Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/79261424801E11F1805EACF2CE1D38B0.roa
File: 79261424801E11F1805EACF2CE1D38B0.roa (raw, json)
Hash identifier: m6fAXeLDkqkyEklsPbQ1taK8jbwWRBMLHN2QqiNZOxI=
Subject key identifier: 3E:D5:84:BF:BD:C4:49:F6:A2:FD:AF:5C:AD:0B:FC:2B:11:4C:58:61
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D905
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/79261424801E11F1805EACF2CE1D38B0.roa
Signing time: Wed 15 Jul 2026 07:26:20 +0000
ROA not before: Wed 15 Jul 2026 07:26:16 +0000
ROA not after: Fri 21 Aug 2026 07:26:16 +0000
asID: 59711
IP address blocks: 154.83.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 08:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121093 (0x1d905)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 15 07:26:16 2026 GMT
Not After : Aug 21 07:26:16 2026 GMT
Subject: CN=6a57361c-01d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:70:47:b9:38:45:a1:3f:3b:90:21:1a:61:af:
74:56:8f:cb:9e:06:2c:d1:5a:5c:30:0c:02:c9:c3:
f7:d0:a3:36:dd:1a:ee:da:f2:94:bc:53:93:af:d3:
dc:ec:b5:d1:47:8c:22:5b:a7:0f:0b:b3:11:0b:d7:
3b:16:8d:3f:71:7d:3e:3b:eb:37:5c:0d:a4:1b:9a:
27:c4:23:a0:ab:df:06:e3:f1:a0:3a:c3:3e:1d:83:
06:53:e0:8e:8d:f4:12:75:22:55:fc:fa:18:ab:6c:
f3:89:2c:42:75:e3:51:fe:d9:5b:ec:9d:dc:73:1b:
65:c1:19:9d:dd:95:2d:d2:24:1c:f2:f6:d0:90:87:
08:69:ca:0d:02:94:e6:6c:a2:95:eb:5b:da:dc:40:
73:72:4e:a8:90:d6:c3:53:32:2f:7e:ef:31:7a:96:
6c:42:eb:22:49:77:3e:60:75:cb:8c:0d:57:60:25:
64:88:c8:93:ba:a7:7d:2b:4f:c3:ac:5e:a2:55:77:
54:4d:bf:d5:ff:58:a0:cb:7c:6c:27:17:cb:dd:0d:
a7:92:0f:c0:9c:9a:4d:e5:b8:ed:9c:92:a0:38:ae:
ad:ce:14:63:e4:9a:e8:aa:03:11:57:b2:00:63:c4:
26:ab:7c:06:cc:8d:45:34:6e:35:cc:89:4d:dc:2f:
48:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:D5:84:BF:BD:C4:49:F6:A2:FD:AF:5C:AD:0B:FC:2B:11:4C:58:61
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/79261424801E11F1805EACF2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.148.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:ef:c9:82:43:f0:9a:48:d7:6b:c9:9a:39:c4:ae:9b:d4:ab:
7f:e1:37:a3:a1:9e:9b:08:5a:dc:81:ad:02:60:06:45:90:f5:
38:13:04:f5:ce:dc:a1:7a:fe:8c:db:40:e2:a6:89:e2:2f:95:
10:ab:62:5c:c9:33:41:ba:9c:14:38:3a:a7:99:bf:8c:ac:25:
04:07:79:a8:02:ff:bc:1d:95:61:7a:af:82:6d:38:53:a7:9b:
b0:b4:28:b9:37:99:d2:4b:78:74:89:50:da:99:1e:df:d0:75:
ba:c1:82:b9:9d:18:94:2c:fd:b4:3d:82:ff:0e:11:cf:f9:ed:
ce:5c:fa:2e:8c:f8:5f:66:2c:02:3d:89:e0:fc:5c:a3:ad:d8:
79:e7:1f:48:35:57:26:05:a3:62:14:73:ef:19:5f:28:e9:2b:
45:1a:ca:e8:cf:6d:fb:c8:5e:39:18:04:3c:53:2b:a9:0c:11:
af:db:ef:97:d9:1d:b6:4b:b4:1f:d1:f6:24:84:60:7f:08:8e:
c7:d9:59:b2:84:c0:31:8f:a5:8a:40:38:6f:f8:71:57:b7:1f:
d1:6f:54:b4:f1:97:d6:22:97:a7:3c:6c:22:4e:7f:c7:b2:c4:
6b:15:7f:52:25:5d:5d:40:c4:e8:a5:69:80:d9:82:11:b7:92:
73:3f:55:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:40:34 2026 by rpki-client