Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B14BDC647B6211F1B527C3A6CE1D38B0.roa
File: B14BDC647B6211F1B527C3A6CE1D38B0.roa (raw, json)
Hash identifier: XcMggnfopUAuxF52NhJtuCxgAhtn6W9PMASNYUYvQ4g=
Subject key identifier: 2E:D4:1C:38:FE:C1:8E:18:94:A3:BA:CC:E2:5D:C8:6B:3F:49:74:53
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D7A5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B14BDC647B6211F1B527C3A6CE1D38B0.roa
Signing time: Thu 09 Jul 2026 06:52:04 +0000
ROA not before: Thu 09 Jul 2026 06:51:59 +0000
ROA not after: Sat 01 Aug 2026 06:51:59 +0000
asID: 63099
IP address blocks: 154.196.160.0/24 maxlen: 24
154.199.4.0/24 maxlen: 24
154.200.54.0/24 maxlen: 24
154.200.129.0/24 maxlen: 24
154.200.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120741 (0x1d7a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 9 06:51:59 2026 GMT
Not After : Aug 1 06:51:59 2026 GMT
Subject: CN=6a4f4514-5c61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:07:aa:b7:37:70:98:6d:dc:be:5a:dd:4e:16:
e0:bd:8d:56:e2:23:ee:e8:08:fd:c0:8b:cb:3b:3a:
76:a8:13:0b:1f:6a:ad:7b:8c:e7:47:99:aa:7c:80:
40:ae:2d:ac:6b:74:2e:5a:54:97:96:3d:59:95:d2:
88:86:0d:5b:f8:3c:8d:2c:3a:2f:ec:b7:06:c0:b3:
81:d8:fd:99:f3:c7:7c:78:d6:cd:80:84:8f:c3:d7:
1e:e6:4b:fc:99:50:67:67:11:78:51:53:ca:71:5d:
22:da:f7:45:f8:ce:cc:53:97:c6:c0:9e:01:fa:42:
47:5f:13:c3:39:ec:42:8e:a7:81:0e:16:cc:5d:35:
32:f2:85:a3:23:09:00:e2:24:ad:a5:94:46:67:f1:
f4:7a:af:d9:3d:5e:3c:f3:e0:15:96:1f:72:da:ca:
5b:f8:f3:22:cc:82:1f:1d:aa:73:b3:4c:85:e5:c3:
ef:2d:63:cc:56:6e:40:0b:6e:0d:44:26:a6:d0:b9:
c2:ab:54:d9:fd:c1:00:a9:9b:81:cb:8a:fd:61:ab:
df:85:3f:77:c1:8a:ca:8a:42:10:06:5f:3e:85:e2:
89:df:a1:0e:72:99:29:e8:d8:cb:f7:2e:e5:ac:76:
9d:97:5f:be:65:a7:db:12:a3:2d:be:e3:69:5c:d6:
69:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:D4:1C:38:FE:C1:8E:18:94:A3:BA:CC:E2:5D:C8:6B:3F:49:74:53
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B14BDC647B6211F1B527C3A6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.160.0/24
154.199.4.0/24
154.200.54.0/24
154.200.129.0-154.200.130.255
Signature Algorithm: sha256WithRSAEncryption
76:31:50:6e:ae:19:2a:c4:fb:6c:5f:f9:12:0f:aa:90:b0:51:
50:07:ac:0c:5a:fa:fe:3a:7a:2d:71:b9:9a:38:5a:89:ce:de:
3c:dc:30:01:f6:74:1d:5b:76:5d:f0:46:1f:5c:bf:f4:0d:73:
90:51:37:5c:35:fe:92:18:32:14:f2:17:a7:57:04:73:bf:61:
0f:39:d6:f2:08:8b:da:f2:d2:41:56:1a:b4:6a:0b:11:4a:12:
15:61:89:3a:0b:89:72:db:6f:32:49:d8:08:0a:83:62:53:0d:
43:8c:4c:5e:0b:f3:a6:13:58:fa:63:30:c2:e1:52:06:85:f5:
d3:55:06:00:8b:c6:75:ce:a0:5c:51:89:a0:6c:53:09:a4:c5:
4b:1f:c3:36:17:ea:14:ca:ed:bf:3c:d6:85:7d:67:cb:34:ba:
a3:07:95:74:d0:61:4b:15:6a:00:57:19:92:4f:88:a9:be:d5:
93:12:c2:a1:2b:e4:de:ad:4b:b6:ba:65:4b:6a:00:7f:f2:17:
f2:0b:b8:5c:f7:48:98:14:c0:06:8e:5a:5f:ca:5c:ed:17:bf:
f0:39:56:81:95:32:e9:16:87:31:91:57:4b:ab:da:6a:69:2f:
0b:e9:91:66:5d:54:b0:36:3f:e4:3a:f8:ea:0a:8a:ed:49:8b:
72:cf:ac:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:43:44 2026 by rpki-client