Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E62FD40841711F188D0CAE6CE1D38B0.roa
File: 9E62FD40841711F188D0CAE6CE1D38B0.roa (raw, json)
Hash identifier: g6hlwuM8Qoc79aEBnEGm2w4T34YDQfnnvaJHnF7/TBI=
Subject key identifier: B7:13:D5:88:2A:E3:FB:F9:CF:18:3C:0A:F9:8F:78:EA:E7:B9:D1:03
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D9C8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E62FD40841711F188D0CAE6CE1D38B0.roa
Signing time: Mon 20 Jul 2026 08:47:20 +0000
ROA not before: Mon 20 Jul 2026 08:47:16 +0000
ROA not after: Wed 19 Aug 2026 08:47:16 +0000
asID: 6079
IP address blocks: 154.221.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121288 (0x1d9c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 20 08:47:16 2026 GMT
Not After : Aug 19 08:47:16 2026 GMT
Subject: CN=6a5de098-e866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b9:a9:46:73:0d:38:cd:60:f0:2e:5f:10:8f:
72:cb:7d:ca:d5:55:72:1b:30:75:ca:60:44:e3:fd:
45:0b:2e:84:69:b3:dc:d2:11:af:4d:35:9c:54:c6:
97:d3:fc:7f:f5:39:9a:1e:ad:e2:61:40:96:3a:09:
40:e1:58:cd:e6:d8:f1:54:eb:8d:72:6e:6c:dc:9c:
f1:20:d8:77:81:3b:3d:ad:74:61:4d:32:a2:60:48:
65:6a:ed:dc:01:09:56:72:b9:be:1a:17:40:19:7f:
2e:c5:87:92:6a:14:79:d8:d1:56:c5:0c:45:9f:a8:
6f:e0:f1:02:3e:1c:73:15:0d:69:a0:e5:c2:c4:4d:
d6:e6:e9:78:71:96:56:15:18:a4:06:89:8a:a0:57:
35:26:39:0c:5e:94:0a:17:7c:7c:32:b3:78:b0:7f:
cd:b4:31:bd:c2:6b:d5:ce:a3:6e:6e:fc:fa:5a:09:
bc:e0:24:5b:a9:a1:8e:c8:26:cb:42:6d:d1:2d:f1:
f0:bb:7b:ed:22:6a:01:18:60:27:54:d6:10:c4:6e:
2d:d5:3c:7d:33:5d:2e:d5:04:e6:61:04:75:bc:2f:
f9:d0:ef:30:ef:13:e4:96:ae:a0:b1:ed:ba:bb:72:
68:e3:b9:0e:9d:a0:2f:3f:61:2f:b8:be:65:22:6a:
01:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:13:D5:88:2A:E3:FB:F9:CF:18:3C:0A:F9:8F:78:EA:E7:B9:D1:03
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9E62FD40841711F188D0CAE6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.192.0/18
Signature Algorithm: sha256WithRSAEncryption
b6:61:5f:1a:ae:58:17:b5:e5:97:97:1a:b5:db:17:d7:6e:9c:
58:41:8d:70:28:57:89:45:a2:d9:66:40:e4:7a:59:5b:01:eb:
ee:b5:2f:17:4c:fc:19:d1:fe:4b:cf:f2:50:e2:27:11:72:59:
08:10:4a:f5:c1:88:d8:5c:5a:a7:a0:b4:3c:fc:74:b1:87:5b:
0d:05:f6:e4:d1:13:c0:37:f9:3a:a7:97:ad:d3:08:af:04:30:
0b:1a:33:ba:fd:a2:cb:7b:2e:cb:36:ff:cb:46:ab:4a:20:a2:
0e:02:21:42:10:8c:a8:1b:e9:b4:67:9f:fd:8d:c1:2e:0a:25:
3e:af:34:67:fc:2b:72:47:64:87:c8:03:97:6a:dc:ca:02:7b:
0e:9c:3a:ba:8b:e5:be:6f:c4:dc:fc:ed:5e:53:67:ed:1c:02:
48:ee:ec:dd:ca:8e:21:5b:33:b9:f8:59:7b:14:ac:0a:a3:90:
9f:45:f1:90:a1:1d:5b:f8:99:76:41:69:2a:5f:9d:07:a9:6d:
4a:0a:f5:2c:37:e6:48:4c:90:4b:7f:96:33:3f:e2:87:a4:0f:
07:a0:1a:c2:78:ab:cb:79:e8:4e:6b:c1:e4:45:43:0c:34:c5:
18:21:d8:39:8c:e6:d7:41:7f:f5:6e:c3:0d:d3:7b:2e:a8:72:
d8:d5:c9:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:43:12 2026 by rpki-client