Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E1BE56A7D9A11F1BE4A0F14CF1D38B0.roa
File: 3E1BE56A7D9A11F1BE4A0F14CF1D38B0.roa (raw, json)
Hash identifier: jk4CMKIrINdA7DWvoTC/GWw6vJu1DC8Pq/JmAkP5Y64=
Subject key identifier: E4:C9:C6:33:FA:5A:F8:CF:CE:6C:AE:39:66:16:06:A0:47:41:BC:33
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D873
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E1BE56A7D9A11F1BE4A0F14CF1D38B0.roa
Signing time: Sun 12 Jul 2026 02:34:45 +0000
ROA not before: Sun 12 Jul 2026 02:34:40 +0000
ROA not after: Wed 07 Oct 2026 02:34:40 +0000
asID: 141372
IP address blocks: 154.208.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120947 (0x1d873)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 12 02:34:40 2026 GMT
Not After : Oct 7 02:34:40 2026 GMT
Subject: CN=6a52fd45-1621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ea:63:70:a6:aa:9a:4e:ea:b9:1c:f2:63:73:
eb:06:b5:64:e7:42:3c:42:4c:8b:36:63:37:c5:4e:
be:28:49:87:97:ce:c6:98:0e:73:26:23:c7:6e:9e:
3a:6f:6d:66:bb:ff:33:62:71:f0:8e:74:7e:85:a2:
e1:73:fa:45:44:4c:90:66:ee:78:f7:e4:51:46:c0:
7c:82:70:89:8d:78:5a:74:51:1d:b7:43:21:64:03:
a7:2f:99:f8:d1:a9:d5:00:3c:8a:e9:0b:42:bd:e4:
d2:d7:b2:54:15:78:a1:14:4c:7b:93:b9:43:b1:f4:
39:15:2f:1f:cf:f6:ed:84:7c:22:f1:18:d1:13:e0:
a5:ec:6c:7e:b9:b3:ed:8d:3c:fa:d4:2e:43:97:54:
c4:89:a3:42:40:9d:d2:69:48:ab:fd:6e:03:19:0c:
70:26:11:c8:dd:e3:b8:fd:f0:08:94:5a:30:ed:cd:
55:52:2f:5c:e9:9b:61:40:65:af:e4:c5:f7:e2:c9:
8b:7c:2d:11:43:bf:4e:3f:14:82:04:a6:12:78:3f:
38:d0:14:f2:06:44:af:e7:3c:e2:94:a3:91:db:fe:
c3:3d:0b:ec:2d:40:13:dc:f4:44:db:e9:47:fd:8d:
e4:a8:dc:89:fa:96:c6:ac:8f:3e:7c:f4:bd:01:d8:
f0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:C9:C6:33:FA:5A:F8:CF:CE:6C:AE:39:66:16:06:A0:47:41:BC:33
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E1BE56A7D9A11F1BE4A0F14CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.56.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:67:44:83:e9:6e:32:e6:d6:cb:46:9f:43:a2:0a:79:c1:f2:
31:24:37:ac:a6:5f:80:16:70:f2:9d:2b:7d:50:0b:db:50:37:
cb:57:64:1a:4f:19:81:2b:11:7d:29:a4:a3:bd:10:5c:3f:6d:
26:9a:84:ea:2e:26:6e:1d:bf:21:b6:25:ca:73:e2:dc:66:b2:
be:19:d1:73:bb:86:d2:c6:f7:9f:3f:38:bb:f7:14:fe:49:d0:
47:3f:0e:d9:e1:f7:2f:d3:97:29:e8:60:65:65:b3:03:65:19:
7a:d5:1a:4a:3f:b9:1f:c0:01:fe:27:e5:68:97:8c:c6:03:1e:
81:59:83:a4:2a:35:be:0d:ca:5d:63:33:16:14:de:f9:80:d2:
4b:ef:61:b7:c9:ad:b6:2e:15:0d:9a:f0:62:9a:31:d1:a1:05:
a4:8d:67:4f:8d:be:66:8a:f8:5e:47:92:0e:a6:14:23:0b:54:
6a:cc:85:91:53:32:6e:da:75:47:3c:29:e3:fa:d6:1c:5e:9b:
0a:7f:3d:59:a7:28:b1:ad:0d:0c:06:71:40:eb:15:de:e1:04:
44:06:0c:fc:cd:87:fd:ce:cf:d7:37:ac:48:9f:ab:81:a3:f1:
88:aa:c6:17:36:df:01:ba:e5:06:11:a1:02:c0:5d:99:69:59:
c7:88:0e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:43:28 2026 by rpki-client