Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A3DDFBC761311F19B5843A2CE1D38B0.roa
File: 4A3DDFBC761311F19B5843A2CE1D38B0.roa (raw, json)
Hash identifier: hYpxZlDzEdQDDbiAm0bJn52mU2BgTIsnoTlbFeRF/30=
Subject key identifier: 08:ED:A1:9D:AB:00:B5:A3:09:48:C4:FF:79:AC:39:E5:F4:58:9C:B9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D694
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A3DDFBC761311F19B5843A2CE1D38B0.roa
Signing time: Thu 02 Jul 2026 12:41:05 +0000
ROA not before: Thu 02 Jul 2026 12:41:00 +0000
ROA not after: Fri 07 Aug 2026 12:41:00 +0000
asID: 272092
IP address blocks: 154.83.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120468 (0x1d694)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 2 12:41:00 2026 GMT
Not After : Aug 7 12:41:00 2026 GMT
Subject: CN=6a465c61-f011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:81:2c:e7:1a:31:16:56:e9:86:88:d6:3d:dd:
6f:3a:cb:71:82:bc:71:6f:5e:41:48:87:16:9f:67:
88:b6:a9:5a:0c:9c:d4:24:2d:6a:13:70:c8:31:e5:
50:6f:ef:20:e0:f9:cc:1d:55:f7:9f:c2:14:70:5f:
29:62:16:37:3c:5e:78:f5:99:35:df:35:0f:ad:e0:
1c:0a:85:43:c7:49:fd:b1:2f:66:98:23:fa:91:73:
5a:c9:bc:d2:88:67:8a:66:ba:e0:36:31:78:16:1e:
36:e1:e0:22:1a:1d:d2:48:70:0d:92:25:cf:d1:71:
81:ee:c3:bb:b7:7c:fd:28:dc:48:e7:1f:21:0f:f3:
70:72:1d:61:67:53:7e:d4:af:8e:36:e3:76:31:e3:
06:8c:75:a7:3c:30:e1:56:22:1a:95:3f:c3:33:d1:
c5:7f:09:a6:63:e2:72:83:c9:fb:20:81:2a:53:f8:
be:fc:95:e4:9a:5b:9e:a7:c0:c9:76:d3:14:6d:14:
01:11:ca:68:8a:ef:e0:14:d6:ab:85:e8:71:a0:76:
23:71:a1:d6:77:e6:4a:30:2b:25:ed:bf:96:c4:0f:
a1:32:a3:97:e1:d2:a6:fc:6f:76:80:b8:15:e1:e0:
29:18:d0:6a:83:c8:72:eb:b7:0f:da:4e:19:62:f7:
c6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:ED:A1:9D:AB:00:B5:A3:09:48:C4:FF:79:AC:39:E5:F4:58:9C:B9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A3DDFBC761311F19B5843A2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.29.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:be:11:dc:c2:d8:f4:d1:91:08:49:4b:e5:aa:8d:92:14:89:
69:2c:d4:57:2f:98:d5:ed:fe:1b:d3:a8:36:56:cc:b8:75:eb:
36:9c:04:66:32:d9:6f:8d:07:b3:c3:9e:e7:e2:c0:e8:c1:e8:
8a:55:4d:db:36:4a:2f:45:28:d1:c5:a2:3a:d7:c9:ed:af:50:
2c:1e:b4:a4:5d:aa:fe:22:95:61:f0:98:a4:63:38:b7:59:fc:
88:44:a2:c5:9d:d2:99:fc:57:37:e0:f7:e2:80:3b:48:8a:1e:
60:03:69:d2:28:05:60:8e:95:b3:db:90:67:dd:bf:78:70:ac:
a0:0e:ce:01:6a:54:00:f0:6d:19:f8:3a:a9:39:85:64:71:82:
fc:16:8f:9a:e3:29:36:f2:f8:f9:54:dc:4e:a5:e4:ff:d4:c9:
87:97:cb:8d:48:b3:b0:5a:19:49:a7:09:a6:29:94:a6:70:a9:
16:cd:f1:98:14:2b:a4:7d:11:2e:86:19:bc:d1:08:a2:e4:e9:
2d:d1:58:51:f8:bd:be:b2:59:29:d8:2a:04:1d:e4:e7:48:18:
88:6f:f0:74:0a:b9:e8:8b:8e:30:d5:57:da:b7:76:19:d8:71:
99:97:68:52:f2:76:45:f2:9f:9b:a8:7a:73:c5:71:fe:fa:ae:
2b:e8:b8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:43:51 2026 by rpki-client