Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60820F42801C11F1BB9B88E6CE1D38B0.roa
File: 60820F42801C11F1BB9B88E6CE1D38B0.roa (raw, json)
Hash identifier: HUFvIJlGavpl+hU9mYbkfTjcCcV3o+NJEv2M5RFr0o0=
Subject key identifier: 22:01:B9:BD:CB:5A:0C:10:24:15:C1:12:EB:DA:19:23:D4:67:01:A3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D903
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60820F42801C11F1BB9B88E6CE1D38B0.roa
Signing time: Wed 15 Jul 2026 07:11:20 +0000
ROA not before: Wed 15 Jul 2026 07:11:15 +0000
ROA not after: Fri 14 Aug 2026 07:11:15 +0000
asID: 147176
IP address blocks: 154.197.102.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121091 (0x1d903)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 15 07:11:15 2026 GMT
Not After : Aug 14 07:11:15 2026 GMT
Subject: CN=6a573297-295f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:51:8c:07:42:db:1e:b3:ae:63:6e:d7:ad:97:
87:cd:8b:df:af:8b:a7:58:92:19:2e:43:53:d0:ef:
67:0a:4d:b5:b8:37:68:40:3f:4c:7c:41:ae:9e:ad:
48:72:33:46:9c:6b:ea:5b:57:61:12:a2:2f:3b:70:
05:4d:ff:56:11:03:8a:8f:0c:4a:50:b1:a0:ef:21:
b5:08:46:02:9d:09:02:c2:30:d6:cb:08:14:51:e6:
51:bc:1d:3f:01:b2:dd:c1:21:75:1e:54:89:ea:a1:
e6:a3:92:b4:0f:61:42:63:12:1c:e3:67:5c:9a:0c:
72:5e:28:92:c5:aa:66:d1:dd:00:22:5b:c1:eb:02:
02:c8:e7:80:85:3d:f9:5b:ef:19:6a:64:5c:9c:9d:
7b:e7:e3:b7:ef:90:a1:6a:aa:2d:3f:af:2d:47:ee:
9b:26:ba:2f:d9:74:d9:e4:12:9a:5d:37:0c:2f:6b:
a8:ea:b9:23:55:28:9a:31:9b:17:1b:79:3f:2a:01:
99:33:ed:07:7f:bf:e8:ba:ac:2d:76:9a:81:de:57:
0e:90:b8:2e:06:ec:48:89:94:29:03:05:30:af:a1:
55:4d:3a:a4:a3:17:d3:7f:09:5f:d8:cb:06:97:a2:
91:4b:90:37:ee:0c:ff:eb:c8:96:ba:cc:4d:7b:3e:
cb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:01:B9:BD:CB:5A:0C:10:24:15:C1:12:EB:DA:19:23:D4:67:01:A3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/60820F42801C11F1BB9B88E6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.102.0/24
Signature Algorithm: sha256WithRSAEncryption
be:5f:81:50:ac:16:22:2e:d8:6d:1c:7d:b5:71:78:cf:96:54:
df:f6:cd:23:c7:97:9e:23:c0:bf:a8:74:35:02:08:e7:76:d0:
f6:50:10:15:ca:20:ce:9a:1e:6f:23:7d:90:a5:b0:c9:52:11:
e0:ff:7f:1c:b6:f2:f6:b9:90:6b:62:f7:aa:19:4d:d8:6f:ef:
b3:94:89:0c:b7:5b:76:01:3c:a2:8f:d5:f2:5c:0c:8b:6c:34:
40:3e:56:f6:0a:6a:1f:6f:17:9d:03:17:a5:aa:f4:af:8b:f4:
9f:7d:aa:61:20:43:98:1a:67:c4:e0:fa:62:c1:ea:40:f2:c4:
ff:76:55:ea:63:74:bd:29:d3:32:6d:5e:a5:27:1d:b7:61:c2:
9e:23:1e:7d:68:6c:dc:66:53:21:30:ec:0d:12:5d:fb:15:35:
7e:48:1a:77:7b:89:66:c6:57:20:a7:74:34:19:e1:18:cc:a7:
57:5e:9e:58:14:21:99:29:d4:06:e7:60:b9:6d:0e:e1:90:a9:
4d:6d:be:b2:a2:3e:63:68:ed:1a:37:6c:19:b8:d5:9a:6a:18:
af:e6:88:bc:63:ff:f5:4c:85:50:af:bf:24:21:aa:b3:96:6b:
18:39:d7:bf:5b:0b:c8:33:e5:28:78:a8:10:a2:59:a6:32:5b:
c0:4b:bb:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:42:29 2026 by rpki-client