Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93ABD4F8866A11F1942C4F19CF1D38B0.roa
File: 93ABD4F8866A11F1942C4F19CF1D38B0.roa (raw, json)
Hash identifier: JyLTql8ZwJNFUTsD/8PgbOglSEZ5mizLAxXbYyJc7gk=
Subject key identifier: 00:F4:94:06:71:64:F8:D0:FB:AB:A5:F9:80:7D:F9:FD:28:87:4A:68
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DB15
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93ABD4F8866A11F1942C4F19CF1D38B0.roa
Signing time: Thu 23 Jul 2026 07:46:13 +0000
ROA not before: Thu 23 Jul 2026 07:46:09 +0000
ROA not after: Thu 03 Sep 2026 07:46:09 +0000
asID: 198243
IP address blocks: 154.83.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121621 (0x1db15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 23 07:46:09 2026 GMT
Not After : Sep 3 07:46:09 2026 GMT
Subject: CN=6a61c6c5-f10d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e1:24:b8:a8:3c:2f:62:b1:95:81:a2:2e:1a:
7c:47:d8:8c:ab:9f:09:83:6c:4e:ff:d9:2a:46:a1:
5a:52:a6:40:ce:a0:ff:56:3a:49:b1:30:f3:85:95:
f4:5b:b7:57:5c:f4:3e:19:a0:62:1b:74:8b:71:65:
77:96:d7:ae:f7:a8:aa:f7:2f:79:71:c7:33:ab:c4:
17:fd:64:ca:65:2b:7e:25:21:e5:80:33:54:d0:78:
26:d5:07:ab:28:23:59:c0:ac:38:e1:89:3f:5f:3f:
2e:6b:6f:c0:f0:e3:71:30:25:18:b6:ba:2a:61:9f:
2a:cb:16:48:59:dd:a2:75:67:d8:ec:67:09:c3:3d:
20:87:ea:f1:d6:97:08:38:f2:8d:48:b4:d2:85:81:
46:8f:4d:f3:83:bb:fe:dc:86:5f:f3:a5:f5:39:df:
50:6f:e2:8f:de:40:4b:d3:3c:af:d8:2a:ba:a7:5b:
53:df:8a:b6:79:17:2c:6e:01:81:3f:6b:23:c3:60:
7d:60:bf:e6:3a:43:fd:e7:38:85:2a:61:d9:ef:50:
6a:45:e6:31:58:87:5e:9b:8a:c8:b5:19:61:88:3d:
41:b4:21:95:a4:b5:3c:00:f0:91:5b:23:44:69:1d:
06:69:c4:fe:3e:d0:48:d4:6a:ea:32:cd:ad:31:34:
87:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:F4:94:06:71:64:F8:D0:FB:AB:A5:F9:80:7D:F9:FD:28:87:4A:68
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/93ABD4F8866A11F1942C4F19CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.210.0/24
Signature Algorithm: sha256WithRSAEncryption
23:47:19:34:06:30:50:5b:39:62:d0:3a:2c:a9:26:1e:da:19:
67:79:80:78:08:22:d3:25:25:4b:45:9a:da:69:ac:01:86:14:
16:62:78:5f:ba:7f:74:63:22:e8:a9:5e:fd:7c:ce:fe:74:52:
e9:6a:54:d3:6d:b0:08:e2:7b:d5:f5:4f:35:f5:1a:c5:5c:f9:
6e:94:28:85:54:a1:90:65:75:b0:53:8b:bd:30:02:f4:5d:96:
48:7e:59:3a:9b:4e:f1:10:10:bb:01:ee:99:78:fd:d5:5f:9b:
8a:e1:32:be:de:06:11:0b:47:79:9c:d5:a2:f2:19:54:8d:b5:
52:1a:e2:f8:dc:3e:1f:72:4e:5a:16:17:83:ba:3a:11:a2:32:
54:fa:b5:db:53:80:fd:e6:6e:ba:28:5b:7b:35:9e:5a:55:18:
54:9a:c6:53:c8:27:99:e5:1e:44:38:29:27:72:80:c7:a9:97:
b8:04:72:f4:ad:32:e2:f3:1a:da:34:9c:7e:f0:b9:f5:5c:ec:
ad:21:1c:dd:6c:eb:7d:57:ff:b7:02:20:64:fa:88:de:7c:88:
59:89:6e:32:c5:c7:1d:43:65:a6:5b:03:4a:77:c2:bf:0c:8a:
fd:57:a8:b4:99:5c:7a:57:d0:a4:fc:7c:bf:fb:6a:2e:4d:e9:
56:dc:e2:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:43:49 2026 by rpki-client