Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D540E12841C11F1BEBFC7FFCE1D38B0.roa
File: 4D540E12841C11F1BEBFC7FFCE1D38B0.roa (raw, json)
Hash identifier: vXsYw4Uhg4Ke7y3iOFM/TPRjy/+qMpcRXM1iw0sfleo=
Subject key identifier: 07:F5:3A:C7:21:27:75:46:1A:E1:1E:8B:48:1B:33:5F:15:D5:CA:6A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D9D6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D540E12841C11F1BEBFC7FFCE1D38B0.roa
Signing time: Mon 20 Jul 2026 09:20:52 +0000
ROA not before: Mon 20 Jul 2026 09:20:48 +0000
ROA not after: Sun 16 Aug 2026 09:20:48 +0000
asID: 17497
IP address blocks: 154.193.8.0/21 maxlen: 24
154.193.8.0/24 maxlen: 24
154.193.9.0/24 maxlen: 24
154.193.10.0/24 maxlen: 24
154.193.11.0/24 maxlen: 24
154.193.12.0/24 maxlen: 24
154.193.13.0/24 maxlen: 24
154.193.14.0/24 maxlen: 24
154.193.15.0/24 maxlen: 24
154.222.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121302 (0x1d9d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 20 09:20:48 2026 GMT
Not After : Aug 16 09:20:48 2026 GMT
Subject: CN=6a5de874-c741
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0f:ae:d6:bf:36:5c:96:80:00:b0:62:7f:bd:
84:c4:63:17:e3:c8:f1:6a:4b:5a:95:02:a6:b3:25:
cb:93:db:f8:60:b9:65:d2:25:57:68:46:9e:ea:6c:
88:32:2b:45:ac:f3:ac:15:d9:b5:59:cc:cc:9a:f6:
df:56:3a:7d:3f:07:af:36:2d:3a:4a:07:da:c8:40:
1f:14:4d:16:97:f1:de:76:76:36:53:0f:76:15:7e:
1a:df:fc:9b:2b:53:75:8e:d9:a1:f0:f7:8b:27:0a:
f8:03:a0:22:08:a6:d7:f1:de:55:25:fc:87:14:23:
a2:5e:72:90:a1:03:c2:25:1b:63:0e:bc:01:ef:3e:
92:62:5c:6f:7f:cc:6a:b5:d0:57:60:22:d0:52:7e:
5e:62:b2:39:36:1c:ba:5b:3d:63:c4:a6:be:84:8a:
55:d0:44:f3:40:ba:89:9a:57:ba:65:45:6f:1a:8f:
58:b4:34:95:87:82:f9:df:ca:db:1b:60:d2:31:74:
f7:6b:0e:86:fc:6a:f6:d5:bb:9d:05:25:6c:5f:b7:
1a:3a:04:0d:27:4c:ff:c2:b3:75:6c:0c:3f:33:90:
50:a6:75:43:c0:91:1f:fc:79:96:54:c1:b8:15:54:
a5:70:62:f5:a4:7c:e7:d0:77:54:a7:86:ae:55:3f:
ae:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F5:3A:C7:21:27:75:46:1A:E1:1E:8B:48:1B:33:5F:15:D5:CA:6A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4D540E12841C11F1BEBFC7FFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.8.0/21
154.222.148.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:79:bb:08:1a:cd:b5:fe:cd:65:06:a1:03:79:64:e3:82:d0:
73:2b:18:84:a9:b2:9d:2c:9d:7d:72:7a:4c:e7:df:96:c2:4f:
0d:34:01:fa:3e:d5:8d:26:db:0e:77:7f:1f:43:d7:7e:5f:69:
af:56:98:3b:b7:0a:20:df:a0:c0:b9:c5:f0:70:4e:4b:59:d9:
6b:85:be:c2:4d:69:5d:d7:56:5b:46:60:e9:8f:8c:62:05:d8:
1d:62:34:d4:51:17:04:ea:73:3a:f2:3c:20:43:a8:0d:a8:f6:
fd:7e:6c:38:c7:fe:19:13:0b:55:05:18:c6:96:51:0c:ec:01:
4f:91:13:f5:20:9c:21:0a:83:fb:c5:c0:87:53:9f:47:74:b7:
11:f9:8b:09:50:16:07:91:c1:8e:06:7e:5d:93:77:67:dd:81:
60:47:4b:34:69:62:89:16:55:e3:7a:5f:c4:82:24:ba:8c:44:
8b:ff:96:75:d8:97:96:c7:c3:5d:f7:0e:40:41:45:9e:ab:07:
54:7f:8e:2d:dd:38:5e:4c:07:ee:9f:cb:00:02:54:08:6a:41:
08:8c:d4:e3:c1:44:29:d4:e2:c0:f9:b1:a0:c0:82:aa:23:39:
92:04:6a:66:6d:70:47:6e:25:a6:c0:bc:af:16:11:20:08:07:
79:e2:d9:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:24:58 2026 by rpki-client