Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ADED58247D3B11F1A13C96DBCE1D38B0.roa
File: ADED58247D3B11F1A13C96DBCE1D38B0.roa (raw, json)
Hash identifier: MuO5F67jzn7fgr6bLUbRVvzVd1m/ohqodsdFxN2Ap9Q=
Subject key identifier: D8:88:8A:1F:68:CE:C8:FE:FA:F6:95:52:B4:32:43:AC:E2:59:BA:B1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D832
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ADED58247D3B11F1A13C96DBCE1D38B0.roa
Signing time: Sat 11 Jul 2026 15:17:50 +0000
ROA not before: Sat 11 Jul 2026 15:17:45 +0000
ROA not after: Tue 18 Aug 2026 15:17:45 +0000
asID: 62563
IP address blocks: 154.94.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120882 (0x1d832)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 11 15:17:45 2026 GMT
Not After : Aug 18 15:17:45 2026 GMT
Subject: CN=6a525e9e-b835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c1:3d:3a:7e:d5:8e:b5:b2:f1:b6:97:2d:7d:
1d:89:78:6d:dd:50:6a:e0:6e:9a:fb:33:f7:6d:b1:
85:82:7b:52:ab:8f:17:40:49:0a:8f:13:2f:4e:63:
8f:3d:2d:db:eb:68:bb:a6:29:65:ba:05:81:c3:4d:
fd:1c:64:31:4f:ac:69:82:53:cd:e7:5d:3c:a9:af:
7b:38:98:29:66:a8:ad:4f:ee:21:c5:71:66:3a:8c:
59:ac:14:2d:bd:06:82:8d:47:43:bc:7a:3c:7c:bd:
d6:6e:7b:1f:86:e4:73:02:5e:7f:fd:bb:3d:58:9b:
54:9b:62:bb:74:2b:b7:2e:35:84:1d:1b:46:eb:cc:
0f:06:7b:38:c6:00:2a:1e:d1:80:fc:b8:58:68:d9:
69:ae:24:5f:17:da:b8:05:1e:6c:8f:0f:e4:7c:74:
e5:d3:44:83:d5:2c:be:3e:68:8d:fe:b8:0d:13:93:
ff:2b:78:9d:59:17:3a:1a:20:b3:ba:04:75:51:38:
11:c0:f6:1d:23:16:7f:ff:0e:4b:0d:ea:c4:53:e6:
e3:b1:f5:ba:37:f0:a4:59:9c:71:a8:23:03:d2:3c:
58:e4:89:59:e4:3b:d3:83:f7:89:9f:f1:0e:72:f6:
b5:1a:ad:bf:c6:67:26:c1:f8:a4:59:2b:31:7c:84:
ec:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:88:8A:1F:68:CE:C8:FE:FA:F6:95:52:B4:32:43:AC:E2:59:BA:B1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ADED58247D3B11F1A13C96DBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.41.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:75:2a:03:b6:28:52:cc:b4:67:78:cb:08:e2:08:67:eb:23:
3f:ab:a1:5e:ff:d4:4c:fb:e5:92:b8:ec:2c:2a:e3:bd:69:46:
68:d9:77:95:b0:7e:ca:19:86:bd:36:17:2f:f2:25:50:46:f5:
44:bf:b6:fd:2c:53:de:9d:2a:5d:cb:0b:8d:06:6a:bd:26:fe:
38:93:e6:3f:38:01:fb:2b:13:8f:5f:a4:82:bb:86:b4:b6:b3:
e2:e8:3f:fa:44:be:1c:09:f8:d8:46:ac:12:2e:d4:34:02:07:
58:2d:4d:2a:75:9d:d1:ef:9f:d7:1b:ca:61:90:b1:74:55:e0:
4d:8b:a3:fc:55:82:e5:ce:45:d7:e0:c9:e1:12:da:70:7f:ee:
f1:cc:66:db:2e:6c:08:55:ae:2f:4a:59:b6:8f:51:63:19:2f:
b9:7e:d3:fc:ab:54:02:b3:b3:ff:29:df:3a:ed:59:ba:56:a5:
a0:da:23:3d:a8:2a:d6:22:9f:14:a2:a7:ea:1d:7f:e6:2b:f2:
0d:de:96:d6:5f:a6:39:9e:48:a7:28:64:47:2b:06:4a:2e:28:
2c:db:b4:1c:21:39:75:20:57:66:5f:de:e2:3f:5b:b7:6c:2b:
e7:b8:73:66:2d:99:6f:d3:68:ae:a5:bc:af:49:48:7b:50:24:
a3:55:41:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:37:53 2026 by rpki-client