Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7FA9980E79DC11F1A5C390A6CE1D38B0.roa
File: 7FA9980E79DC11F1A5C390A6CE1D38B0.roa (raw, json)
Hash identifier: dgHRKIfPObIuKV4Ka5sdEd+KkV3qZw7m35MibU9Aa80=
Subject key identifier: 6D:A9:1F:99:E1:3E:90:C1:A5:1F:3B:2F:78:ED:99:F3:34:7E:5B:A3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D767
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7FA9980E79DC11F1A5C390A6CE1D38B0.roa
Signing time: Tue 07 Jul 2026 08:18:57 +0000
ROA not before: Tue 07 Jul 2026 08:18:52 +0000
ROA not after: Wed 05 Aug 2026 08:18:52 +0000
asID: 274964
IP address blocks: 154.88.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120679 (0x1d767)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 7 08:18:52 2026 GMT
Not After : Aug 5 08:18:52 2026 GMT
Subject: CN=6a4cb671-0268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:90:e9:c1:42:0c:be:1c:62:38:42:2b:5b:b9:
22:b0:39:a4:14:62:74:7f:ee:4c:8c:9a:08:36:50:
4f:f5:65:f0:5c:65:51:55:ab:92:b7:ea:93:7f:42:
4a:04:c6:8e:fe:47:f8:f6:c6:6e:b0:39:71:44:5b:
4f:77:3f:2e:04:ef:cf:0e:c1:d8:f6:82:c3:ee:3e:
4d:36:8c:74:54:04:e5:85:d0:8c:07:70:58:da:e1:
b0:89:67:81:0e:05:22:dd:66:6c:23:fd:cd:05:5e:
da:d1:c1:a3:9f:6b:0a:fe:f0:24:75:b8:6b:38:ca:
31:5f:7b:17:9e:81:6e:4b:a9:4b:8e:70:7d:de:62:
9a:e7:39:53:c0:36:ea:4a:54:2a:7f:3a:a3:a4:c0:
88:19:27:98:e2:83:0f:6a:b0:ba:7c:89:0f:1c:8d:
c7:11:99:16:a2:89:e9:8f:98:51:f6:dd:9e:45:3c:
bf:81:e1:4c:be:b8:cd:66:81:3c:7d:27:fe:e0:c9:
2f:88:fc:71:f8:51:a9:85:47:20:ee:ce:8c:6b:27:
da:35:ef:81:ce:86:54:87:4e:b6:bf:45:2e:af:c4:
19:7e:53:81:79:5b:26:a2:db:ac:4f:d6:24:54:7b:
69:0c:90:ca:6e:1c:c4:29:c0:05:b4:8c:61:a4:2d:
c4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:A9:1F:99:E1:3E:90:C1:A5:1F:3B:2F:78:ED:99:F3:34:7E:5B:A3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7FA9980E79DC11F1A5C390A6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.188.0/24
Signature Algorithm: sha256WithRSAEncryption
74:5b:58:4e:20:3e:ee:61:55:c9:21:5b:e0:df:c4:b5:61:27:
10:d7:46:f8:66:26:31:bb:d8:fa:8f:15:ce:3b:ff:55:f5:93:
c6:8d:77:3a:d2:b3:a3:6e:8b:d8:e4:2c:2d:40:98:39:d8:ee:
36:bd:65:53:e9:e7:cd:78:83:bf:fb:63:d6:72:4d:81:87:96:
c3:e6:6c:65:01:26:9a:ab:00:2d:54:6e:ea:8d:44:a3:33:59:
17:4e:be:8e:42:bf:c3:09:9f:43:e2:5c:a7:ba:10:b0:b6:3f:
b5:66:ab:97:8c:00:bf:a4:b1:b5:21:0f:e9:7a:80:ac:a2:f8:
a2:ab:42:f4:e2:8e:15:20:d3:81:b3:69:a3:54:9c:ff:fe:57:
ce:86:f1:59:34:9e:ba:65:14:ae:c5:92:a0:57:9b:87:73:c7:
43:9f:95:4d:77:c9:36:b7:bd:5e:bd:3e:12:d7:76:23:f6:49:
f8:b5:7f:56:0f:92:f1:da:49:22:97:13:ce:bd:74:c1:46:c9:
0e:a1:d1:34:e6:a5:0d:d3:55:61:07:d4:c9:c7:5c:74:32:9f:
9c:98:db:1b:0d:7c:78:50:87:41:b2:00:ec:92:aa:0c:d7:0b:
3a:d2:03:83:e5:c4:28:f0:6c:eb:32:4a:3f:f7:c2:96:4c:ae:
a0:29:eb:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:26:16 2026 by rpki-client