Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82675DCE810711F1857811C0CE1D38B0.roa
File: 82675DCE810711F1857811C0CE1D38B0.roa (raw, json)
Hash identifier: nN+UEg3mKpmpoZqJ1Zc8WzuzbJ8n3CZbvHfSiRJ98jw=
Subject key identifier: 3E:71:41:60:23:C2:D3:6A:DF:A5:21:09:AA:6C:3E:E1:7C:FB:06:FE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D930
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82675DCE810711F1857811C0CE1D38B0.roa
Signing time: Thu 16 Jul 2026 11:14:28 +0000
ROA not before: Thu 16 Jul 2026 11:14:24 +0000
ROA not after: Sat 29 Aug 2026 11:14:24 +0000
asID: 59642
IP address blocks: 154.84.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121136 (0x1d930)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 16 11:14:24 2026 GMT
Not After : Aug 29 11:14:24 2026 GMT
Subject: CN=6a58bd14-6350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e2:40:87:0a:44:a0:73:30:d8:68:7d:25:e9:
2d:f3:1c:2a:33:47:af:64:e6:56:92:89:b0:7f:4f:
4f:22:9d:67:88:22:32:d4:fd:e8:05:ad:54:fb:80:
63:a0:7b:9d:ed:0f:20:94:e3:87:18:11:90:2e:8d:
1a:1b:67:f7:27:59:f0:85:dc:c4:04:5a:61:12:b3:
6a:94:c7:85:22:56:6f:1c:f5:58:69:79:83:fa:a2:
18:d4:23:12:b8:f9:7a:36:86:c0:eb:c2:72:b6:ee:
f6:b3:cc:de:a2:ba:63:e0:95:8d:c7:51:25:34:dd:
62:7e:01:7c:4a:21:0d:35:69:b6:cb:57:f3:f6:63:
95:d1:0b:18:82:49:b6:1e:db:5d:e7:fd:e6:55:8f:
2b:a9:bc:87:8e:fd:69:0b:72:16:cd:5b:b0:44:f1:
c5:ea:02:f7:34:84:16:9c:b3:9e:07:d5:af:c1:73:
8b:df:2e:e6:66:6d:83:ba:79:6a:f9:33:e9:c2:d2:
ba:b9:20:eb:44:6a:4d:09:96:5d:1a:72:80:99:ee:
2e:8a:98:2c:36:b8:80:24:c4:ae:dc:51:7d:09:cf:
2c:82:6d:72:39:46:ee:b8:ae:ca:83:e8:3f:71:22:
64:f1:b2:6e:d2:61:47:66:0d:85:4f:15:80:78:fb:
5b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:71:41:60:23:C2:D3:6A:DF:A5:21:09:AA:6C:3E:E1:7C:FB:06:FE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/82675DCE810711F1857811C0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.171.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:bc:35:d8:4b:a4:56:9f:fe:91:06:fe:f1:df:44:41:ad:28:
fa:94:60:6d:7e:0e:2b:64:b1:68:d1:44:52:9c:b8:ac:09:85:
23:e3:08:0c:9a:5b:05:45:0e:12:48:0e:6a:b2:7e:4b:01:fc:
d3:e0:e7:5f:de:e8:65:84:f4:7e:ba:83:e6:13:28:ef:c6:3d:
01:91:aa:7e:ad:7f:c6:3a:f9:19:b1:79:0a:f3:46:0f:f6:84:
fc:40:24:51:69:e7:47:d1:b2:ac:7b:03:61:fc:23:2b:25:b3:
e4:6b:8c:db:b3:43:4d:f8:ad:3e:0f:65:ab:ee:ca:65:60:4b:
ba:87:60:e7:9c:04:1c:e0:d4:87:59:81:3a:3b:6b:90:d4:c7:
99:90:c5:4e:00:e2:92:0d:ab:08:6f:92:1b:5a:8e:44:f9:22:
79:1f:c6:1c:92:ca:fa:8e:4c:24:63:3b:ad:8e:81:ea:4b:f2:
d1:af:20:94:7e:03:33:0f:dd:d7:61:2c:f6:e7:17:fb:82:b8:
29:7a:3e:04:f6:48:91:fa:70:f6:46:0a:d1:13:18:c4:98:f0:
b6:a8:a0:a5:eb:bc:44:23:df:38:98:2c:8f:68:f4:b0:5e:67:
8f:d5:1f:c7:45:77:fa:71:9c:73:0e:5a:20:e0:ea:1b:a4:11:
db:c2:e0:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:40:28 2026 by rpki-client