Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/517B436C79D511F19D39DDFACE1D38B0.roa
File: 517B436C79D511F19D39DDFACE1D38B0.roa (raw, json)
Hash identifier: xIFjD4Ms4y0a+B0w89qG5W2S56bQ3ITfdSCM8lgpsr8=
Subject key identifier: 55:40:2A:9F:11:83:94:FE:00:7E:D4:80:CA:A5:9A:ED:42:71:C9:C0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D759
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/517B436C79D511F19D39DDFACE1D38B0.roa
Signing time: Tue 07 Jul 2026 07:27:33 +0000
ROA not before: Tue 07 Jul 2026 07:27:28 +0000
ROA not after: Wed 05 Aug 2026 07:27:28 +0000
asID: 264605
IP address blocks: 154.88.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120665 (0x1d759)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 7 07:27:28 2026 GMT
Not After : Aug 5 07:27:28 2026 GMT
Subject: CN=6a4caa65-3e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1c:e6:7b:a0:41:23:f1:5f:82:b7:a5:c1:f5:
2f:60:b5:38:45:45:a3:6a:dc:95:02:45:b5:99:ab:
24:30:52:1f:a2:d8:ca:dc:7d:da:26:56:c1:7c:ac:
ef:47:48:5a:e0:09:17:7c:50:ff:ad:23:50:a3:3b:
8e:f8:f4:76:be:6b:76:ec:fa:25:c0:d4:a1:93:20:
47:0a:c8:5f:97:dc:25:79:24:6f:ac:bb:6b:2c:b7:
8e:a9:9a:23:14:50:09:09:53:97:88:f6:c7:04:bc:
00:0e:54:02:93:78:87:0d:f2:da:65:33:41:19:8c:
a1:96:1b:5c:73:8f:13:3b:9f:b1:3d:ba:87:78:3a:
d6:01:2b:74:e5:b1:de:83:59:d9:0d:1b:c8:0a:13:
61:47:b3:2a:0a:c2:6f:cc:18:a9:86:1f:3f:a7:0a:
a3:27:9e:5b:df:bb:c1:b6:c2:67:2f:72:b4:35:85:
09:37:3f:04:22:bb:3b:d9:d6:11:e5:33:9c:56:30:
09:50:e0:7c:1b:03:56:8b:fd:cc:72:89:7b:e0:1e:
14:6f:d8:31:52:e1:4b:29:4a:ed:e3:ef:0f:7c:40:
85:29:a3:a0:ec:49:63:c8:45:6c:2e:6e:42:6e:72:
49:27:c3:3b:8a:1f:19:d0:bb:e3:0b:42:e5:05:38:
ae:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:40:2A:9F:11:83:94:FE:00:7E:D4:80:CA:A5:9A:ED:42:71:C9:C0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/517B436C79D511F19D39DDFACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.192.0/18
Signature Algorithm: sha256WithRSAEncryption
25:18:39:41:60:be:2c:31:2f:7c:48:0a:92:5e:84:75:4c:28:
2e:f7:ef:74:1d:87:bc:9e:7d:d5:41:7f:33:e6:27:5c:19:8f:
a9:cf:06:8d:64:a4:07:90:1d:e9:f6:38:9e:5f:cf:e9:35:53:
e9:15:cf:c8:8b:99:75:e6:5b:7a:49:08:4e:12:a3:ea:ac:0e:
c0:dd:89:00:00:7e:ea:85:6f:a1:f1:bf:29:72:4f:45:7d:44:
9d:d0:54:7e:92:28:1b:7f:14:fc:92:0d:05:25:cd:21:0d:63:
c4:e2:e5:f2:03:ed:b3:d4:fc:ff:17:79:3a:bd:26:8e:13:56:
f2:cf:54:4d:2e:db:50:3d:b2:a6:41:53:5b:a8:e3:56:a4:13:
ef:71:59:36:8f:db:b5:ea:52:ab:09:f4:99:ef:8f:19:67:20:
1e:75:60:6e:50:36:6e:2d:72:11:56:e2:e1:21:67:16:66:85:
fa:ba:18:cb:54:b8:01:91:32:52:97:30:c2:69:81:e9:5d:49:
29:3d:1b:81:71:57:88:96:88:28:1b:3e:66:f8:4c:01:bd:8b:
22:d6:49:f4:3d:79:1c:75:af:12:29:33:d5:08:80:d8:3a:4c:
84:01:26:8f:90:f7:25:9b:68:35:25:f8:c6:c1:1c:25:ae:47:
ac:b7:a4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:23:53 2026 by rpki-client