Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91AA6504810911F1B19A37CCCE1D38B0.roa
File: 91AA6504810911F1B19A37CCCE1D38B0.roa (raw, json)
Hash identifier: 0ia7L0ad9qlg/UR3Z6/++Su5t72vG4xoHVFaeYgF8hI=
Subject key identifier: E6:9D:8C:41:8C:2C:F4:10:48:E8:1D:7C:30:23:7A:01:D4:8F:39:E8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D934
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91AA6504810911F1B19A37CCCE1D38B0.roa
Signing time: Thu 16 Jul 2026 11:29:13 +0000
ROA not before: Thu 16 Jul 2026 11:29:09 +0000
ROA not after: Sun 26 Jul 2026 11:29:09 +0000
asID: 271916
IP address blocks: 154.205.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121140 (0x1d934)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 16 11:29:09 2026 GMT
Not After : Jul 26 11:29:09 2026 GMT
Subject: CN=6a58c089-2a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:34:b2:74:87:86:b1:43:03:c6:22:df:cf:18:
bf:79:51:db:96:12:c5:46:ac:77:de:84:cc:fb:b4:
81:fe:32:40:ab:15:28:27:b3:3e:37:4e:2e:ad:0d:
f8:82:1d:50:ee:b2:ff:2c:63:38:c9:23:71:f9:66:
08:87:a5:97:84:0f:03:71:4b:12:9d:cc:38:65:73:
e1:ee:f4:cc:b2:6b:d2:18:76:6e:c4:2f:fe:9e:e3:
32:53:2f:71:67:7a:58:9d:25:84:9d:56:9d:f0:a5:
1f:ad:d1:df:95:ed:5e:2b:44:fe:05:dc:5c:0b:6c:
d5:4a:d7:aa:92:e3:30:13:22:fa:9d:ee:79:a5:db:
68:af:4f:f5:7e:f9:f3:a8:0f:97:af:79:a6:c2:5c:
f5:ca:21:ff:cb:f6:a7:0a:8b:f0:01:11:7b:41:e4:
62:6a:53:17:a7:07:fa:95:e4:26:b8:d6:3e:4e:a6:
f0:04:ec:19:f0:bf:d9:12:f5:11:a9:f7:3a:cf:64:
34:25:09:51:00:8f:ca:7e:2a:e0:00:7b:49:b2:c7:
32:08:6c:da:bc:fb:a4:a5:ee:8a:08:a6:e5:d7:d3:
88:d0:e3:6e:a4:d2:bd:4b:4b:2b:ff:f1:c1:7b:f2:
b4:b4:ef:73:7a:36:f4:09:87:a2:38:db:48:f6:6a:
ba:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:9D:8C:41:8C:2C:F4:10:48:E8:1D:7C:30:23:7A:01:D4:8F:39:E8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91AA6504810911F1B19A37CCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.24.0/22
Signature Algorithm: sha256WithRSAEncryption
a6:aa:0b:8f:e4:fc:0a:3f:bb:b5:e5:6e:86:d3:07:16:61:49:
19:08:83:ed:cf:ae:f8:ef:58:cf:44:d3:52:7f:b9:60:96:63:
68:bb:84:6a:b0:45:1f:c2:a4:d8:45:7d:ab:ff:f1:72:54:13:
4b:25:c0:f6:3d:1c:c1:46:98:7e:67:7e:fd:d1:c8:8b:1d:c5:
29:ed:09:10:a4:b3:43:cb:c1:9e:88:70:be:f1:71:2a:71:54:
5a:9b:96:35:b4:be:b2:81:d2:9b:58:8a:b3:d0:09:67:74:49:
f0:a4:1a:81:9d:72:00:e1:7c:2e:ea:fc:de:82:c6:3d:ca:35:
35:e5:35:52:75:03:a1:dd:a7:36:93:b0:5a:fc:70:7a:ea:1a:
ec:2b:bd:52:19:a9:2d:b9:61:d9:3c:52:20:27:b2:c8:d4:6a:
0e:5d:82:41:76:7c:29:eb:03:c9:81:46:d5:34:e6:1b:22:f2:
4f:d1:a0:79:15:e2:ac:2e:b7:4f:50:43:24:17:76:3f:d6:a0:
b3:74:10:d8:e4:05:5b:3f:14:22:e4:3a:f7:d0:93:54:b6:75:
55:bb:7f:0c:49:8d:06:61:32:c7:79:0e:8a:46:5a:38:fd:ef:
69:48:7d:5b:09:be:40:9d:87:b0:fc:be:8d:76:c1:28:e8:0f:
85:66:f2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:55:45 2026 by rpki-client