Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B7337594843411F19AFBAA12CF1D38B0.roa
File: B7337594843411F19AFBAA12CF1D38B0.roa (raw, json)
Hash identifier: BwGmmUrdD5mnlPmT2Ot76n2pIfXfNnqEDyufdysX0Mg=
Subject key identifier: 97:3F:50:58:59:42:52:08:FA:CB:29:BC:E9:70:8B:D1:8F:00:45:55
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DA2A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B7337594843411F19AFBAA12CF1D38B0.roa
Signing time: Mon 20 Jul 2026 12:15:38 +0000
ROA not before: Mon 20 Jul 2026 12:15:33 +0000
ROA not after: Wed 21 Oct 2026 12:15:33 +0000
asID: 209242
IP address blocks: 154.198.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121386 (0x1da2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 20 12:15:33 2026 GMT
Not After : Oct 21 12:15:33 2026 GMT
Subject: CN=6a5e1169-1e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8b:8f:d9:04:fc:c5:9e:7f:2e:cc:a9:b7:25:
e0:c7:a6:12:7e:7d:ff:22:2d:c0:ce:ab:ab:1e:c1:
1c:55:e3:ac:5c:02:81:2c:d9:0c:c6:b8:4e:65:ef:
39:77:8d:32:78:d9:4e:cc:6b:96:3b:c6:94:04:89:
7a:eb:36:2d:6c:e5:c0:18:ae:ee:9d:f1:c7:bf:87:
f5:53:ae:a7:b5:63:c4:b6:ba:07:7d:76:f3:0b:af:
ab:5e:2e:af:68:c3:7b:a4:94:a3:ed:71:41:04:ca:
66:64:b8:9c:22:9d:8f:79:a5:d4:29:12:73:57:bc:
c0:8b:ce:98:0e:d9:fd:2a:b3:c0:e2:61:93:00:a3:
89:bf:d1:9b:25:2f:b0:42:75:e6:32:24:92:0c:46:
45:01:c6:40:42:4f:21:23:d9:2e:93:b5:74:a7:22:
4f:66:bf:62:b0:90:25:2c:33:42:70:d4:55:be:b0:
f0:f2:ba:9e:35:00:55:1d:e1:f6:cb:2b:fc:8a:45:
b9:c2:fe:d9:3c:6c:0a:8f:2e:27:7c:eb:b9:2a:08:
d0:43:68:7e:5b:78:96:65:db:81:f9:d1:85:93:b5:
4a:12:54:b1:3a:57:f5:c0:11:5e:c2:2e:39:cd:bc:
88:aa:9a:08:44:77:27:e5:5b:59:fe:ba:26:01:b0:
6d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:3F:50:58:59:42:52:08:FA:CB:29:BC:E9:70:8B:D1:8F:00:45:55
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B7337594843411F19AFBAA12CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.173.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:da:69:55:56:24:04:bf:70:61:b2:76:4b:4f:9f:88:24:be:
a4:33:03:91:ea:df:b4:1e:0f:80:87:d2:c0:eb:5f:cf:c9:64:
c4:1e:98:3b:01:15:7f:7e:22:d0:6d:37:ca:d6:cb:38:9e:b5:
d1:ad:44:c8:4f:55:a1:23:0e:27:bb:71:1f:29:80:d1:ad:7f:
5c:c0:83:7f:46:26:85:89:94:0d:13:26:d0:a8:ee:a6:74:99:
d0:76:0d:36:63:6a:2a:a6:69:17:e6:bb:3f:4b:a5:1c:26:4a:
92:3a:69:4f:52:eb:bc:4b:e6:b0:8a:ca:eb:c8:0b:13:5e:1f:
4e:38:7e:9d:c0:24:cc:c0:21:a3:1e:d9:bb:0e:74:80:20:26:
2e:36:71:63:b7:f4:56:d5:bf:00:17:00:62:6e:96:69:b8:cc:
9e:01:7f:ae:4b:45:b9:44:26:76:f6:75:82:72:f4:f7:be:ba:
3c:33:21:a0:f0:15:9a:ff:cd:91:79:bf:8b:bf:47:94:17:03:
75:f5:e5:81:bd:4b:84:03:cd:c5:ba:f3:00:fd:35:cd:40:44:
13:bf:1a:26:6c:3c:5f:67:e1:3e:01:27:bc:5e:6a:9c:eb:19:
e2:d3:19:f5:6e:33:25:b5:97:9d:40:94:f5:30:50:29:18:6e:
9b:6d:ae:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:12:21 2026 by rpki-client