Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA22BBA2784B11F1B58E87A9CE1D38B0.roa
File: AA22BBA2784B11F1B58E87A9CE1D38B0.roa (raw, json)
Hash identifier: 5kC99ehsBUlUU+LjBeGfILNyw0zTKZ1dORu12GZ9zMk=
Subject key identifier: 41:05:5C:DD:13:8E:4D:29:FD:DC:AF:25:83:BB:C6:AB:B2:98:A0:6B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D70A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA22BBA2784B11F1B58E87A9CE1D38B0.roa
Signing time: Sun 05 Jul 2026 08:29:40 +0000
ROA not before: Sun 05 Jul 2026 08:29:34 +0000
ROA not after: Fri 07 Aug 2026 08:29:34 +0000
asID: 274872
IP address blocks: 154.201.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120586 (0x1d70a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 5 08:29:34 2026 GMT
Not After : Aug 7 08:29:34 2026 GMT
Subject: CN=6a4a15f4-a864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f4:bd:f9:4e:e1:10:1f:1c:c3:ba:b1:cd:b1:
b4:48:38:72:65:2c:e6:38:0e:d8:78:ab:c9:21:33:
0d:56:55:0a:78:88:04:ca:3a:da:46:35:2e:8a:3d:
bc:78:50:3c:d7:17:e1:9d:8f:86:23:f6:ea:b4:c1:
09:26:18:22:6b:05:4b:5d:a2:87:a7:47:8a:d6:bd:
ff:81:ba:19:06:14:b7:18:46:d9:a7:65:58:45:dd:
9d:65:b9:86:ea:39:93:a3:03:2f:0c:54:ec:4a:d8:
3d:92:49:27:61:c0:96:b5:d1:2a:87:4f:38:63:bb:
59:c8:c9:7a:fb:73:46:02:ed:3d:c2:d4:bc:b2:a2:
99:2d:c7:27:1b:e4:15:ab:31:81:66:02:f1:7f:bd:
c2:58:55:5e:b6:af:84:9d:6d:d8:6e:70:d1:01:ea:
89:78:54:d7:6b:1a:eb:89:d6:fb:6c:c7:61:97:36:
a5:7e:f1:e1:78:d5:90:e0:a2:73:3b:65:34:e5:bf:
92:b6:81:b3:4d:ff:4d:ae:26:f8:94:d2:d8:04:68:
e1:01:51:da:d3:b4:d6:d0:5f:2c:f3:a8:c0:a6:05:
19:5d:c9:47:bb:cb:7f:aa:9b:ba:06:80:d9:7b:dd:
9e:43:71:6b:7c:2e:67:5f:9c:16:6f:85:1d:dc:05:
7a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:05:5C:DD:13:8E:4D:29:FD:DC:AF:25:83:BB:C6:AB:B2:98:A0:6B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA22BBA2784B11F1B58E87A9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.0.0/24
Signature Algorithm: sha256WithRSAEncryption
41:03:5e:5a:66:26:e8:ea:e9:71:e9:70:b4:47:5d:5f:55:24:
50:4b:4a:37:79:d7:cc:30:d1:67:73:e3:b5:11:cb:aa:0e:8d:
77:51:0a:45:a5:90:4e:57:42:15:0c:a1:6f:76:07:8f:0a:13:
76:8b:a4:66:d8:26:1e:ee:af:5b:9c:42:c4:f2:b2:74:d5:54:
3b:d3:ef:51:df:ee:61:35:f1:2f:af:7f:de:91:b4:2f:ec:1e:
09:62:cc:0a:dd:0e:d1:9c:68:4d:85:15:c1:8a:22:c0:0b:1c:
f9:2a:28:b4:c9:63:f3:28:e7:34:d0:cd:03:04:6c:91:1f:80:
a9:e5:48:d4:9a:a2:5f:4c:d5:f7:06:eb:be:02:03:d1:52:0f:
e1:87:cc:17:c1:c6:9a:ea:4b:2f:ed:6d:74:5a:b1:9c:c6:fa:
12:70:27:4e:66:13:2d:a1:61:03:31:3d:d3:4b:0b:3d:87:37:
4f:0c:98:5e:9c:bb:f3:76:bd:ae:75:20:9a:42:ab:c7:95:49:
58:28:83:93:96:01:74:5f:3f:bc:ba:78:9b:3e:f2:11:8e:d6:
e2:d4:b7:7c:cb:69:e6:78:bd:28:b0:c2:12:c9:58:d2:4f:ac:
94:71:7a:69:81:b2:f2:be:6d:f7:dd:52:9c:8c:09:35:cf:22:
b3:58:03:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:20:27 2026 by rpki-client