Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9DF820E685D511F1B1120200CF1D38B0.roa
File: 9DF820E685D511F1B1120200CF1D38B0.roa (raw, json)
Hash identifier: eHeu2H1q8DpCfEYj0uwoHykJRfoDwZpxmu0I8BMoQBo=
Subject key identifier: 6A:30:E4:AC:71:61:96:7C:FC:7F:3F:17:2C:BF:1A:80:EC:40:47:2F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DAC7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9DF820E685D511F1B1120200CF1D38B0.roa
Signing time: Wed 22 Jul 2026 13:59:55 +0000
ROA not before: Wed 22 Jul 2026 13:59:51 +0000
ROA not after: Fri 28 Aug 2026 13:59:51 +0000
asID: 211687
IP address blocks: 154.193.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121543 (0x1dac7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 22 13:59:51 2026 GMT
Not After : Aug 28 13:59:51 2026 GMT
Subject: CN=6a60ccdb-c12a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5f:26:4e:28:38:10:cb:f0:b1:72:83:33:6f:
d2:17:5a:91:8e:3f:81:1c:1d:3c:c6:e1:af:90:2b:
c7:0a:b1:80:48:8a:37:4a:f0:71:2d:16:8c:26:12:
9d:80:b0:3b:ef:07:66:f0:7d:e9:41:17:da:cf:03:
71:37:d6:5f:7a:93:a6:0d:92:3d:4f:5b:9b:1c:97:
93:68:0f:39:59:96:16:f7:13:6e:d7:b5:73:15:ac:
ba:ce:40:0b:3e:11:09:44:2c:0c:ec:e0:f0:d8:59:
66:64:8a:40:c5:a7:00:78:b8:98:2c:8f:49:8f:30:
df:11:a2:30:72:8b:b0:29:d2:be:2e:f1:09:94:8e:
9f:c6:55:42:cd:21:5a:90:ab:44:12:28:9e:93:db:
76:e4:4e:9d:30:5f:fd:cc:a1:97:36:a0:d8:2e:e3:
99:a6:90:19:55:ec:f6:66:ae:62:bd:35:fe:33:a3:
d9:59:33:e7:b7:9a:d8:1e:5a:64:97:61:0e:de:8b:
5f:4d:c8:a0:a9:12:31:47:99:2f:9d:35:42:68:29:
54:5d:a6:44:1a:52:d4:c0:56:3a:e6:30:00:52:1e:
a1:aa:ef:2e:01:43:8a:e7:8a:b6:72:1a:7c:df:c8:
f3:a4:83:b7:fe:f1:9a:71:e8:98:75:f3:40:25:d2:
98:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:30:E4:AC:71:61:96:7C:FC:7F:3F:17:2C:BF:1A:80:EC:40:47:2F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9DF820E685D511F1B1120200CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.185.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:5b:c6:9b:00:e0:12:70:1b:d6:64:0b:63:a0:5c:a6:fd:62:
be:9f:fd:36:65:39:63:a6:db:c7:91:0c:f4:28:7c:c2:83:01:
73:00:cf:d5:17:c5:89:d3:9e:d1:b2:45:9f:db:14:4b:54:80:
8d:36:ef:e9:db:ff:9b:64:f8:55:0c:c3:26:4d:80:ac:34:9f:
ee:1c:b7:c3:e3:5d:bd:a2:74:40:37:6d:27:26:f8:5d:d5:6c:
9c:15:e2:06:c5:19:3b:74:31:3c:e1:be:c2:db:b6:c0:3c:4c:
10:2e:99:3b:25:43:68:0b:8e:5b:d2:d2:fa:6d:d2:c4:6d:3e:
9e:74:ad:3b:95:1b:f8:9a:da:66:c1:a3:64:8e:91:b4:6b:95:
cb:eb:78:fa:04:f4:29:f6:d1:6a:52:53:e1:78:5c:36:92:15:
5f:2f:db:26:c4:ec:90:84:f9:c7:f9:48:d2:6e:b5:8c:6c:81:
8f:cb:02:f9:17:b0:1c:e2:42:9f:5f:df:d1:ad:b6:d1:f4:ac:
76:ff:d7:4a:8e:77:88:f2:09:3a:e9:85:d7:23:79:41:bd:40:
58:82:fd:12:a9:51:ae:d9:a6:c5:b8:e0:db:55:96:2b:12:6f:
a4:41:1a:62:01:3b:98:a1:18:b1:96:42:f0:8b:8d:99:19:33:
29:fb:9d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:43:41 2026 by rpki-client