Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6607F246835B11F1985EF7EACE1D38B0.roa
File: 6607F246835B11F1985EF7EACE1D38B0.roa (raw, json)
Hash identifier: xMBrobxn2tiLKpZVBKM9iM2apLRDejgSI+60+HDQNT0=
Subject key identifier: 5C:31:EB:13:E3:27:99:DB:68:62:C8:45:B7:62:DF:55:F5:AC:36:6B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D9AF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6607F246835B11F1985EF7EACE1D38B0.roa
Signing time: Sun 19 Jul 2026 10:20:00 +0000
ROA not before: Sun 19 Jul 2026 10:19:57 +0000
ROA not after: Sun 16 Aug 2026 10:19:57 +0000
asID: 271916
IP address blocks: 154.205.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121263 (0x1d9af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 19 10:19:57 2026 GMT
Not After : Aug 16 10:19:57 2026 GMT
Subject: CN=6a5ca4d0-68d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:59:0e:ea:ba:89:cf:8c:5e:f3:35:fc:57:7d:
f2:46:f4:ca:2e:2a:7e:57:ba:fd:65:5c:c2:11:85:
06:1d:19:37:4a:a1:2e:e2:8e:11:91:48:e3:f6:78:
70:e3:41:0b:8f:9c:47:45:da:19:bf:4a:24:a6:ac:
bb:80:b7:f2:e3:41:35:2d:d3:90:36:cd:e6:88:b7:
3a:ef:a9:15:ca:d5:3f:8c:a2:01:f0:4d:97:ea:67:
52:2f:07:83:fc:fd:c7:b9:17:3c:42:08:66:f2:cb:
5a:89:e4:a8:1e:e9:a1:65:d8:be:ca:6a:9b:49:f7:
d0:db:7c:26:8d:7b:64:07:d7:df:f5:a6:c3:28:70:
c0:cf:14:d2:d5:7c:57:b3:e5:29:a7:72:92:fe:72:
be:f4:32:30:2d:15:c3:a2:ac:78:b3:5a:6f:09:c2:
fa:da:ff:53:31:84:2a:88:3e:58:42:1d:a0:27:f9:
57:68:fd:f2:55:2a:73:48:47:73:fe:a8:42:f6:95:
90:e4:aa:4f:65:51:03:27:c7:64:ea:b5:53:53:7f:
18:53:31:39:dd:61:c9:8e:5e:c1:8f:0e:81:99:1c:
2f:ea:4d:ef:c7:49:6c:15:4e:73:63:58:b3:a2:8f:
82:c7:5f:2d:38:dc:46:6a:76:5e:7e:b6:f4:ac:57:
40:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:31:EB:13:E3:27:99:DB:68:62:C8:45:B7:62:DF:55:F5:AC:36:6B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6607F246835B11F1985EF7EACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.24.0/22
Signature Algorithm: sha256WithRSAEncryption
80:f3:11:37:8f:2a:45:fc:54:c9:6e:92:28:90:d1:2e:2c:58:
b9:9e:cd:2e:a5:6b:26:b1:4e:e3:33:40:f0:e8:b5:74:54:de:
1b:37:01:ba:49:1c:c8:b9:c7:83:a2:10:74:f1:00:84:1b:72:
c4:10:00:0a:a0:87:fb:cf:f4:d6:f7:de:f7:e1:17:60:d8:66:
95:20:6e:41:10:22:74:44:ac:9a:0c:76:41:13:24:f9:0a:93:
35:b3:7d:7b:1c:b2:7f:da:eb:5f:58:8a:a8:7d:bc:c9:ee:81:
3d:f0:89:4c:49:5f:a0:f9:f8:2d:2b:15:e3:b2:7a:ea:e3:36:
a8:13:f6:5b:52:a0:72:0d:39:19:c1:9f:9e:44:fb:44:0b:23:
19:4b:b4:7b:d6:86:54:6f:64:ed:94:6e:e0:c5:37:fc:f7:dc:
e3:e6:c1:40:7b:da:24:07:d6:60:f1:a9:fe:e0:35:03:c1:07:
9a:9e:a4:da:b8:f1:38:a6:55:54:4f:7b:46:b8:2f:ec:45:16:
14:c0:cc:3d:ca:30:bb:61:67:22:cb:d2:15:22:6e:71:32:2c:
03:95:e1:8a:7f:63:d6:92:00:3e:09:d6:1c:2a:ad:06:1b:95:
59:b9:22:f9:2a:07:06:ae:a4:0e:d5:1b:23:63:96:d7:eb:26:
1a:24:7b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:07:34 2026 by rpki-client