Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/497D625884ED11F19E0499FECE1D38B0.roa
File: 497D625884ED11F19E0499FECE1D38B0.roa (raw, json)
Hash identifier: 9pRuA5v2Rp16CM5Pk0vw0iJnKnDe/TGWl6LFuk2C4gw=
Subject key identifier: 2E:A0:37:2E:11:43:92:71:17:C3:07:58:30:6C:2B:FE:7C:C5:F6:8C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DA72
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/497D625884ED11F19E0499FECE1D38B0.roa
Signing time: Tue 21 Jul 2026 10:16:50 +0000
ROA not before: Tue 21 Jul 2026 10:16:46 +0000
ROA not after: Sat 29 Aug 2026 10:16:46 +0000
asID: 54801
IP address blocks: 154.213.176.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121458 (0x1da72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 10:16:46 2026 GMT
Not After : Aug 29 10:16:46 2026 GMT
Subject: CN=6a5f4712-0240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:58:80:81:50:4d:29:e7:0a:6d:a1:07:b9:22:
0c:91:81:c0:6d:e8:94:7d:c8:e8:52:91:e1:72:07:
71:5b:71:e2:e2:09:29:4f:93:49:21:69:25:3a:a9:
ac:43:d1:6c:79:c0:05:2d:be:9e:96:55:b3:d7:04:
5c:52:bf:86:b5:8c:e2:fe:09:40:a4:70:98:b6:ec:
8a:f3:74:9e:e6:6d:97:de:57:78:48:45:8a:95:ef:
64:21:9e:4b:2a:fa:56:00:db:a3:fe:75:7a:3e:ac:
34:b0:35:c6:61:fd:2b:98:b7:28:61:3e:9e:88:f1:
97:b5:7b:f5:bb:99:89:50:2b:b6:fa:79:c0:aa:09:
06:c4:cf:8c:9d:f6:59:ec:f9:f9:a4:d0:06:48:04:
f8:4d:9d:a7:13:c8:91:39:0a:67:00:a2:f5:fb:9c:
6d:82:d8:1f:11:38:db:2e:9e:35:15:cf:82:c0:cd:
56:34:8b:45:c4:1b:e5:a0:86:73:2b:02:f8:3c:6b:
c6:3e:10:3b:06:41:4f:44:41:52:4b:88:67:da:0a:
e5:96:63:39:2a:9c:7f:5f:54:c4:35:cc:58:7e:1f:
f1:36:56:af:48:d2:e3:2b:44:30:0b:4b:44:93:29:
b6:e5:09:d3:40:21:dc:a4:e3:87:ef:fc:54:7d:5b:
dd:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A0:37:2E:11:43:92:71:17:C3:07:58:30:6C:2B:FE:7C:C5:F6:8C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/497D625884ED11F19E0499FECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.176.0/20
Signature Algorithm: sha256WithRSAEncryption
c0:c1:e2:38:24:0d:72:4c:ed:c8:25:76:b4:70:8d:36:f4:bf:
49:b5:8c:76:8e:c7:c2:8e:2d:6d:b9:02:e6:ca:34:6b:90:37:
10:82:f0:62:0e:5e:62:6b:9f:e7:da:e4:d8:03:ba:41:36:6f:
89:f0:27:6b:de:61:03:b5:ab:b3:f4:30:47:c5:c0:a2:b9:a3:
de:7f:16:01:be:ba:fe:e9:c8:2f:1b:c6:d2:27:6b:98:36:a2:
f6:4e:ab:7b:ff:c4:92:1c:da:6b:43:c5:72:69:2c:56:9f:41:
a0:a4:bf:fc:a1:0a:45:38:97:fc:03:c1:b5:f0:22:0e:b2:15:
5d:33:76:99:ef:b7:6e:43:c8:37:f7:c4:1a:95:11:69:8c:ec:
c3:37:4d:5a:b6:0d:3e:73:0d:b1:0c:72:80:79:e9:45:38:76:
5a:98:49:27:48:b3:c7:12:52:a4:90:e2:fe:3e:af:c0:7b:e8:
ee:34:b3:3c:a5:35:ee:e8:81:15:8b:44:c9:62:28:03:2d:c2:
2f:1b:df:85:03:8f:1a:e1:d2:ac:a9:bb:9f:d2:ef:be:21:01:
5b:13:34:ea:42:2f:13:0b:d5:d0:91:6a:12:3e:06:eb:78:40:
aa:c3:bf:4d:67:ca:2c:36:09:d5:32:51:04:9c:91:2e:f2:ea:
47:3d:16:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:27:38 2026 by rpki-client