Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69BAAA807E0311F1B19FC91ACF1D38B0.roa
File: 69BAAA807E0311F1B19FC91ACF1D38B0.roa (raw, json)
Hash identifier: R+BlfEixLlqdTNvps/uAtQRlPhlW2aB7d/yaND48tsw=
Subject key identifier: 64:BD:F7:E6:53:BE:48:91:6D:EF:EC:DB:8E:3F:F3:59:4E:C7:7D:33
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D893
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69BAAA807E0311F1B19FC91ACF1D38B0.roa
Signing time: Sun 12 Jul 2026 15:07:35 +0000
ROA not before: Sun 12 Jul 2026 15:07:30 +0000
ROA not after: Thu 13 Aug 2026 15:07:30 +0000
asID: 10753
IP address blocks: 154.203.0.0/23 maxlen: 24
154.203.204.0/23 maxlen: 24
154.203.244.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120979 (0x1d893)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 12 15:07:30 2026 GMT
Not After : Aug 13 15:07:30 2026 GMT
Subject: CN=6a53adb7-f3e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:b5:1a:e5:27:7c:02:a3:85:c0:ad:5a:3f:f8:
ed:c7:7d:3c:7a:32:fb:df:db:82:a3:8e:72:36:a9:
81:0e:40:39:39:4f:84:4f:69:8f:82:ab:f7:3f:56:
d7:7e:9b:bf:de:f9:e9:a0:fd:7a:e2:99:41:b6:40:
4c:f3:71:11:32:a3:9e:bd:9a:6f:03:31:cd:63:f2:
bb:c7:d8:33:7d:38:89:de:dc:1d:54:1d:80:b1:fa:
7d:9c:17:8b:ea:4d:cc:94:71:30:96:fd:68:71:f5:
09:67:81:04:9c:01:03:b5:ae:48:cf:a2:03:0a:93:
d0:b4:10:f6:ef:5c:69:13:02:18:18:ff:ff:95:92:
3b:85:73:b1:00:d3:52:89:19:96:ee:69:e5:95:a9:
1b:6a:f6:8b:46:35:ce:27:3b:ad:a2:c7:ea:e2:70:
2c:4b:5e:96:2a:9c:1d:25:fe:21:b1:d4:a2:86:cb:
2e:db:28:8e:24:77:69:5b:2c:1e:bf:8e:33:fe:01:
50:a8:f7:12:e7:90:37:68:ba:03:48:da:be:f8:ab:
9a:fa:3a:8e:62:c5:f9:a5:c1:6d:9e:36:f3:3b:a0:
19:45:34:9f:38:3b:83:a5:4c:0d:8d:4a:74:64:74:
fc:1d:37:a5:33:b4:65:f8:e2:e7:64:56:15:e8:71:
4b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:BD:F7:E6:53:BE:48:91:6D:EF:EC:DB:8E:3F:F3:59:4E:C7:7D:33
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/69BAAA807E0311F1B19FC91ACF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.0.0/23
154.203.204.0/23
154.203.244.0/23
Signature Algorithm: sha256WithRSAEncryption
a4:4a:25:e6:ae:76:bf:ff:e1:02:da:52:6b:a1:d9:1b:84:b3:
c3:f0:89:ef:e5:a1:56:bf:06:4a:b4:49:87:b6:d2:38:97:54:
6a:6b:79:01:2d:ae:c2:02:44:2c:8e:35:1c:3c:81:de:ca:88:
39:84:1a:ad:2f:c4:62:dd:28:3a:ed:1f:88:33:25:f9:ca:bd:
bf:29:ef:79:d0:b4:a8:6a:2f:c3:39:fa:1d:06:7c:6e:47:b8:
27:ac:46:26:0d:fd:80:41:74:9a:9e:9f:2b:5f:25:22:76:30:
71:77:0f:15:a9:5b:30:99:49:f6:01:f4:0f:db:a0:1b:b1:46:
a8:a3:0e:92:40:b0:13:c6:cf:0f:83:0f:74:7a:f2:db:e6:30:
a0:78:9c:c4:88:b3:9f:38:68:f4:8c:0a:ee:ff:fb:a5:77:bd:
fb:12:7d:f5:5e:ba:bb:e4:2e:85:d8:38:7f:54:38:9d:60:9e:
42:aa:bb:12:6b:ba:e4:8e:61:3f:df:23:ae:fa:28:a3:b6:01:
10:30:3a:1f:5b:fa:9c:27:0e:07:0f:7a:91:88:71:91:b3:b5:
47:b9:6b:ca:18:f9:8f:3d:47:e7:d1:a7:4a:4e:e5:ee:11:f4:
0d:32:dd:fb:c5:fd:2b:85:38:12:97:2d:01:8c:ac:d9:3c:f5:
9c:a2:b0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:50:05 2026 by rpki-client