Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/71A4442A852611F1AA787CD1CE1D38B0.roa
File: 71A4442A852611F1AA787CD1CE1D38B0.roa (raw, json)
Hash identifier: ZvgxreHHVJYsIbw4MYduGg+aWjYRJ+ZU+ig0owcVBBQ=
Subject key identifier: A2:3A:A3:E0:39:78:42:10:0C:FE:35:DC:3E:5C:76:2A:58:06:3B:FF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DAAE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/71A4442A852611F1AA787CD1CE1D38B0.roa
Signing time: Tue 21 Jul 2026 17:05:59 +0000
ROA not before: Tue 21 Jul 2026 17:05:55 +0000
ROA not after: Sun 23 Aug 2026 17:05:55 +0000
asID: 13335
IP address blocks: 154.84.164.0/24 maxlen: 24
154.86.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121518 (0x1daae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 17:05:55 2026 GMT
Not After : Aug 23 17:05:55 2026 GMT
Subject: CN=6a5fa6f7-0579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6e:36:6b:cc:af:c2:3c:3a:84:37:c2:e8:0d:
88:96:1a:d5:5a:7b:50:7f:41:26:da:7d:b4:b7:56:
c5:0d:04:2e:20:17:55:6e:18:cf:a9:0d:13:70:f7:
12:67:6c:0b:dc:80:e6:81:72:f7:40:97:7e:de:82:
ca:7b:32:83:e9:06:40:25:ab:90:73:4b:c9:c6:2e:
ec:34:8c:66:f1:c3:a4:08:73:50:4f:d1:10:fb:82:
34:93:99:f1:9f:0c:f8:72:87:20:3f:27:14:44:1f:
92:40:90:66:ae:24:25:43:7c:2f:2c:5b:06:94:d4:
8b:af:fd:97:31:76:1b:6c:04:3a:42:32:df:ca:33:
8a:6b:51:62:1b:c3:ac:f5:22:40:de:4a:f9:1a:94:
e6:8b:cd:df:7f:cf:53:66:55:b2:4b:83:79:c6:1d:
d4:48:65:8d:70:f1:e8:c1:33:2b:fb:9f:a0:a9:31:
e8:ef:79:54:49:7b:4e:fc:b4:46:a1:3e:4e:fe:45:
ed:6f:03:a5:9c:4a:64:37:f2:c1:b0:1f:ef:c0:bf:
43:b3:18:35:03:b3:ed:fc:2b:32:03:55:04:2a:d7:
7e:44:30:99:4b:49:fc:77:35:20:78:e8:fe:9c:d0:
7f:c6:02:52:55:c5:9a:60:01:e6:61:54:07:84:61:
10:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:3A:A3:E0:39:78:42:10:0C:FE:35:DC:3E:5C:76:2A:58:06:3B:FF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/71A4442A852611F1AA787CD1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.164.0/24
154.86.118.0/24
Signature Algorithm: sha256WithRSAEncryption
b4:e1:6b:88:82:53:47:89:0f:1e:e8:89:2e:0b:60:18:c6:e7:
ce:c9:c6:fe:1f:c9:65:c2:30:f9:a5:e2:4f:6d:94:ff:e6:16:
b3:3a:46:91:8a:b0:07:8a:e9:7b:ae:fa:23:1d:7b:ec:7d:30:
99:5e:e2:e4:f1:8c:a4:12:a3:ec:e1:1e:eb:69:92:a4:9c:f8:
f9:38:c9:48:5a:c2:77:2e:34:f5:47:44:da:c1:e9:e8:7b:03:
0d:99:56:0b:f8:31:e2:ea:ac:5f:8e:88:e5:9e:d0:0d:8a:df:
a2:00:81:e8:66:a3:58:bf:d2:e2:c1:21:21:9a:6d:88:b7:d4:
19:0f:c6:0d:c8:bf:af:b2:55:5b:41:5a:fe:02:54:d8:c9:f1:
eb:26:c7:05:50:7f:72:45:c4:96:b7:a0:7c:93:71:cd:b3:bb:
2f:33:aa:f9:c0:7c:5f:1d:32:2d:15:35:d3:32:f3:88:8d:13:
f3:eb:d9:5a:a0:2e:70:58:c1:56:29:e3:70:a1:8c:41:ff:9f:
d8:c3:b5:c7:44:c7:b6:bd:4c:cf:d0:66:9d:82:25:d7:12:7b:
1e:2f:91:27:e2:c0:08:c1:09:36:2d:75:76:0a:1c:d0:06:b4:
e8:4e:3e:4b:b7:1c:3d:93:33:9d:85:1d:1c:97:03:ce:be:a6:
6c:19:4c:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:39:06 2026 by rpki-client