Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/496AB6C885D611F197961B04CF1D38B0.roa
File: 496AB6C885D611F197961B04CF1D38B0.roa (raw, json)
Hash identifier: Ymc+/9lzmPpTek0gLfKekOMFCGegMa1iCZOxuxSMkRM=
Subject key identifier: 33:01:DE:D1:8D:A0:77:BD:E3:A0:20:A7:BC:98:79:DE:A6:00:B7:72
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DAC9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/496AB6C885D611F197961B04CF1D38B0.roa
Signing time: Wed 22 Jul 2026 14:04:43 +0000
ROA not before: Wed 22 Jul 2026 14:04:39 +0000
ROA not after: Sat 29 Aug 2026 14:04:39 +0000
asID: 214467
IP address blocks: 154.222.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121545 (0x1dac9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 22 14:04:39 2026 GMT
Not After : Aug 29 14:04:39 2026 GMT
Subject: CN=6a60cdfb-585c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2e:4f:2e:4a:32:bf:70:f8:cd:1a:55:1d:c0:
4d:12:b2:28:8f:c0:23:f0:7a:9b:e3:b7:1f:a2:a3:
25:69:76:52:9c:66:4c:81:ee:d0:6a:90:87:ec:3b:
40:97:e0:84:3e:ea:90:6f:7f:27:df:dd:73:8e:46:
b6:8d:34:f3:ae:84:10:1d:4c:db:c2:be:74:e7:7e:
ae:2e:ed:dc:47:cb:a5:0b:90:f5:f4:ad:18:4f:eb:
59:f3:53:02:15:b3:b4:9a:72:99:5c:32:e2:c1:27:
80:4a:c4:b7:97:52:3b:60:41:e9:9b:a9:9b:a7:40:
ea:50:ea:70:4f:47:8a:b5:1f:f0:35:82:f7:95:5a:
90:14:3c:fe:30:62:a1:1a:f7:f5:da:58:d7:0c:0d:
f7:7b:b5:b4:cb:81:95:eb:4d:95:52:29:02:99:7a:
f2:7d:fa:c6:d3:d1:55:1e:0b:ae:55:30:11:ee:1e:
1c:e9:da:fa:51:b7:79:0c:86:f4:9a:eb:c0:71:d2:
72:a9:82:47:31:ed:df:b3:4c:94:9c:fc:f9:82:04:
93:5d:e7:6d:9a:9d:b2:4c:86:18:36:82:38:aa:f8:
40:62:f0:4c:ba:04:7e:bd:f6:a0:2e:1b:6d:a6:b1:
a0:c9:a3:aa:08:51:be:48:2f:42:61:aa:bb:11:65:
c2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:01:DE:D1:8D:A0:77:BD:E3:A0:20:A7:BC:98:79:DE:A6:00:B7:72
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/496AB6C885D611F197961B04CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.10.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:33:1a:91:3a:f4:b6:80:97:ac:62:91:69:49:46:c7:5d:62:
8c:ce:da:b4:cb:25:01:26:e0:13:86:82:25:b8:3e:58:4d:a4:
a3:06:01:10:dc:bf:cc:d3:cc:5b:a2:ab:eb:a3:3d:b5:ff:89:
b6:17:bc:21:34:fe:77:ae:3b:ba:96:2e:8c:0e:19:5f:5f:89:
76:e7:43:47:ca:c1:1f:0d:c4:6d:58:87:24:1d:95:46:26:da:
cd:65:17:e9:2e:d7:3f:31:6c:db:1a:6c:a6:da:c9:a3:fc:16:
1d:c8:be:e0:50:e9:91:76:bd:a7:d5:98:dc:01:9d:a0:c2:a4:
f2:44:d3:41:10:bd:5d:9f:fa:ef:cd:18:12:ec:44:a9:43:08:
94:3d:c4:e1:6c:d6:13:7b:4d:48:f8:72:31:93:4e:ff:65:ed:
19:58:f9:7d:6f:f1:2e:41:20:d7:44:66:97:e0:4f:a3:ee:cc:
eb:54:9d:08:c7:d6:ec:50:48:78:ca:ae:63:61:fb:e9:ab:b3:
74:70:4b:bc:dd:98:78:73:ef:81:d6:76:60:6c:75:f5:ec:9d:
f2:47:64:fc:6a:c9:f4:69:33:63:22:66:4b:61:7c:4b:6b:fe:
43:f6:35:99:a7:48:9c:89:70:66:31:ae:c0:e2:da:b4:3d:ba:
75:a9:7a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:43:17 2026 by rpki-client