Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9194708A7DAF11F19DCDA5A8CE1D38B0.roa
File: 9194708A7DAF11F19DCDA5A8CE1D38B0.roa (raw, json)
Hash identifier: 6MCVsaO/k142mbjKUwTAMJluWyfoKSXV0alPrFStajQ=
Subject key identifier: 9D:76:05:3C:A5:F8:16:9A:68:56:2D:2C:67:F4:09:D4:0D:92:2F:02
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D883
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9194708A7DAF11F19DCDA5A8CE1D38B0.roa
Signing time: Sun 12 Jul 2026 05:07:24 +0000
ROA not before: Sun 12 Jul 2026 05:07:19 +0000
ROA not after: Sun 26 Jul 2026 05:07:19 +0000
asID: 17497
IP address blocks: 154.197.26.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 08:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120963 (0x1d883)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 12 05:07:19 2026 GMT
Not After : Jul 26 05:07:19 2026 GMT
Subject: CN=6a53210c-59ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9d:a6:a2:30:bc:a5:d3:b2:5b:c3:03:8d:fd:
e2:9b:36:4c:7a:48:29:bd:5d:4a:f2:0a:53:0b:b5:
c1:9b:6a:15:72:e8:1d:aa:b6:d3:f9:2b:11:bc:f4:
2e:db:28:c4:b3:3f:83:87:a7:93:cd:f5:65:7f:49:
c8:2f:7e:06:5b:04:a1:1f:ba:36:ab:6b:29:44:3e:
e8:fd:87:79:4e:45:70:ca:f3:11:62:e6:18:6a:24:
24:19:24:66:15:f9:f4:be:60:cd:5e:99:d9:b0:af:
8d:c6:83:07:ac:9f:0e:aa:3f:e1:12:31:fe:87:f5:
a8:cc:4a:c3:18:78:1d:c9:35:03:2b:95:0a:80:90:
cd:26:d3:59:32:ce:91:8c:2a:1b:1c:99:93:9b:29:
9a:04:eb:4a:c4:d6:ad:6b:57:77:cf:b8:ab:51:32:
5a:44:b8:ff:9d:4e:63:d8:4b:0a:e5:b6:36:b6:4b:
12:ae:3f:69:be:cb:50:11:99:b8:34:19:70:06:75:
91:65:99:90:70:e2:3a:6a:b3:ff:4d:65:15:a8:97:
ff:38:f0:11:bf:34:d3:e7:90:76:b8:0b:1b:ac:dd:
7e:5c:5f:eb:86:3e:5d:c8:9d:ec:65:b3:53:4c:42:
e6:06:66:a3:84:11:69:83:a8:cd:8a:7e:ef:a0:0a:
d3:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:76:05:3C:A5:F8:16:9A:68:56:2D:2C:67:F4:09:D4:0D:92:2F:02
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9194708A7DAF11F19DCDA5A8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.26.0/24
Signature Algorithm: sha256WithRSAEncryption
95:0a:44:be:f4:8f:b3:b6:39:0f:a1:83:ac:00:c1:5c:cf:39:
47:18:39:8d:bb:40:3c:f1:72:45:1f:f9:a2:72:4f:2b:94:97:
d2:9e:50:8c:c3:6d:54:6a:70:1e:65:f2:c2:d5:91:43:ac:c8:
43:9e:5f:a2:a7:1c:36:3c:c6:a7:48:d7:11:fb:f9:c7:45:35:
9f:6f:32:28:7f:0f:41:95:de:13:3b:17:d1:7f:9d:9c:5f:be:
bb:39:ab:71:95:5e:4a:4e:56:84:53:6a:41:5e:00:3b:ee:99:
3f:0a:43:00:dc:b4:cb:2e:29:d6:f0:5e:23:df:3d:48:7e:0d:
bb:bc:94:89:b6:a7:c1:af:4c:97:f9:e3:dd:bb:35:68:1e:e1:
24:93:84:0c:ea:b2:ca:a1:86:7f:ef:da:9a:e4:22:8e:ad:35:
ec:a1:56:0d:80:8a:bb:84:ca:d7:ef:da:72:d8:e5:ff:c8:aa:
a0:15:b9:dd:df:31:9c:e1:ac:f7:c7:25:54:1d:27:da:96:3c:
54:a5:6b:a8:f9:92:8b:b7:6e:55:76:5b:30:6b:46:d2:4a:c4:
4a:f2:76:cf:c6:9d:77:9a:0f:e0:47:12:e6:71:52:ae:75:ee:
38:72:ba:77:b6:8c:e2:a3:55:ac:3d:82:06:8f:e2:4a:86:93:
ea:97:95:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:05:58 2026 by rpki-client