Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/71B6B2046FC811F1B6DC1EDCCE1D38B0.roa
File: 71B6B2046FC811F1B6DC1EDCCE1D38B0.roa (raw, json)
Hash identifier: z877+K2Eys+oSjZh+NzmjLwSUjSqJn3lOhUn6nkr0Aw=
Subject key identifier: ED:2B:A4:C5:1E:28:D3:36:A6:85:CE:FA:9D:59:20:01:81:25:1E:5A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D4D7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/71B6B2046FC811F1B6DC1EDCCE1D38B0.roa
Signing time: Wed 24 Jun 2026 12:30:12 +0000
ROA not before: Wed 24 Jun 2026 12:30:07 +0000
ROA not after: Thu 30 Jul 2026 12:30:07 +0000
asID: 328608
IP address blocks: 154.91.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120023 (0x1d4d7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 12:30:07 2026 GMT
Not After : Jul 30 12:30:07 2026 GMT
Subject: CN=6a3bcdd4-1ae6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f3:04:d4:07:d8:7c:cc:b7:a9:b7:7c:0f:40:
66:60:b6:84:47:f5:b9:2c:02:9e:aa:0e:27:58:52:
d8:14:11:c0:4c:31:83:37:58:f8:87:30:f8:f5:53:
f3:cd:f7:cf:9b:68:e6:3d:44:da:ad:62:e9:4f:8a:
9a:63:79:9e:7f:df:71:38:f4:32:18:50:77:e7:7c:
2c:d0:0b:3f:a2:0e:89:34:59:41:8d:05:68:55:40:
22:a8:61:f7:2f:ec:e2:b4:fa:2d:1e:fc:b4:d3:f7:
5e:55:2a:4e:47:12:ff:8f:60:c5:36:db:38:70:7a:
f4:5b:73:36:d3:b1:4c:b6:b7:aa:51:ec:f4:8d:ee:
76:21:5a:af:37:ad:9f:56:4f:22:4f:c9:7c:9d:87:
de:b2:46:53:a2:91:65:a0:f9:40:76:04:03:cf:a1:
7d:5c:80:a5:f7:ce:79:61:38:ca:07:f3:6a:1c:6e:
c2:d0:2c:e2:64:f1:1c:9a:59:67:d3:cf:d4:a3:3c:
83:37:24:4a:9c:b6:8d:18:b4:62:63:0d:ab:db:96:
08:2f:7a:0b:c5:55:90:fa:ea:16:68:9d:f7:99:de:
fd:83:b0:93:f5:18:fa:49:f1:dc:ed:bf:e3:ef:fb:
a6:22:59:c8:45:c2:b7:33:60:91:f3:ff:af:91:b8:
33:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:2B:A4:C5:1E:28:D3:36:A6:85:CE:FA:9D:59:20:01:81:25:1E:5A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/71B6B2046FC811F1B6DC1EDCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.37.0/24
Signature Algorithm: sha256WithRSAEncryption
83:3d:ca:b0:03:60:cc:6a:4b:e1:42:56:d6:eb:ff:9b:ec:2b:
82:bf:99:f7:e0:62:c5:3a:26:a2:5d:39:c8:d2:1d:c3:01:68:
1a:7d:f3:25:26:39:3f:30:15:ee:5b:35:3e:c0:86:db:31:b4:
18:94:c0:16:06:62:6d:85:80:1f:fc:fd:1f:c0:fd:1e:3d:75:
18:a5:bf:6e:df:12:69:61:db:75:e4:fb:42:3f:a7:39:d9:01:
6d:d9:f3:40:07:5d:9a:49:df:06:a2:bf:85:b5:5a:06:4c:80:
9d:aa:ad:4c:54:4d:fc:c1:2c:48:ba:3f:9f:46:5f:f7:12:8d:
a2:a4:7f:01:7c:7e:0d:a6:9c:05:ed:7b:dd:61:a2:68:dc:42:
b3:93:b7:6b:5f:09:72:50:eb:cd:ce:f6:70:37:00:75:86:7b:
46:39:c5:6e:26:da:5b:72:a7:af:81:04:84:4e:5a:1c:62:97:
fb:54:29:06:9b:3b:1c:38:13:0f:94:81:7a:06:04:3c:a7:8e:
a3:73:1d:92:59:dd:68:64:07:22:c1:88:3f:e0:76:1e:d8:62:
41:76:6b:22:93:e2:6c:6a:63:16:f3:fe:d6:ac:e4:b7:69:d9:
06:5e:c1:c9:03:11:ef:cc:bd:c5:a5:33:ad:21:6b:41:2a:d0:
0b:ca:0a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:31:40 2026 by rpki-client