Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5293C89E7FAE11F19AC3ADBACE1D38B0.roa
File: 5293C89E7FAE11F19AC3ADBACE1D38B0.roa (raw, json)
Hash identifier: sddVNYWgVTkgqweg5JxX8+VQVAvzqeCwsjEXehrHp48=
Subject key identifier: 7B:C2:5D:51:AD:92:72:53:17:BF:AC:DC:64:6B:63:4E:2C:0C:B3:7A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D8F0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5293C89E7FAE11F19AC3ADBACE1D38B0.roa
Signing time: Tue 14 Jul 2026 18:03:31 +0000
ROA not before: Tue 14 Jul 2026 18:03:27 +0000
ROA not after: Mon 17 Aug 2026 18:03:27 +0000
asID: 22773
IP address blocks: 154.202.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 08:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121072 (0x1d8f0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 14 18:03:27 2026 GMT
Not After : Aug 17 18:03:27 2026 GMT
Subject: CN=6a5679f3-0e28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2d:03:c2:4b:02:47:ca:fd:68:1b:f4:85:23:
4f:3a:a0:91:8c:ff:76:87:e7:60:73:98:2a:2c:fa:
87:b9:1f:a7:d1:db:60:b1:b4:eb:51:56:51:18:b5:
4e:06:2e:2a:fb:16:1e:f2:70:b4:d7:46:e7:86:50:
1d:ef:f7:ac:f3:d3:c4:57:1d:2f:48:67:5e:e4:91:
3f:62:39:8e:6a:02:5c:31:36:17:d2:0b:fa:b8:39:
4c:f9:2d:37:00:e6:af:db:7a:81:70:5f:77:f9:82:
6f:87:aa:48:f4:75:7b:0e:38:14:7e:67:fd:56:b5:
c5:c0:81:76:ce:ad:2f:f4:c4:94:0b:58:11:b1:44:
44:21:65:0e:4b:47:e4:57:b1:aa:0c:a0:08:ab:da:
06:9d:0a:6f:ed:bd:06:6a:bd:04:15:00:98:5f:20:
9f:59:49:c4:f0:76:2e:09:f2:0a:ec:f9:45:f2:a7:
eb:75:4c:e4:2f:9d:00:7a:da:2a:8f:87:25:2a:ff:
c5:a1:ea:32:bc:a8:c2:6c:fe:41:db:50:0a:24:d1:
31:7f:22:58:97:3c:18:98:3c:e7:07:25:59:14:3b:
ae:07:d1:1f:ad:cc:2c:97:53:74:bf:13:1e:a5:8a:
78:78:e1:ad:49:dc:14:7a:9e:0f:43:ba:2d:b5:96:
61:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C2:5D:51:AD:92:72:53:17:BF:AC:DC:64:6B:63:4E:2C:0C:B3:7A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5293C89E7FAE11F19AC3ADBACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.99.0/24
Signature Algorithm: sha256WithRSAEncryption
90:89:9d:ff:65:47:21:40:24:e8:3c:8c:7d:a5:85:6a:ca:2b:
f9:15:e8:63:e0:5a:f2:71:1e:06:32:08:41:db:20:f2:d3:54:
47:a0:87:f5:f1:4f:a4:59:a8:ac:30:3e:57:19:3d:59:e5:0d:
53:d0:d7:88:ba:b6:25:17:84:1a:73:d5:2f:b4:b7:8d:8b:05:
47:0d:a0:ee:e0:8d:58:38:48:61:1c:5f:43:85:66:05:06:72:
14:75:7e:01:d4:e1:98:fc:44:50:e6:d2:8c:66:2a:93:23:5f:
50:5b:54:11:58:72:26:86:52:b0:85:5d:9a:74:60:63:17:23:
de:9b:3e:81:02:ba:23:be:dc:eb:97:a5:b8:7c:dd:b1:38:54:
0b:b6:3a:72:c2:3c:aa:0d:53:93:93:47:a0:9f:80:71:f2:87:
2a:e8:f2:f5:d4:4b:c9:f7:07:4a:45:c1:5d:46:b7:c4:3b:af:
f3:35:dc:72:b7:06:f5:78:c5:e1:c1:c6:b7:6d:f9:5c:68:dd:
3a:b3:41:1b:af:5e:ef:b9:33:aa:35:fc:f1:9d:13:ae:5a:1c:
8d:8d:c4:8e:51:6e:40:e3:f6:a8:25:28:d7:cf:cc:97:74:76:
9b:cb:46:5e:16:91:bf:1f:11:26:32:fb:3b:7e:13:4f:8e:21:
6d:c0:fd:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:35:00 2026 by rpki-client