Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/828CB7E2835D11F1B7F261F7CE1D38B0.roa
File: 828CB7E2835D11F1B7F261F7CE1D38B0.roa (raw, json)
Hash identifier: 4J4vQ6ji5YhtYqKlzmqMOP2t+w0jyB9mUJiQxjJ7R4g=
Subject key identifier: 25:AA:FA:7B:03:3A:E6:11:B3:31:3C:8B:43:07:62:14:5F:29:0A:B4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D9B3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/828CB7E2835D11F1B7F261F7CE1D38B0.roa
Signing time: Sun 19 Jul 2026 10:35:07 +0000
ROA not before: Sun 19 Jul 2026 10:35:03 +0000
ROA not after: Fri 28 Aug 2026 10:35:03 +0000
asID: 211826
IP address blocks: 154.194.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 08:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121267 (0x1d9b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 19 10:35:03 2026 GMT
Not After : Aug 28 10:35:03 2026 GMT
Subject: CN=6a5ca85b-5170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:08:5a:cd:4e:b7:78:fa:5b:fb:60:5e:23:0b:
9c:02:71:f0:ba:09:24:59:a4:45:1e:96:44:cd:f8:
3b:a9:38:f8:26:f0:31:f2:e0:02:ab:bf:7e:e6:af:
dd:a1:d4:22:b0:b4:c7:15:b4:22:34:26:14:c9:ab:
28:bf:57:a7:41:1b:29:f9:e6:a0:50:0a:df:51:d9:
53:0d:b4:c3:23:7e:bd:eb:94:a1:79:81:ab:1c:1c:
3f:8f:62:64:13:9b:f7:2f:7d:a6:dd:2b:b8:54:d7:
fc:09:5b:04:e6:5d:d6:be:ac:b2:6c:e2:9f:05:79:
0d:fb:5e:a7:fb:8f:30:78:3b:79:a7:b3:b9:74:4b:
ea:5d:8d:e5:70:a6:e5:00:f1:a5:51:2e:c2:c9:fb:
30:ef:40:29:8f:27:8b:30:44:84:71:4a:aa:e5:59:
25:a4:49:4f:ff:44:72:62:91:e4:40:0c:28:84:ee:
71:7d:9b:11:54:e1:71:2c:8b:12:25:05:f4:30:d9:
27:66:96:47:a1:cf:78:5a:c6:00:69:7d:69:b4:e1:
0f:a5:f7:20:61:9f:b4:a1:83:89:32:0a:99:10:57:
7e:9f:88:22:86:f8:1b:5b:2d:f8:a6:93:de:47:5f:
0d:86:b6:4e:3a:51:35:bd:3d:13:63:31:8a:ac:6d:
92:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:AA:FA:7B:03:3A:E6:11:B3:31:3C:8B:43:07:62:14:5F:29:0A:B4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/828CB7E2835D11F1B7F261F7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.55.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:0a:ba:ef:fd:19:28:d4:3b:aa:0f:f3:10:6c:8d:ca:b0:c5:
4c:b4:12:60:d0:ba:a7:db:31:1e:3d:2c:d8:49:57:cb:a3:85:
39:5b:5e:12:d6:65:8b:70:4f:75:ae:60:90:f3:5e:f3:67:0e:
6a:6c:25:44:8f:7f:c1:9c:66:46:5c:7f:7c:0f:bc:c1:9f:e8:
71:f1:27:71:d2:e6:22:6f:87:3b:d1:65:8d:32:a4:39:03:91:
1c:b6:b5:82:86:3d:fb:75:2e:89:d7:54:38:e1:08:64:04:c2:
31:9f:09:6c:b4:6f:a0:9a:f1:83:87:47:32:10:1e:11:20:9f:
24:55:77:7b:02:11:b4:d2:59:4c:c7:d1:5b:cf:f2:7e:db:bb:
73:b4:56:2d:18:12:e8:43:a9:b5:d5:a4:da:a2:7b:b1:a0:b7:
c2:0f:f8:93:04:29:c5:5a:f5:68:d1:4e:4e:34:a3:fb:32:f2:
0f:7c:8c:89:98:f3:be:f6:6b:71:dc:2c:fc:e5:75:66:63:24:
83:9e:69:1c:ae:a2:09:12:28:8c:18:18:28:03:e6:bd:83:ca:
61:50:a0:19:97:1a:75:e3:af:f7:5b:c8:6c:d5:e6:f0:55:fd:
20:5c:65:02:5f:51:ca:fa:2e:06:c7:cd:8b:d2:aa:30:94:ec:
23:47:06:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:55:31 2026 by rpki-client