Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3CA71BC0810311F196A051A7CE1D38B0.roa
File: 3CA71BC0810311F196A051A7CE1D38B0.roa (raw, json)
Hash identifier: a9fTQtiGO/gvdCgGJgCfcbFDiTr1L+VxL1XVQqd1X6E=
Subject key identifier: 5E:D8:77:76:64:2A:E7:37:C9:80:ED:2C:4B:DA:DE:6A:7A:67:EC:F6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D92A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3CA71BC0810311F196A051A7CE1D38B0.roa
Signing time: Thu 16 Jul 2026 10:43:53 +0000
ROA not before: Thu 16 Jul 2026 10:43:49 +0000
ROA not after: Tue 25 Aug 2026 10:43:49 +0000
asID: 29802
IP address blocks: 154.202.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121130 (0x1d92a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 16 10:43:49 2026 GMT
Not After : Aug 25 10:43:49 2026 GMT
Subject: CN=6a58b5e9-321e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ea:c1:7b:e6:fc:1a:83:e3:5a:5d:92:f1:b1:
71:8a:6e:12:87:fd:44:63:78:2a:33:0c:13:d2:a0:
51:e0:b7:e9:34:01:83:f8:05:79:56:8b:1c:ca:1e:
55:9b:f5:71:05:4f:3f:cd:69:51:25:53:58:51:03:
29:2c:87:a4:4b:d8:38:1a:85:9b:be:cd:e9:34:a7:
d5:49:07:da:c5:a8:8d:fc:5c:0f:c7:e0:dd:8e:3f:
24:0b:af:dc:29:74:3d:58:7c:f4:f8:07:54:12:b1:
d3:51:4a:43:cd:36:0a:9d:8f:c8:e1:e7:3a:e2:a9:
ac:41:b9:37:e3:78:5b:b3:4b:e7:7f:7b:fc:61:7b:
8b:6d:e4:31:39:1d:d2:2f:9f:50:1d:d4:5f:23:35:
e1:30:2f:c4:a6:21:61:4d:2f:fe:b5:b4:1a:c1:01:
95:90:cb:21:ed:fa:8e:b6:17:d9:a5:18:54:4e:6c:
1f:f5:f4:22:42:c7:39:a8:cb:29:60:89:e2:d9:67:
fc:dc:a2:87:2e:fa:07:a0:46:c0:56:3c:66:ed:c1:
ee:45:8b:9a:9e:79:49:eb:05:f1:ba:cf:6c:20:d0:
0b:a1:53:39:4e:4d:58:ac:e9:a6:d2:be:41:c0:1a:
14:73:9a:21:ba:a8:58:67:3d:a6:cc:1c:e5:92:e4:
7f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D8:77:76:64:2A:E7:37:C9:80:ED:2C:4B:DA:DE:6A:7A:67:EC:F6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3CA71BC0810311F196A051A7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.75.0/24
Signature Algorithm: sha256WithRSAEncryption
45:b8:50:30:b4:ce:0c:7f:a3:e1:67:91:2b:5f:48:b8:66:57:
de:04:e6:80:aa:c4:7f:84:57:43:94:d7:12:86:f0:ba:85:20:
cf:96:9a:0c:ac:7d:be:2c:95:91:77:3d:8d:11:ba:ef:5f:28:
cb:6b:54:8f:ff:82:b3:08:1a:f2:92:ba:64:bd:a0:49:96:dd:
a9:f5:96:41:f9:33:5c:b9:7d:22:8e:26:64:f1:a2:27:54:f0:
b7:ac:e6:7c:6c:67:0d:e9:f2:8e:49:71:2c:5b:d4:ad:5d:66:
08:a1:05:03:45:3c:33:99:5d:8c:45:c9:c1:f5:62:9b:d5:15:
e3:da:fd:a1:6a:e6:f5:71:f0:d5:22:bd:a7:cd:50:15:3d:e0:
68:e1:50:bf:e6:ec:b5:39:16:03:a2:b3:f0:a6:ce:e4:6b:2c:
ec:cb:65:33:ed:c7:06:2a:e4:e0:b2:44:ea:b2:7c:20:84:0b:
43:fc:fb:20:f7:d8:ab:dc:b2:38:f2:9c:a8:f7:97:2e:e7:a2:
52:3c:e1:ac:c1:c4:cd:3e:cc:10:14:5b:ab:4b:ec:5d:67:14:
f1:6f:75:17:18:8f:01:2c:fa:d0:e4:99:6d:f7:59:62:50:5a:
d8:fc:98:55:95:dc:90:c8:96:a3:c6:df:cb:95:4b:2f:f3:80:
26:f0:b0:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:29:21 2026 by rpki-client