Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F3CE53C7A3911F1BC3B51CCCE1D38B0.roa
File: 5F3CE53C7A3911F1BC3B51CCCE1D38B0.roa (raw, json)
Hash identifier: wzMQYNwZh64aaQDBbd6Nbj0wGhhq7J+l46Fm3+vBTJg=
Subject key identifier: 86:04:D6:55:7B:BD:13:D9:D2:B9:3C:CD:C0:D0:DD:0B:32:B7:E4:F1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D779
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F3CE53C7A3911F1BC3B51CCCE1D38B0.roa
Signing time: Tue 07 Jul 2026 19:23:46 +0000
ROA not before: Tue 07 Jul 2026 19:23:40 +0000
ROA not after: Mon 03 Aug 2026 19:23:40 +0000
asID: 17497
IP address blocks: 154.211.168.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 08:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120697 (0x1d779)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 7 19:23:40 2026 GMT
Not After : Aug 3 19:23:40 2026 GMT
Subject: CN=6a4d5242-348e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cf:94:f4:9c:be:08:68:fd:ab:9f:8b:b4:92:
b5:f4:17:7f:a1:81:f1:c1:3c:86:c5:a1:ae:f9:6e:
d8:cd:da:17:c8:23:bd:ee:94:7d:eb:f8:78:88:bd:
4a:11:96:d2:22:88:e3:20:fc:64:ff:45:87:3d:fb:
3c:f5:bf:34:57:19:58:9c:28:57:98:29:0c:35:45:
55:32:37:20:25:9f:8b:70:87:59:65:c9:8f:be:14:
c1:d4:93:b1:3e:95:46:59:32:11:ad:9b:c9:33:0d:
5f:d4:cf:85:8b:a2:05:42:11:69:a9:cb:6e:5a:6c:
4b:99:e8:dd:f9:3e:6b:60:b2:28:85:4d:b2:ba:8c:
e1:93:77:c4:12:39:b5:63:55:55:8c:d2:cc:a4:9f:
42:0c:1e:8e:9a:cd:0c:65:e4:b7:87:f4:1b:ac:32:
d8:30:db:fe:5a:e3:31:05:0a:50:b2:80:23:b9:40:
d0:8c:a7:a8:3e:4f:2f:94:b5:e8:0e:cd:21:2b:bd:
46:55:f3:eb:ca:94:22:db:d8:c9:c2:2d:a6:70:5b:
fd:7b:ba:ab:33:d9:66:cd:af:34:de:85:8c:6c:d4:
4b:17:f5:80:e1:34:bb:f7:75:ee:c6:93:f9:fc:8a:
f4:e6:e5:7e:c7:c5:42:f8:66:d5:97:fe:45:1d:d6:
01:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:04:D6:55:7B:BD:13:D9:D2:B9:3C:CD:C0:D0:DD:0B:32:B7:E4:F1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5F3CE53C7A3911F1BC3B51CCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.168.0/21
Signature Algorithm: sha256WithRSAEncryption
1a:73:53:a4:cc:21:82:7a:c8:51:06:28:d5:a6:d6:d6:63:30:
ff:d1:60:c4:9d:64:d6:32:3e:db:f4:3d:be:86:a2:89:c3:2a:
a4:5e:72:ee:2d:d8:80:2f:a8:c8:b6:c6:10:36:b6:6d:75:03:
71:0f:56:13:6f:14:b3:21:8a:d8:1d:85:c9:b5:1f:3c:a0:91:
db:3a:5b:a0:fe:f2:e7:36:49:25:d6:3e:82:73:ea:c2:ba:f4:
95:35:76:47:5f:3c:be:b5:0f:03:78:2f:60:98:6a:b9:f1:4c:
02:74:f8:1f:a3:b8:9b:e6:73:68:4f:d1:01:57:97:12:c3:87:
35:42:9c:58:6d:13:83:08:21:29:ef:48:01:77:00:09:c6:a7:
1d:a7:32:bd:bc:3f:5e:13:28:31:60:92:b2:15:19:48:e0:95:
17:94:0e:37:02:45:fc:6a:09:f2:9b:d9:59:5c:cb:9e:de:30:
bb:db:5d:7e:03:7c:e1:75:2d:15:cd:5e:41:03:2b:b3:fe:1a:
aa:fe:b5:36:09:8f:8c:9e:76:a3:31:9b:ab:f7:7a:24:8a:e1:
3a:f7:b0:c7:c0:b2:54:d2:54:df:be:58:21:44:a6:0c:ec:6d:
08:da:ec:f5:75:81:7b:7b:f4:22:83:91:20:52:ee:3d:4d:ed:
df:12:04:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:48:36 2026 by rpki-client