Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7097AE007DA611F1B9E8EBEBCE1D38B0.roa
File: 7097AE007DA611F1B9E8EBEBCE1D38B0.roa (raw, json)
Hash identifier: n//3aqLlHycbwNGTfR0ujcskFUjNogHSCaRPMOenNk4=
Subject key identifier: 1C:B7:33:55:0D:6D:5C:C7:8A:68:0F:7D:62:22:9D:F3:BC:E8:47:78
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D881
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7097AE007DA611F1B9E8EBEBCE1D38B0.roa
Signing time: Sun 12 Jul 2026 04:02:04 +0000
ROA not before: Sun 12 Jul 2026 04:01:59 +0000
ROA not after: Wed 12 Aug 2026 04:01:59 +0000
asID: 17497
IP address blocks: 154.196.184.0/21 maxlen: 24
154.211.128.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120961 (0x1d881)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 12 04:01:59 2026 GMT
Not After : Aug 12 04:01:59 2026 GMT
Subject: CN=6a5311bb-83cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:51:f1:46:db:ca:47:ac:0d:66:c4:aa:9f:99:
c7:c8:2f:40:16:1b:d0:a1:56:79:a8:3b:69:0e:ae:
70:ce:47:7b:ef:ef:f7:97:85:10:e9:d7:c8:6d:f8:
76:80:18:8d:e8:ed:90:33:9e:4c:c5:7e:ce:90:d2:
cc:e1:4b:13:5c:db:08:c1:d5:5a:45:cb:73:78:b5:
6d:cc:da:f5:3e:bb:93:ee:1b:69:d5:f3:0d:11:87:
98:45:8b:f0:e7:e6:e1:dd:66:62:92:ae:52:53:8c:
59:bc:02:1a:e1:bd:88:01:5c:6f:65:83:72:b8:76:
7a:2d:54:da:a9:cc:11:de:be:92:bb:da:0b:18:dd:
aa:ca:0b:6b:e4:7e:87:57:5c:ac:d7:13:9b:d2:ad:
f6:98:ec:c2:2a:85:9d:bf:e0:8f:7d:ca:8a:80:78:
36:6e:aa:7b:f3:18:88:23:b7:ec:3a:ae:a1:f8:57:
49:ec:66:da:b7:89:a4:46:34:94:97:41:96:2b:0e:
6b:8e:72:81:e9:46:ed:92:bf:c6:d8:1b:a3:c3:05:
ee:e4:ca:23:bc:65:b1:72:1a:9c:75:93:5e:7f:4a:
47:2c:f0:ce:e6:16:51:77:20:96:24:5d:1a:ed:84:
a4:09:e5:94:34:ca:bb:6f:14:06:9d:e2:ce:56:dc:
3b:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B7:33:55:0D:6D:5C:C7:8A:68:0F:7D:62:22:9D:F3:BC:E8:47:78
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7097AE007DA611F1B9E8EBEBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.184.0/21
154.211.128.0/19
Signature Algorithm: sha256WithRSAEncryption
22:30:20:a2:63:4b:ff:90:30:5e:1b:86:79:1a:96:6d:3b:b8:
19:27:f4:74:a8:e0:3a:0d:f0:de:cc:d6:e3:07:86:63:fd:f0:
d3:7f:c9:53:88:44:64:43:21:23:3e:91:0b:67:67:b5:0a:72:
59:cb:0c:a3:8f:8c:df:63:fc:f0:98:d8:8c:ec:e1:1a:7c:24:
23:06:d3:ce:60:a5:79:c2:b4:5b:f9:02:48:82:61:89:c0:fa:
2c:08:5c:56:22:f2:5e:19:cb:a7:34:f1:09:19:d3:9a:4f:ba:
de:72:41:ee:bf:a4:45:71:4c:e8:72:89:d0:f2:9a:fe:89:bc:
aa:2a:a9:00:b2:e8:cb:ec:0b:f4:91:f9:5c:92:ec:bd:72:2b:
03:0e:a6:fe:78:67:d3:6e:0d:db:e2:ae:a2:81:6a:ce:65:c3:
b9:a6:0b:14:4e:ac:f7:82:b0:04:b6:44:09:dc:f0:f8:d9:2f:
34:e2:d0:ca:a5:e0:d2:aa:14:da:7f:fc:10:ba:c0:a5:83:0d:
03:99:84:d8:4a:e0:7d:d4:75:93:d1:b1:7f:3d:65:f5:e4:89:
ea:ea:a6:b6:54:5a:44:9f:7e:85:f3:8f:43:cc:18:cd:bc:5f:
ec:18:6f:44:80:34:84:82:d6:16:e1:a9:8c:c4:2b:4e:86:7b:
4f:d2:fe:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:11:43 2026 by rpki-client