Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/678EC33E850811F18859031ECF1D38B0.roa
File: 678EC33E850811F18859031ECF1D38B0.roa (raw, json)
Hash identifier: SvhRflOF5iZVCMttqFmEj71bs46eECn6uqQpd1DAspc=
Subject key identifier: C3:3A:0C:20:3E:87:A8:93:06:8C:6E:04:D1:85:61:0C:40:CF:C2:5A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DAA0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/678EC33E850811F18859031ECF1D38B0.roa
Signing time: Tue 21 Jul 2026 13:30:57 +0000
ROA not before: Tue 21 Jul 2026 13:30:53 +0000
ROA not after: Wed 09 Sep 2026 13:30:53 +0000
asID: 32043
IP address blocks: 154.82.162.0/23 maxlen: 24
154.82.164.0/22 maxlen: 24
154.95.6.0/23 maxlen: 24
154.95.8.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121504 (0x1daa0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 13:30:53 2026 GMT
Not After : Sep 9 13:30:53 2026 GMT
Subject: CN=6a5f7491-5d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7e:1f:00:d3:9a:6e:7a:91:c0:05:c4:7c:fd:
79:df:6f:be:a8:48:15:ac:16:b9:9c:e6:17:9f:3b:
81:99:c9:5f:d8:ac:d5:57:99:ce:44:87:bd:da:9f:
31:a2:da:ef:98:ea:8c:d0:22:27:91:13:28:c4:6f:
e4:c7:d2:30:ce:a1:b5:de:57:71:59:47:3c:31:90:
10:93:ad:c6:0a:69:0b:95:5e:bd:b9:76:8b:48:d8:
13:7f:86:45:45:dd:cd:c6:97:3c:48:65:d0:73:2a:
96:f8:b9:3a:eb:e7:ae:2c:a6:83:75:4e:2a:2c:50:
94:f3:1b:55:44:56:80:07:9b:13:c1:d5:a7:56:e1:
a2:c4:41:94:03:ea:03:7c:b9:3f:ac:4b:35:ec:63:
60:6b:96:9f:27:43:6f:8d:df:b6:56:d0:9a:65:d8:
19:a4:7d:11:ad:73:e2:3e:a8:c4:b0:ec:eb:8f:9a:
90:04:b9:da:6c:7c:9e:bb:7b:37:24:b9:86:a6:c0:
06:b8:6f:a8:8f:37:43:bd:da:8a:ce:61:00:1e:30:
6f:54:48:2b:29:10:6d:ef:7e:97:b6:31:fe:6d:13:
6a:4c:23:9f:e0:7e:02:fd:91:65:78:f0:7b:97:49:
e3:ad:13:cb:61:9f:f9:55:bf:74:72:2a:e0:7e:a4:
c6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:3A:0C:20:3E:87:A8:93:06:8C:6E:04:D1:85:61:0C:40:CF:C2:5A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/678EC33E850811F18859031ECF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.162.0-154.82.167.255
154.95.6.0-154.95.9.255
Signature Algorithm: sha256WithRSAEncryption
2e:b3:5e:b5:86:90:db:4b:94:b5:79:fa:68:d9:c1:f8:77:bd:
89:b1:1c:e3:d3:5a:40:ad:64:f1:84:ac:cf:83:aa:c6:46:d1:
4f:57:c7:8a:e6:b0:64:1a:a0:4a:a8:26:51:d7:4d:46:6f:6a:
ac:28:64:51:96:11:86:c5:cf:59:bb:7f:b8:9c:5b:02:2d:46:
60:e7:c9:37:bf:89:58:26:17:38:83:90:31:f8:a9:93:f0:3e:
a6:ee:b4:17:e0:cd:60:5f:31:8a:7c:61:55:74:f2:be:1a:42:
08:30:9c:30:bf:e3:71:4a:84:9d:bd:ae:a6:53:20:22:99:79:
7a:bd:df:91:e5:c8:09:2d:75:49:e9:a3:6a:1e:22:99:d2:a4:
07:e2:2f:21:d9:71:e4:b5:00:e2:9b:34:13:be:0d:bf:f1:dc:
a1:ce:10:a4:d0:16:31:e2:fb:55:50:50:98:bb:1a:5f:b9:77:
74:b4:6a:f6:33:a3:c3:d5:d6:ad:11:bf:b2:40:76:62:ad:1a:
2a:a7:18:ba:b8:bf:79:8e:6c:94:e2:66:bf:82:7a:bb:f4:f0:
89:11:ed:f3:01:6a:9e:e5:6d:40:db:7f:cf:d7:67:d6:24:be:
c6:17:83:be:0f:c9:ee:cc:eb:6e:33:7c:9e:52:cc:d7:79:ba:
33:be:e2:73
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 16:08:20 2026 by rpki-client