Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A1219BA861911F1A2F80515CF1D38B0.roa
File: 5A1219BA861911F1A2F80515CF1D38B0.roa (raw, json)
Hash identifier: w79IJ03DfT7PpDqY476w0oAkKr8iu3mq7CeaXFo//4U=
Subject key identifier: 09:CF:9D:43:F4:A0:54:E1:BA:94:AF:66:A2:17:60:13:4B:8E:C3:50
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DAFA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A1219BA861911F1A2F80515CF1D38B0.roa
Signing time: Wed 22 Jul 2026 22:04:47 +0000
ROA not before: Thu 23 Jul 2026 22:04:43 +0000
ROA not after: Thu 27 Aug 2026 22:04:43 +0000
asID: 212238
IP address blocks: 154.208.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 08:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121594 (0x1dafa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 23 22:04:43 2026 GMT
Not After : Aug 27 22:04:43 2026 GMT
Subject: CN=6a613e7f-203f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e8:73:58:72:6a:e9:ca:4f:2c:57:bd:c8:fc:
61:b6:69:98:78:90:d7:79:e2:bd:c7:08:70:ec:b5:
ff:2a:67:da:24:73:51:94:03:ef:3a:ca:60:50:c7:
8c:c1:68:51:02:83:c5:6c:95:15:45:14:9e:53:31:
9b:ac:dd:1c:8c:b9:7f:d0:0c:26:a4:de:7d:88:57:
7a:61:21:ff:91:cc:00:6b:ee:44:a9:e5:27:99:8c:
32:00:2b:56:d2:47:48:90:9f:5c:25:a7:e4:c0:2e:
f6:b4:ce:84:15:4f:e1:46:67:52:72:2e:79:9c:36:
76:4e:fe:3e:a7:4d:7d:86:d1:cb:f2:95:e7:aa:05:
69:4e:50:c0:9e:27:3f:f5:9c:30:ff:b7:a3:55:40:
9b:bc:b7:ad:ac:d2:8e:6f:d8:4f:aa:2c:e8:36:cb:
43:89:6f:1c:43:14:53:0f:66:75:6a:a4:b3:21:c7:
bb:8f:38:e3:72:5c:b8:d2:12:7e:8e:bb:64:a2:ad:
aa:78:d0:3e:ab:de:d4:fd:75:39:74:72:55:e9:61:
25:4e:89:88:d0:37:05:c9:c7:76:46:df:63:25:19:
66:cd:b2:ae:68:46:1c:20:6b:76:3e:0f:a3:5b:fb:
9b:43:59:85:e6:f4:e5:72:2b:62:0d:a3:90:db:d4:
98:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:CF:9D:43:F4:A0:54:E1:BA:94:AF:66:A2:17:60:13:4B:8E:C3:50
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5A1219BA861911F1A2F80515CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.66.0/24
Signature Algorithm: sha256WithRSAEncryption
22:e2:47:d1:0a:c9:01:5b:69:ab:b3:69:5e:6e:7e:2d:88:8b:
92:28:d6:19:ad:9f:31:07:c0:d8:2a:1d:29:42:c7:f9:ca:0f:
89:85:26:45:99:0c:1a:e4:d7:82:4f:db:f7:cd:ce:17:0e:e7:
95:3d:ad:2b:48:13:8a:12:5b:50:96:ff:b4:a1:40:48:af:9e:
c6:f1:e5:37:a4:d0:59:0b:70:ef:c3:ed:1c:e8:8d:97:fe:13:
32:d9:78:e0:d7:82:55:d7:0f:64:45:8c:94:35:00:2c:c6:bd:
a1:c2:de:8d:1f:e2:06:52:1f:34:7a:36:ed:2c:3a:9e:40:1b:
20:04:e9:45:77:41:27:92:fb:36:f1:b0:90:59:23:ec:db:ac:
ca:96:88:ef:fa:88:a9:78:d3:ee:04:3f:85:94:5b:66:96:11:
4a:a2:c4:bc:16:49:83:45:c6:45:a3:9a:45:c0:34:de:0c:38:
b9:b2:32:a5:3d:63:dd:c4:3a:1f:28:99:4c:9c:de:ed:d1:92:
f1:81:2b:fd:df:0b:ab:77:4b:0e:f3:b6:ee:2d:87:f0:7b:93:
6f:9c:3a:5e:ba:2b:8f:1f:8c:65:6c:56:05:bf:d0:65:17:b5:
e6:21:93:c6:5b:57:ec:22:3f:28:b1:ab:bc:d9:b8:11:08:3a:
a4:e8:d4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:17:21 2026 by rpki-client