Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/837EC7D6850011F19CD9C4EFCE1D38B0.roa
File: 837EC7D6850011F19CD9C4EFCE1D38B0.roa (raw, json)
Hash identifier: U5CyWVfXjK9+9J4DBzfb6/ZNfODdgRBaBS8EYkTX66s=
Subject key identifier: BF:4C:E4:FD:37:B3:A7:7F:87:A4:2E:2F:E6:11:90:5D:49:BB:3F:AE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DA8C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/837EC7D6850011F19CD9C4EFCE1D38B0.roa
Signing time: Tue 21 Jul 2026 12:34:28 +0000
ROA not before: Tue 21 Jul 2026 12:34:24 +0000
ROA not after: Wed 19 Aug 2026 12:34:24 +0000
asID: 150000
IP address blocks: 154.82.159.0/24 maxlen: 24
154.82.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121484 (0x1da8c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 12:34:24 2026 GMT
Not After : Aug 19 12:34:24 2026 GMT
Subject: CN=6a5f6754-61a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:50:e4:70:da:0f:13:52:2b:84:8c:5a:46:d1:
54:dd:cf:58:3c:c8:65:1d:7f:ee:1d:80:74:86:f1:
8f:a8:56:41:2a:2d:23:b7:24:5c:94:eb:26:0b:cd:
00:e5:52:d4:a5:5b:d9:de:26:da:2f:58:51:a7:a1:
ed:7f:0e:ab:2e:a3:26:94:d1:3f:39:40:18:5f:c9:
f8:3b:c1:ac:79:15:7d:a2:48:8f:71:8b:17:09:d7:
58:bc:23:63:51:56:32:ca:6b:ac:74:e4:17:5f:79:
a1:5e:12:84:42:e4:e5:d9:16:88:32:c7:4f:d4:e1:
a3:4c:88:89:b1:2c:2e:ff:e7:62:06:47:68:f8:57:
c7:83:48:39:04:64:f3:67:73:0e:dc:86:b3:31:fa:
e1:9f:da:cd:0e:ba:7e:1a:00:8f:1c:35:55:68:24:
cd:a6:ce:67:39:39:a1:92:49:0c:da:b0:29:81:c2:
de:4b:1d:46:de:30:6a:5b:99:61:bd:49:5b:0b:b6:
20:3e:37:d6:0a:2d:5d:6d:6b:3b:3e:3e:e3:1d:66:
ee:f4:9b:92:a2:eb:fc:05:43:d5:e6:ca:5a:0a:11:
fc:b8:4c:01:8a:47:7c:b4:7a:40:13:3d:b7:13:67:
3f:cd:c6:f3:9f:0e:a5:4e:7b:d2:47:d6:f1:d6:68:
d9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:4C:E4:FD:37:B3:A7:7F:87:A4:2E:2F:E6:11:90:5D:49:BB:3F:AE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/837EC7D6850011F19CD9C4EFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.159.0-154.82.160.255
Signature Algorithm: sha256WithRSAEncryption
70:83:a0:cf:30:d2:ef:f9:9a:7e:ba:aa:4f:24:c3:90:ea:2d:
50:61:d8:02:a3:9d:02:08:75:6e:12:67:a0:67:4a:3f:0b:bb:
14:8c:b7:a6:8e:65:9c:08:bd:16:05:07:9d:28:da:49:35:da:
ef:9c:9b:cb:ee:94:86:87:26:6f:85:ba:ce:4f:4e:0c:f0:c5:
49:17:c8:1c:c2:d9:fa:db:92:d8:f3:38:2a:16:41:0d:cd:9e:
84:e9:b8:3f:8e:d6:d7:db:f4:3f:aa:5a:c6:a2:71:b6:8d:26:
c6:9a:91:6f:ee:f9:17:41:e7:ae:80:af:1d:3e:69:d6:3a:64:
5f:98:cc:cb:73:21:74:31:d1:c2:99:38:b1:54:c1:5e:6f:49:
c8:89:5c:47:14:28:7c:10:c2:bc:ea:c7:20:69:03:be:42:50:
40:01:8b:97:a1:51:bc:e2:57:55:11:ee:6c:5f:49:fc:e7:35:
14:a6:c5:aa:c3:7f:16:21:55:4f:dc:87:35:e7:0d:42:47:83:
8e:7f:17:df:16:27:20:1a:96:0a:97:f9:a7:66:24:dd:3d:a8:
fb:d3:8d:9a:70:aa:94:c0:f6:4c:6d:4e:04:15:5a:e9:e1:74:
7a:35:0d:4f:0c:d2:2b:1f:fa:ad:29:01:84:f2:32:b5:fb:68:
2f:0e:34:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:51:13 2026 by rpki-client