Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/802D5CCC873611F1B6536FF4CE1D38B0.roa
File: 802D5CCC873611F1B6536FF4CE1D38B0.roa (raw, json)
Hash identifier: /gpFb0t0CmW2d0CGCADfe8Sb0smiyyBqfjeIGo5UEjo=
Subject key identifier: DE:09:54:44:E2:D8:77:04:D5:C9:DA:14:3D:38:DE:E5:59:43:1F:02
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DB2E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/802D5CCC873611F1B6536FF4CE1D38B0.roa
Signing time: Fri 24 Jul 2026 08:05:58 +0000
ROA not before: Fri 24 Jul 2026 08:05:54 +0000
ROA not after: Tue 01 Sep 2026 08:05:54 +0000
asID: 11427
IP address blocks: 154.82.26.0/23 maxlen: 24
154.85.0.0/23 maxlen: 24
154.88.44.0/22 maxlen: 24
154.88.48.0/22 maxlen: 24
154.88.60.0/22 maxlen: 24
154.90.168.0/22 maxlen: 24
154.90.184.0/22 maxlen: 24
154.94.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121646 (0x1db2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 24 08:05:54 2026 GMT
Not After : Sep 1 08:05:54 2026 GMT
Subject: CN=6a631ce6-45b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:58:9c:dc:32:a1:fb:35:be:d0:5a:ac:b3:0a:
e6:f0:8d:56:2f:61:af:5c:33:17:b2:80:8e:45:7e:
41:e7:fc:b9:ef:e1:13:1c:f3:08:13:65:3b:ac:78:
22:dd:55:36:be:3f:2a:3f:e3:19:fe:4b:44:a8:e9:
19:69:22:24:12:fb:10:89:77:19:78:98:5a:e1:81:
21:56:f8:15:e7:0a:1d:31:43:21:62:f8:62:f1:fd:
bc:29:33:f8:62:d9:a9:7d:2c:71:ea:bf:92:21:68:
44:3a:8e:2a:02:5b:bd:ab:8b:e6:2c:98:51:fc:04:
1f:b8:f9:cd:5b:1b:a5:42:ce:f1:99:66:51:21:6a:
8d:5c:40:6c:4f:24:fd:a7:9f:5e:8a:1a:17:e3:39:
67:22:86:16:a6:de:5e:2b:dc:ee:90:f4:7f:92:48:
3f:10:e4:17:e7:6c:2b:a7:35:0f:e4:31:18:7d:a8:
e3:73:f2:ef:36:37:77:f0:46:b8:e1:7d:81:be:d9:
f5:a3:44:6c:39:b6:fc:06:09:67:c7:a5:c5:cc:5e:
07:15:e3:b5:e5:70:5c:fb:64:5d:a9:fb:74:9d:33:
8b:29:ba:e4:1c:77:a4:b4:73:3a:97:ad:af:b3:f5:
2b:27:37:4c:d8:7a:2f:d7:1c:0f:43:77:32:17:3d:
ab:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:09:54:44:E2:D8:77:04:D5:C9:DA:14:3D:38:DE:E5:59:43:1F:02
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/802D5CCC873611F1B6536FF4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.26.0/23
154.85.0.0/23
154.88.44.0-154.88.51.255
154.88.60.0/22
154.90.168.0/22
154.90.184.0/22
154.94.8.0/22
Signature Algorithm: sha256WithRSAEncryption
38:29:92:ff:8d:65:e7:1f:d3:4e:6b:92:51:29:97:c3:1b:7b:
19:32:52:28:d1:4d:82:1b:2f:9e:6b:1f:7a:a8:24:b9:aa:6b:
49:17:8b:b4:22:fd:cf:1e:c6:c9:17:4b:8b:72:62:22:cc:55:
b5:a8:c7:27:a8:f9:c1:fc:13:9c:14:45:4d:05:81:7a:62:17:
52:f6:f9:04:50:f1:b5:9c:1e:fa:eb:17:83:52:ea:e6:7f:e1:
be:de:97:4d:9d:3f:f6:2e:e9:78:2e:d0:18:33:73:0a:1d:63:
4a:fa:be:db:8e:d1:de:16:dc:07:36:16:46:a6:be:49:46:98:
c9:4c:2d:98:23:d4:f8:e7:2c:9f:8f:e2:56:03:cc:e1:10:a3:
ad:10:6a:60:e2:65:51:0c:81:ee:a8:70:5c:52:f7:e9:34:26:
05:61:cd:33:0d:5c:2a:66:06:01:69:f6:af:4c:66:25:56:49:
ab:88:2a:4a:9a:9a:b4:9d:54:95:28:2f:eb:35:4c:2f:f7:5c:
24:2f:4f:08:9b:21:ae:97:9f:7f:4f:12:1d:af:99:a2:a5:3a:
ad:53:b7:c7:24:ea:34:be:31:90:27:72:d3:a6:fb:5e:b9:61:
a9:fa:85:49:df:f8:63:cf:b4:dc:9a:bb:90:56:6e:e7:b0:ba:
fc:66:78:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:25:43 2026 by rpki-client