Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A238E96881B311F1905A0CDFCE1D38B0.roa
File: A238E96881B311F1905A0CDFCE1D38B0.roa (raw, json)
Hash identifier: Way7gTT7HOAYlxAloRhjDv3GOF7QMtz2mQVBt/drV+4=
Subject key identifier: 3F:EC:AA:EB:75:92:04:CA:EB:E5:85:4F:0D:AA:DD:4F:50:AD:E9:DB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D949
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A238E96881B311F1905A0CDFCE1D38B0.roa
Signing time: Fri 17 Jul 2026 07:46:35 +0000
ROA not before: Fri 17 Jul 2026 07:46:31 +0000
ROA not after: Mon 24 Aug 2026 07:46:31 +0000
asID: 55020
IP address blocks: 154.202.117.0/24 maxlen: 24
154.202.120.0/21 maxlen: 24
154.217.234.0/23 maxlen: 24
154.217.236.0/22 maxlen: 24
154.217.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121161 (0x1d949)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 17 07:46:31 2026 GMT
Not After : Aug 24 07:46:31 2026 GMT
Subject: CN=6a59dddb-0ced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ec:70:f1:db:bd:2a:99:88:05:c6:a3:3b:3b:
09:68:7b:2c:0c:9d:ef:7f:a6:74:1b:f9:1c:3a:d6:
81:8f:e9:7d:11:31:e5:26:50:3b:45:db:25:6c:a8:
9f:45:bd:32:5f:37:71:f5:6c:88:d4:aa:d4:6f:d1:
8f:f7:a8:af:a1:7a:ec:dd:c8:89:1e:27:34:5e:96:
f4:9c:83:27:b6:5a:af:01:7b:b9:10:09:75:58:93:
f2:10:9a:da:3d:99:d9:6f:a8:e4:b8:2e:5e:df:c7:
a4:be:e5:b5:6d:f8:5f:6c:4f:3a:7b:cb:47:63:5f:
fc:69:fd:8f:16:e9:db:c4:d2:92:fb:3d:06:f0:d5:
e1:c3:af:ef:fa:ab:ec:a3:eb:0e:8c:88:7c:29:dc:
84:41:5c:b2:43:88:2d:ce:ed:85:30:89:7d:d2:1c:
31:67:f0:a8:a4:ae:88:8f:b1:b7:29:57:7b:b2:d6:
d9:64:90:e3:7c:2c:c9:a7:16:ba:20:03:2d:fc:0b:
5a:3b:06:92:c7:50:06:d7:f4:54:4e:d0:cf:fd:d8:
8d:eb:6c:58:a2:77:78:e0:97:eb:3c:5f:65:18:a2:
85:90:f8:be:1c:cf:5e:ba:ec:2b:ff:eb:ec:42:7a:
d4:10:8d:f1:fd:96:f2:9d:24:9d:cb:d6:95:48:68:
04:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:EC:AA:EB:75:92:04:CA:EB:E5:85:4F:0D:AA:DD:4F:50:AD:E9:DB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A238E96881B311F1905A0CDFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.117.0/24
154.202.120.0/21
154.217.234.0-154.217.255.255
Signature Algorithm: sha256WithRSAEncryption
97:42:9d:9b:b1:c0:8b:80:97:b5:cc:87:9c:2b:4e:3c:54:f3:
62:05:a3:ba:64:cc:5c:07:ee:27:06:d9:54:6b:79:36:ca:e2:
44:3e:a1:ac:a3:14:ae:07:33:cb:30:10:ef:22:ae:3e:bb:09:
16:b5:a4:31:d3:2b:81:d2:77:cf:5e:e7:e8:ad:b0:07:33:d6:
ba:d1:df:3b:af:ea:4c:21:75:a2:71:72:1f:de:67:53:1c:a1:
0c:9e:99:3a:cc:ae:3e:fb:46:b5:8d:7d:09:f7:72:e9:be:53:
da:c4:eb:14:76:99:1b:e7:17:96:39:10:ee:e3:e5:dd:08:12:
a7:0a:5f:40:62:4d:bd:d3:3e:2a:9a:3b:84:ba:ad:10:a7:b9:
9b:53:90:20:02:19:f0:89:e3:59:a0:2a:e9:e7:bf:9a:ce:4f:
1f:b5:d6:f7:c9:ac:da:f6:e4:ca:a1:d0:a6:cb:ea:b8:9c:83:
2f:0a:77:d2:87:51:63:3f:7c:3f:93:ad:3d:22:8b:0a:b0:da:
34:61:21:60:65:33:7d:08:54:c5:ea:24:a0:c6:14:08:61:51:
96:a8:a0:d1:bb:d3:4b:16:ed:f1:89:d4:cd:60:a3:5a:12:b4:
92:d1:25:7b:a4:5c:e2:f8:c3:00:1f:d8:b0:f7:ab:22:33:6f:
09:91:d7:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:57:44 2026 by rpki-client