Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AAF7FFC081B911F1BE51F400CF1D38B0.roa
File: AAF7FFC081B911F1BE51F400CF1D38B0.roa (raw, json)
Hash identifier: jvFKt6ZdnjMH5x5LKDRrxcQ3TcO6mrlpl/8jSmxJNAw=
Subject key identifier: 44:F8:0E:68:B7:D7:D4:17:36:A6:AC:62:46:13:FF:B8:D4:FA:9F:D1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D95B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AAF7FFC081B911F1BE51F400CF1D38B0.roa
Signing time: Fri 17 Jul 2026 08:29:47 +0000
ROA not before: Fri 17 Jul 2026 08:29:42 +0000
ROA not after: Wed 19 Aug 2026 08:29:42 +0000
asID: 11404
IP address blocks: 154.83.160.0/20 maxlen: 24
154.89.240.0/20 maxlen: 24
154.90.80.0/20 maxlen: 24
154.92.144.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 08:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121179 (0x1d95b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 17 08:29:42 2026 GMT
Not After : Aug 19 08:29:42 2026 GMT
Subject: CN=6a59e7fa-118d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:27:64:c9:29:c9:c5:b8:49:12:d6:e6:3e:2a:
f0:6c:35:de:54:59:9b:83:66:01:58:9f:24:6c:e2:
4a:07:11:ea:ea:82:7d:46:84:31:3d:82:0e:90:b4:
04:02:41:59:c8:f0:e7:e2:8e:57:c3:d0:31:15:cc:
30:14:bf:f9:4e:0f:dd:f0:e8:d9:a1:57:51:56:1d:
a0:ef:2b:c1:b7:c4:a0:51:fa:87:24:ae:e0:6e:39:
36:5c:5a:94:0d:10:ab:eb:0e:a8:47:31:39:4c:9e:
9f:83:c0:6b:88:e9:e7:45:32:b4:93:53:d9:64:ad:
28:19:3f:2d:4a:1e:67:8d:09:c3:79:01:3b:db:60:
75:ef:9b:35:22:46:d3:ed:aa:57:93:aa:ee:e0:f2:
82:66:61:67:d6:d0:0c:21:94:9a:66:cc:0d:05:70:
2a:fd:3d:1a:77:73:d6:24:ba:9e:07:83:f4:f6:4c:
f9:30:7c:0f:f3:63:24:24:7f:44:b3:70:c5:fe:9d:
b8:e9:48:2a:be:ca:d4:dc:40:a5:0f:73:7a:13:05:
6f:7a:13:d4:9c:7b:70:d0:83:14:02:06:ab:ee:e8:
b7:0d:a2:ff:53:10:aa:f9:10:95:2d:6c:8a:1a:e8:
8b:35:2f:55:bd:1e:d7:b2:5f:89:c0:be:7d:8b:8e:
71:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:F8:0E:68:B7:D7:D4:17:36:A6:AC:62:46:13:FF:B8:D4:FA:9F:D1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AAF7FFC081B911F1BE51F400CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.160.0/20
154.89.240.0/20
154.90.80.0/20
154.92.144.0/20
Signature Algorithm: sha256WithRSAEncryption
49:09:d3:03:ea:25:12:10:92:a3:a5:f3:b2:97:25:5a:31:7f:
7b:4a:05:77:5d:88:0b:40:7e:7c:7c:fe:0a:c1:00:ce:cf:3e:
f1:b3:64:4e:a7:24:e4:4f:37:74:cb:4c:c3:aa:3d:51:da:1f:
2e:ea:1d:5b:3c:69:5e:1b:aa:e9:9a:de:33:f4:22:7c:62:e8:
c2:7f:64:21:27:35:1e:c5:a6:7f:04:79:b5:39:a7:38:72:c0:
35:02:4f:a1:f3:4c:7e:c5:a3:cd:5e:42:2d:a7:c3:71:ed:89:
c7:29:e2:9b:82:25:9b:da:be:db:ff:ab:7f:65:3f:cc:a7:f5:
6e:ba:8d:d2:3a:b8:4a:1f:22:83:dc:c9:74:b4:fd:b1:f7:d6:
d7:54:88:68:a6:0a:95:1d:a2:e4:26:ac:c6:c0:f3:43:45:ff:
1b:82:e5:9b:68:6b:e5:36:a2:6b:ef:9f:19:38:6e:86:55:3f:
ee:d6:a8:27:37:70:81:a3:9b:f9:20:be:6e:dc:86:42:c9:d4:
af:c6:f6:b6:36:a8:34:a8:64:06:4c:f7:41:6d:12:73:d9:b3:
de:8d:84:19:a1:83:3c:f8:47:19:fc:2e:20:2f:9a:e2:6e:89:
c6:79:84:5e:c1:73:6a:1d:9b:83:72:b1:39:0c:46:84:c7:10:
0f:5f:9a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:30:39 2026 by rpki-client