Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/974A628C844E11F1AB1B1DAECE1D38B0.roa
File: 974A628C844E11F1AB1B1DAECE1D38B0.roa (raw, json)
Hash identifier: W7AwOsh+sOwOcG2f6QCM6Pj04FtUaTysD8Y7/mN1boo=
Subject key identifier: EE:6B:4D:F7:3B:5E:7F:F8:3A:BA:B7:53:C5:C7:D2:0B:D5:36:83:12
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DA3A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/974A628C844E11F1AB1B1DAECE1D38B0.roa
Signing time: Mon 20 Jul 2026 15:20:51 +0000
ROA not before: Mon 20 Jul 2026 15:20:47 +0000
ROA not after: Sun 16 Aug 2026 15:20:47 +0000
asID: 17497
IP address blocks: 154.217.192.0/20 maxlen: 24
154.222.148.0/22 maxlen: 24
154.222.148.0/24 maxlen: 24
154.222.149.0/24 maxlen: 24
154.222.150.0/24 maxlen: 24
154.222.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121402 (0x1da3a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 20 15:20:47 2026 GMT
Not After : Aug 16 15:20:47 2026 GMT
Subject: CN=6a5e3cd3-3e01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:eb:64:5e:03:c3:25:54:61:a9:e5:c3:09:65:
9a:24:b2:80:83:bf:c1:fa:8f:25:68:bf:b2:04:c6:
5e:28:4c:e6:8c:b1:d0:f4:e7:dc:df:ef:02:03:fb:
56:f3:4a:55:35:5c:57:95:1d:fb:d9:01:13:ef:f9:
68:ca:ea:16:66:52:0b:2b:6f:1b:21:be:e0:f1:c1:
b8:50:05:2d:73:48:de:d8:4c:ed:04:6d:d5:3b:0a:
02:4c:ad:e8:d2:de:a6:38:4f:f2:f1:65:fa:88:20:
4b:97:c2:c5:71:bf:79:96:ac:ff:51:ca:85:ec:2a:
92:d3:b3:70:19:e3:cc:10:ae:31:39:1d:56:f4:09:
ba:e5:bb:35:cd:8d:65:b8:ad:ac:56:7d:72:da:c3:
46:38:47:8a:e0:5c:e5:4e:1f:7d:44:df:9f:85:98:
82:a3:37:79:4a:a9:c2:99:34:5b:4d:99:a9:21:12:
5f:fe:d6:be:a4:10:1b:37:86:08:26:60:30:07:7c:
53:90:dd:6f:f8:6b:34:98:de:b4:23:02:f7:a6:b4:
9e:a0:9e:30:7a:80:8a:d2:a9:e2:7e:c0:0f:ae:95:
37:2b:a2:43:df:85:c2:e5:cb:23:89:88:01:fa:42:
6a:06:30:87:16:9a:91:98:4a:42:3b:63:34:14:5e:
9e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:6B:4D:F7:3B:5E:7F:F8:3A:BA:B7:53:C5:C7:D2:0B:D5:36:83:12
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/974A628C844E11F1AB1B1DAECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.192.0/20
154.222.148.0/22
Signature Algorithm: sha256WithRSAEncryption
d4:7e:f6:2f:2f:07:ac:91:1d:cd:00:ae:ab:19:32:d0:a3:ba:
85:1c:5c:25:12:fa:2f:50:ff:cd:3a:3a:4d:d8:04:50:94:cc:
b0:3c:89:99:a3:5b:fe:6c:6f:a1:1c:ee:31:22:cf:cc:f6:58:
e9:ef:c2:49:ba:e7:16:a3:19:ab:1b:80:7c:52:a1:c0:d2:7a:
57:9d:c7:8d:85:46:de:72:58:f6:2a:6f:02:f1:32:91:75:dd:
57:8a:68:b0:20:56:18:0a:32:94:39:45:a2:fc:41:c4:0d:98:
57:24:6e:b9:e0:0d:d6:14:b1:13:7f:0a:8f:78:72:c9:6e:70:
80:aa:e3:81:1d:a6:5c:87:07:2d:27:98:30:ab:82:a8:86:52:
63:7f:4d:e8:36:be:dc:45:e6:f6:38:4a:75:04:fd:4b:fa:fd:
3f:fa:c3:a9:56:1d:27:ad:d2:48:fc:35:10:ab:b3:34:c6:f4:
c7:bb:25:55:87:bb:91:63:3e:5b:9b:62:1f:16:b2:1c:ef:aa:
6c:c7:22:01:8b:10:3f:53:d3:93:c4:88:ac:fa:32:fa:f5:0e:
29:3b:71:b0:05:59:79:37:92:d6:91:c8:39:7b:37:f4:f7:f4:
7f:3f:6f:bf:5b:6a:c4:fa:b6:3b:fa:a6:ca:ab:db:4e:cd:b6:
ac:46:d1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:50:06 2026 by rpki-client