Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7809BFEA836211F1A068F114CF1D38B0.roa
File: 7809BFEA836211F1A068F114CF1D38B0.roa (raw, json)
Hash identifier: pdpdXwykfcFdL0DsyqBrC7TS/kvphZ3hv6yG/N91UWc=
Subject key identifier: FE:7A:0B:03:F0:1C:61:3D:5A:F1:6D:6A:50:88:72:7B:2C:65:5B:5C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D9BB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7809BFEA836211F1A068F114CF1D38B0.roa
Signing time: Sun 19 Jul 2026 11:10:37 +0000
ROA not before: Sun 19 Jul 2026 11:10:33 +0000
ROA not after: Thu 19 Jul 2029 11:10:33 +0000
asID: 17561
IP address blocks: 154.88.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121275 (0x1d9bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 19 11:10:33 2026 GMT
Not After : Jul 19 11:10:33 2029 GMT
Subject: CN=6a5cb0ad-f87c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0f:9e:3d:9e:a1:64:9c:99:a7:f9:02:f8:16:
03:64:54:11:56:6d:b4:24:42:5c:51:02:37:37:72:
91:4a:f0:17:28:22:df:38:20:7f:98:09:c5:da:c3:
d1:91:fd:e6:b0:ad:b4:fb:0c:e7:09:0e:ec:cb:11:
3f:bb:cc:b9:9c:a6:59:90:01:f7:af:ed:48:d2:e9:
bf:54:df:15:35:c9:57:61:44:5d:de:0f:6f:ca:00:
3b:25:84:d6:52:9e:7b:6f:ed:f3:f8:48:4e:2e:81:
e7:15:08:3f:08:56:d1:9b:69:01:0d:62:b9:0f:b8:
64:2b:ba:60:4e:e6:9f:20:c1:5d:2f:0c:ba:3b:58:
73:23:bb:09:7d:6b:81:52:5b:d2:46:96:c7:bd:11:
3e:03:18:53:57:1d:1b:a5:f6:9a:64:e1:61:ba:a2:
ac:01:d1:1f:ab:e3:f1:0f:d5:66:db:de:7a:b3:18:
3f:3a:9f:2b:d9:bc:28:b4:4b:96:8f:7a:cb:17:6e:
3a:92:7a:31:b9:48:eb:41:9a:9d:cd:e3:f3:99:98:
4f:75:73:09:d4:bb:18:07:e5:7f:2b:dc:d2:c2:a9:
76:4b:95:7a:51:1b:77:6d:ea:8e:a4:3c:2e:b4:28:
90:ac:92:b8:8c:f4:4c:72:47:45:a5:b7:0d:1a:a3:
20:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:7A:0B:03:F0:1C:61:3D:5A:F1:6D:6A:50:88:72:7B:2C:65:5B:5C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7809BFEA836211F1A068F114CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.53.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:59:db:7b:2f:e8:00:12:cd:62:fa:de:45:db:d1:48:9c:80:
9f:94:19:ae:12:50:29:eb:9e:f5:34:38:f2:18:b1:9d:c1:62:
7e:3f:62:d7:c2:5c:dc:be:07:b0:15:a0:b2:20:4e:2f:4c:18:
62:1f:ee:5f:82:c2:4a:2b:ed:3b:6e:a4:82:4c:4a:ae:f0:d9:
04:b9:63:72:5a:18:b8:a4:b0:de:ee:03:68:65:61:7e:64:82:
d8:7b:31:93:0c:17:bc:b1:49:4b:72:09:df:16:c3:91:07:9b:
de:37:00:55:d5:87:e6:7d:ec:69:1c:5a:08:3a:e0:37:7f:0a:
dc:f5:47:32:b8:41:3b:65:19:3a:cd:c4:ff:bb:91:df:d6:1d:
23:38:74:21:d0:77:b6:79:fb:a0:d4:65:f7:f9:98:82:2d:e7:
66:36:3b:f9:a0:aa:34:3b:bf:1f:dd:91:eb:18:15:c9:97:cb:
d7:d8:1e:ba:8d:4d:dd:de:61:86:f5:a2:57:93:c2:b7:73:4a:
dc:d8:b7:f2:1b:59:c7:81:d8:94:9c:8a:a1:e0:d2:08:df:c0:
bd:74:02:68:e6:a9:df:b7:c2:aa:e3:e2:87:05:ee:ca:3f:8a:
45:9a:a0:40:2a:2a:f8:d4:43:9a:10:53:9b:5e:1a:ab:a6:62:
c3:a1:60:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:28:40 2026 by rpki-client