Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E3565AC844311F18D78A1EDCE1D38B0.roa
File: 9E3565AC844311F18D78A1EDCE1D38B0.roa (raw, json)
Hash identifier: 9Q9gSlpd7aLxxk7YeU7scTv3FGk207tqzqCWHeNsWR8=
Subject key identifier: 44:4B:0C:26:71:FC:98:CC:4A:78:70:84:85:E3:26:67:33:06:C7:CD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DA30
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E3565AC844311F18D78A1EDCE1D38B0.roa
Signing time: Mon 20 Jul 2026 14:02:18 +0000
ROA not before: Mon 20 Jul 2026 14:02:14 +0000
ROA not after: Fri 20 Jul 2029 14:02:14 +0000
asID: 17561
IP address blocks: 154.193.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121392 (0x1da30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 20 14:02:14 2026 GMT
Not After : Jul 20 14:02:14 2029 GMT
Subject: CN=6a5e2a6a-e542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:03:43:a5:c5:e9:82:a7:b0:51:10:d3:aa:fc:
03:ca:44:52:1f:11:aa:c0:c5:a1:a4:b7:5c:b8:45:
55:a5:bb:48:b9:7e:8b:1c:62:81:ed:fb:2e:12:83:
07:37:65:95:ec:72:fd:53:7c:d8:6f:76:10:dd:ba:
87:4a:da:0b:66:ed:3a:39:27:80:fa:bc:14:63:0a:
9f:da:38:f5:c8:b0:cb:df:2b:3e:82:13:f0:37:9a:
71:3b:d8:7c:8e:ac:a7:af:98:ef:30:97:3f:d5:46:
60:21:86:1f:ec:54:92:03:72:71:f2:69:ca:c8:b4:
87:a9:a5:23:9d:c8:21:5f:b4:48:30:db:8e:32:26:
03:cd:3d:bc:14:fd:da:7f:8f:19:c0:ed:81:23:84:
d9:22:c9:b6:ce:f8:c1:2d:45:00:24:ca:97:06:3c:
59:7f:73:27:e3:9e:56:b9:33:8d:6d:34:43:ae:6e:
78:40:af:bd:6c:27:c1:85:92:e4:e9:81:e7:b8:20:
1a:36:c2:e1:89:f5:4d:5e:e8:69:8d:59:a2:45:92:
c4:10:aa:c0:6a:79:fa:db:2d:14:6b:19:02:f1:66:
29:43:78:00:89:23:5b:15:a7:1c:05:03:f2:43:40:
22:ee:45:22:5e:cc:0b:f1:07:4e:6e:95:80:76:b7:
ef:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:4B:0C:26:71:FC:98:CC:4A:78:70:84:85:E3:26:67:33:06:C7:CD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E3565AC844311F18D78A1EDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.130.0/24
Signature Algorithm: sha256WithRSAEncryption
34:e6:4b:98:93:a0:51:79:d2:91:85:98:24:6f:21:ee:ab:1e:
88:dd:8b:d1:68:92:aa:af:c8:c4:90:af:9c:04:d0:d0:a9:4c:
29:8a:ab:f2:75:f6:54:c0:af:e2:55:1e:1c:df:fa:45:cc:00:
67:c6:41:7b:f3:dc:f0:d3:cf:d1:67:af:ec:34:ce:5c:1b:e8:
e2:a5:c7:a3:2e:34:88:7e:a2:44:4e:cc:a4:a2:90:e2:3c:b2:
9e:42:1a:0d:3e:59:54:e7:fe:62:36:ec:a1:2e:87:af:0c:3a:
d1:15:94:83:58:c2:75:7c:c4:7c:51:8f:21:da:2e:31:02:92:
9d:33:72:9e:fb:2a:38:58:a1:c9:db:fc:d2:8a:e1:b8:ce:a3:
32:1a:47:94:4a:75:1c:8d:67:78:69:6e:99:28:4a:8a:03:7e:
b9:25:86:c2:85:53:fa:13:88:39:c1:11:5d:64:55:4a:4d:e2:
4a:9f:46:0a:39:47:77:a8:ec:27:07:e3:9d:c9:03:09:89:31:
38:6c:de:b6:f6:cd:d3:4b:1f:d8:49:de:3e:f0:36:6d:bf:e8:
75:81:21:45:2e:b6:ef:63:48:6a:ff:a9:07:4e:61:df:4f:c6:
91:e4:0b:2f:ec:20:92:cd:78:04:a9:d3:6e:83:02:66:39:a3:
5c:53:32:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:27:26 2026 by rpki-client