Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4ACA33C4844411F1A3C9B1F1CE1D38B0.roa
File: 4ACA33C4844411F1A3C9B1F1CE1D38B0.roa (raw, json)
Hash identifier: 3qyZfVwcicmnTIHPCF6njuH4zNAnfCfICRXyHbHiZ8Q=
Subject key identifier: A1:64:71:94:D4:EB:07:73:DF:16:72:53:C1:3F:91:F7:A2:05:2C:E7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DA32
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4ACA33C4844411F1A3C9B1F1CE1D38B0.roa
Signing time: Mon 20 Jul 2026 14:07:08 +0000
ROA not before: Mon 20 Jul 2026 14:07:04 +0000
ROA not after: Thu 19 Jul 2029 14:07:04 +0000
asID: 17561
IP address blocks: 154.88.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121394 (0x1da32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 20 14:07:04 2026 GMT
Not After : Jul 19 14:07:04 2029 GMT
Subject: CN=6a5e2b8b-f04f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a1:af:4d:b3:9f:b2:89:ce:e2:8f:ef:62:a9:
65:c2:a2:df:b4:4f:c1:08:df:b1:a9:08:0e:47:e9:
93:63:26:20:dc:6e:2e:52:f0:a1:40:5c:2d:6c:97:
70:2e:80:22:90:b1:6c:6b:c0:1b:79:a9:99:8a:19:
51:cf:c0:66:27:d8:5d:e3:07:4a:8e:fd:d5:cb:b3:
23:e1:69:8e:0c:be:79:51:06:1b:49:da:e7:0c:0f:
d1:b8:d3:c7:17:ce:6a:3f:b3:72:2a:e6:e7:d9:30:
e6:00:10:95:ea:a4:0c:f2:ff:93:14:ab:80:30:a7:
4e:53:32:24:13:eb:a6:4c:05:89:c0:28:ed:6e:4c:
cb:28:f6:72:ce:29:27:a0:95:b9:41:23:f7:ce:db:
5a:ea:b0:22:c2:58:0f:24:84:0e:73:9f:95:94:10:
10:88:96:fb:32:80:f4:d0:ff:e7:db:10:8c:4e:67:
5b:18:0c:46:c9:ff:73:e3:3e:c5:c5:77:ea:5b:69:
a3:ce:55:fe:e8:8d:2d:45:e5:15:d9:25:ff:a4:a6:
ca:66:3a:f0:89:5a:da:74:f9:8c:e9:31:79:36:32:
46:fd:fc:d6:8c:d1:0c:00:06:6d:aa:16:09:f7:b9:
c5:fb:d7:97:c9:23:4f:56:be:06:a6:bf:2a:2d:4c:
64:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:64:71:94:D4:EB:07:73:DF:16:72:53:C1:3F:91:F7:A2:05:2C:E7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4ACA33C4844411F1A3C9B1F1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.53.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:ef:10:99:b7:66:5b:3a:86:96:89:a2:39:51:dc:f0:e5:b1:
ef:ec:59:a0:d1:26:fb:dd:04:e8:f1:16:9b:26:62:54:6b:b2:
c7:db:9d:0d:15:b0:4d:c6:f8:97:00:35:1e:dc:2b:fd:80:5a:
1e:75:dc:4f:a7:cc:a7:4b:28:93:d4:13:dd:4d:4e:b6:6b:3e:
cf:a8:aa:93:fb:d5:41:80:71:7e:d0:01:b4:49:57:21:49:52:
34:ec:f9:69:52:72:26:c3:23:9d:e8:03:7f:5a:1c:c2:f0:aa:
b7:36:01:42:df:b2:a9:c7:5e:dc:2c:0f:da:5d:87:3e:20:8a:
a5:18:3b:f3:79:0e:f8:23:0f:61:97:12:92:f6:5b:e3:2a:eb:
a1:bc:22:8e:16:5b:14:7f:ea:f1:24:8f:34:ad:22:54:89:94:
63:2b:b9:c2:3a:bc:cd:48:33:0f:20:46:e5:12:f3:82:e0:f3:
17:0e:c2:c1:54:83:df:cc:05:36:f3:bc:b9:ca:0b:b7:69:eb:
fc:04:bb:c2:2a:1a:ef:6a:d7:b6:94:c3:21:da:ad:bd:d8:8d:
a6:f5:80:f7:d0:c5:9e:7b:28:0f:58:82:2d:f2:66:61:1d:45:
52:86:40:6b:25:a2:55:ef:66:43:19:a2:94:1f:a8:64:e6:c3:
58:58:fc:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:56:39 2026 by rpki-client