Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A16F4146816B11F182069614CF1D38B0.roa
File: A16F4146816B11F182069614CF1D38B0.roa (raw, json)
Hash identifier: LisoUqxlzMeLHXW7J5/GBdJD5sIJVmEsCq4jA9LbQGk=
Subject key identifier: 1B:F3:09:A7:48:C1:A0:34:F6:EF:52:79:73:AE:11:29:DA:38:C7:23
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D938
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A16F4146816B11F182069614CF1D38B0.roa
Signing time: Thu 16 Jul 2026 23:11:10 +0000
ROA not before: Thu 16 Jul 2026 23:11:06 +0000
ROA not after: Sat 22 Aug 2026 23:11:06 +0000
asID: 401701
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121144 (0x1d938)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 16 23:11:06 2026 GMT
Not After : Aug 22 23:11:06 2026 GMT
Subject: CN=6a59650e-6892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:69:7c:c3:d2:dd:bd:25:2f:d2:1c:1d:85:31:
35:6d:4c:f1:8c:a6:12:30:81:74:d0:ab:47:df:a0:
55:f8:19:00:a2:d1:5c:82:7f:43:81:14:78:c1:a3:
31:3c:a8:28:be:61:77:86:bb:d0:91:d2:78:ab:01:
db:13:de:f4:a4:a0:a7:be:8a:d2:8a:be:fa:20:f5:
26:d1:5c:99:64:3a:a4:8f:6b:0f:d7:a2:0c:6d:65:
21:4a:c7:39:79:e8:07:7c:5b:63:14:0b:04:da:a6:
ea:38:7b:94:e3:a2:9d:ff:06:55:72:1c:af:b2:41:
bd:dd:17:a3:39:e8:e2:20:e6:5b:32:19:aa:69:aa:
a4:92:3a:32:a8:fd:b1:e5:1b:70:3e:f4:1d:49:c1:
6b:f2:51:51:54:60:a9:ca:3f:85:02:4f:36:0e:5a:
af:22:32:40:05:37:56:7c:af:62:e2:0a:41:79:e2:
de:f2:3b:36:1d:a3:ed:94:d8:a0:3f:b9:20:61:46:
7b:9d:4d:95:1c:61:6b:31:bc:41:89:d0:24:c8:0b:
f6:11:ae:b2:d3:33:b4:81:4b:8b:6c:15:c0:12:07:
98:82:f3:29:68:da:03:27:93:b7:e1:df:73:f3:98:
a6:ea:1b:7e:c3:e2:db:0e:fa:27:27:d1:2f:90:ab:
14:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:F3:09:A7:48:C1:A0:34:F6:EF:52:79:73:AE:11:29:DA:38:C7:23
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A16F4146816B11F182069614CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
06:93:ea:8c:c3:f6:49:24:24:0a:88:b8:a1:f0:2e:43:2d:e6:
ec:8a:23:d4:f6:68:34:b7:2c:64:ee:b2:d8:c0:6d:dc:01:a3:
30:5e:0d:68:92:a8:0c:41:d1:f6:59:1f:51:26:28:cf:e9:8b:
6f:0b:2f:35:0c:02:a5:0c:98:2a:79:56:6b:b9:cc:7b:aa:c6:
1a:b9:04:b0:3b:18:81:28:6f:b1:75:87:d9:eb:fa:94:fa:96:
f1:b5:2c:c1:0a:75:f9:1f:f5:0d:43:1b:b7:1b:79:91:98:38:
e3:90:cb:f2:d8:d0:51:fa:49:06:f0:c8:86:81:4d:ae:57:a5:
69:59:50:70:65:b9:36:df:0a:cf:2a:0e:73:d6:26:ad:35:94:
6c:bc:05:9b:db:b3:1f:22:98:52:bb:00:f6:2c:db:5e:ce:01:
40:29:fb:10:e2:74:8b:c5:26:b4:cd:cd:ec:86:64:20:1b:58:
25:1b:94:71:93:d4:3c:fa:79:7a:b7:78:39:5e:61:08:e2:25:
68:95:b0:83:01:e8:f7:59:5a:35:d9:e0:14:bc:ba:80:63:60:
f8:50:5e:1d:c5:6f:f8:91:44:02:98:e9:9a:5e:0e:1d:28:8e:
e2:cb:cc:ec:45:c6:a4:b9:74:2a:94:0c:11:71:b7:d1:f4:fc:
ff:60:b8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:57:41 2026 by rpki-client