19
154.215.32.0/19
154.222.160.0/19
154.223.96.0/19
Signature Algorithm: sha256WithRSAEncryption
44:e4:14:12:48:24:1b:54:dd:14:c7:3d:62:f2:fe:dc:0d:07:
41:52:66:39:c0:58:d5:ab:c1:74:69:43:df:9d:45:3b:4c:dc:
bf:92:59:f3:37:c5:87:12:77:60:a8:78:de:2e:50:82:b5:02:
a0:41:a3:58:a4:1a:9c:5a:bf:4d:6a:41:0c:f1:24:24:c4:b0:
7b:51:ca:05:da:8f:6f:63:23:40:d3:c1:6b:df:f5:f1:bb:a2:
8c:1c:bd:dd:fb:75:33:74:86:c2:82:a8:0d:2e:8a:06:44:1c:
f1:4c:1f:ee:c0:7c:43:85:58:85:e2:d7:87:46:08:f2:24:16:
ae:35:11:4d:8c:e3:3c:3d:21:b0:01:d6:0c:24:c3:bc:55:8f:
a5:f8:af:9c:50:91:60:85:49:96:d9:0d:b1:80:7a:36:80:9d:
23:4d:2e:b8:97:46:fd:6a:43:3e:61:73:03:7b:a8:b0:1e:66:
89:66:a6:b6:ad:66:fd:95:b9:5e:0a:34:fb:6c:13:dd:48:21:
ba:75:de:e4:64:1c:ea:96:13:a1:f1:c5:fd:d2:ca:de:2c:e3:
eb:d6:43:47:66:63:28:da:96:bc:49:0a:5b:b4:5c:fc:1b:50:
e6:1a:ae:23:ca:ec:3c:14:22:06:6a:97:ea:0a:14:86:93:8e:
87:7b:35:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:55:40 2026 by rpki-client