Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FC1B0A079F011F195D5A219CF1D38B0.roa
File: 3FC1B0A079F011F195D5A219CF1D38B0.roa (raw, json)
Hash identifier: in01IfbnR8KMVWhqEN913C4cK9OgjsUhNmbTs2TRpzA=
Subject key identifier: 80:4D:64:47:75:76:A9:8D:4D:2E:2C:1F:68:59:48:7C:10:1D:1C:2E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D771
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FC1B0A079F011F195D5A219CF1D38B0.roa
Signing time: Tue 07 Jul 2026 10:40:20 +0000
ROA not before: Tue 07 Jul 2026 10:40:15 +0000
ROA not after: Mon 03 Aug 2026 10:40:15 +0000
asID: 17497
IP address blocks: 154.211.176.0/21 maxlen: 24
154.211.176.0/24 maxlen: 24
154.211.177.0/24 maxlen: 24
154.211.178.0/24 maxlen: 24
154.211.179.0/24 maxlen: 24
154.211.180.0/24 maxlen: 24
154.211.181.0/24 maxlen: 24
154.211.182.0/24 maxlen: 24
154.211.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 08:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120689 (0x1d771)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 7 10:40:15 2026 GMT
Not After : Aug 3 10:40:15 2026 GMT
Subject: CN=6a4cd794-7f24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0d:88:4b:97:b9:04:46:8c:a5:02:60:6e:dd:
2d:7b:23:c5:a5:f3:c5:5e:4a:55:4f:60:80:93:11:
4f:eb:4d:97:57:e7:ef:d0:99:b5:43:ad:20:5f:33:
73:b5:81:ef:67:36:de:9d:af:dc:e5:b9:22:aa:98:
c4:2d:98:d8:f7:30:97:a8:9c:31:bc:ad:24:bc:6e:
3d:8e:56:e8:50:fd:80:82:5d:26:7a:43:6d:f0:61:
13:1c:06:b8:df:4a:41:b3:09:b1:94:38:55:fa:02:
4c:2d:14:a0:31:b1:2f:aa:b7:40:db:ce:64:ca:ca:
79:32:0f:62:9f:92:e4:49:3e:6b:ab:0d:f6:ca:5f:
a3:38:7f:9d:8d:f2:60:60:0e:5d:55:ec:8b:24:01:
a2:e4:d7:2a:90:73:ed:20:07:ed:27:d6:5b:26:60:
c4:4b:b5:cf:d7:ed:75:ec:19:ba:a4:1b:72:df:db:
0e:28:17:4c:a6:90:32:94:2e:45:8c:40:0e:eb:8f:
ee:d7:20:c2:57:0d:eb:e4:fd:36:b9:a9:3b:78:0d:
76:b6:17:e6:77:99:3e:17:23:2f:6f:e2:c8:cb:bd:
37:b1:e5:d8:27:63:7f:41:69:27:11:1d:04:ce:82:
0f:f6:51:94:a8:38:98:1e:85:86:6d:3d:67:17:99:
d4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:4D:64:47:75:76:A9:8D:4D:2E:2C:1F:68:59:48:7C:10:1D:1C:2E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FC1B0A079F011F195D5A219CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.176.0/21
Signature Algorithm: sha256WithRSAEncryption
d5:9f:ce:e4:03:57:f6:e8:21:f7:2b:09:44:c3:fd:14:29:dd:
6e:8a:b7:d1:05:d6:3e:f2:e1:71:17:58:fa:dc:fb:c0:48:02:
1c:b6:54:e2:e5:9e:43:d5:09:4b:8d:87:c2:ae:7e:87:2b:81:
3a:f3:f1:d6:61:2f:6c:b9:62:85:47:27:63:d7:1d:3f:b2:b0:
ac:ba:cf:be:75:4d:fb:a1:df:67:d0:06:00:23:0c:57:5f:d8:
85:d8:a5:65:3a:5a:9b:e4:ed:10:c6:2f:77:97:71:46:49:b4:
b6:f4:dc:e0:ee:aa:18:99:80:84:d8:e1:53:fc:17:da:b9:de:
c6:3a:c4:21:59:d1:0d:98:aa:51:aa:65:6c:b2:57:b3:17:f3:
ad:c5:05:d0:aa:cf:9d:6b:91:da:3c:ef:ad:c4:20:13:6a:29:
92:43:90:9f:0a:6d:10:c7:3a:47:a3:03:82:52:74:e2:2d:c1:
f0:52:bc:43:c6:c0:0d:7e:42:d6:01:71:5b:02:c2:ce:d3:93:
09:e7:65:0b:7b:84:4c:4e:6d:10:bd:a3:ae:eb:20:31:e1:17:
a0:90:08:68:11:78:85:bb:70:b4:78:7d:12:6a:46:bc:4c:c6:
16:26:df:96:70:b1:13:11:6f:22:c0:d7:36:a2:59:be:84:67:
ea:56:54:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:11:49 2026 by rpki-client