Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B807BC9C860911F1B86F11BACE1D38B0.roa
File: B807BC9C860911F1B86F11BACE1D38B0.roa (raw, json)
Hash identifier: jHa68jqS53XMX7nbd3LK/CWe9bDHretdBRxVQ6REkfg=
Subject key identifier: 4B:AB:DC:49:67:33:F7:B9:2E:DC:71:86:50:30:EF:D6:E5:0C:6B:FB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DAEE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B807BC9C860911F1B86F11BACE1D38B0.roa
Signing time: Wed 22 Jul 2026 20:12:53 +0000
ROA not before: Wed 22 Jul 2026 20:12:47 +0000
ROA not after: Thu 27 Aug 2026 20:12:47 +0000
asID: 212238
IP address blocks: 154.208.66.0/24 maxlen: 24
154.208.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121582 (0x1daee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 22 20:12:47 2026 GMT
Not After : Aug 27 20:12:47 2026 GMT
Subject: CN=6a612445-dacf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:da:eb:17:8d:ce:2e:ec:15:cb:4a:20:2d:68:
f4:9a:ae:78:b3:d6:70:65:67:c7:b0:43:32:c4:63:
a3:cc:3b:e4:8a:24:f4:0d:87:62:39:e0:d8:4a:b2:
53:a1:c6:55:59:df:40:f3:34:fc:84:5b:cc:50:4e:
df:ab:d6:63:14:7f:86:98:87:fd:7d:b6:e0:5c:78:
65:0b:88:b6:f9:4c:b4:87:4b:0c:65:57:4b:5c:37:
17:73:87:7e:55:9f:90:be:e0:75:cf:70:dc:87:d9:
15:ac:f0:a5:b8:8a:10:81:f8:23:80:ec:3e:d2:0b:
58:54:02:d9:00:4b:d5:5b:20:5e:ed:9e:44:3b:93:
ad:81:c4:5f:d8:e9:d8:90:eb:24:7d:ae:3f:05:3b:
d3:cc:55:48:12:4c:43:c5:bb:dc:c3:27:ed:75:15:
11:8b:dc:b3:da:a0:cc:c6:b6:c5:d6:27:9d:e9:7b:
bb:5b:3b:ca:a4:20:b5:16:bb:32:09:5c:62:a1:04:
13:5f:87:52:87:5c:03:91:83:32:29:bc:5f:22:f5:
04:6c:5b:20:02:9f:6b:0e:08:b9:a4:78:75:34:a0:
15:56:02:fe:b0:34:80:09:40:37:fb:9d:3f:9b:bd:
d9:1d:26:f8:0b:82:fe:c2:8d:f1:5c:7a:2f:d1:dd:
2d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:AB:DC:49:67:33:F7:B9:2E:DC:71:86:50:30:EF:D6:E5:0C:6B:FB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B807BC9C860911F1B86F11BACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.66.0/24
154.208.115.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:5f:2b:d5:d0:44:c6:f8:cf:9e:06:c0:bb:a1:f5:ac:99:3d:
30:20:df:bd:81:7d:a3:d1:e0:3b:0e:57:a6:6f:ba:25:f5:9b:
2e:06:fd:e3:c2:d1:7e:44:1c:1d:ad:3b:5d:b9:b9:18:d2:ca:
74:58:67:8d:3f:5c:08:cc:47:6d:03:c7:86:3c:1a:2c:53:da:
ac:bc:f2:8c:1d:74:70:2f:1f:95:a8:20:bf:60:eb:ca:6a:d5:
56:29:79:0a:20:2f:cc:7e:37:8d:f5:60:72:3e:68:68:97:11:
82:f5:f1:63:5a:5b:03:59:fb:60:96:6e:c9:ca:fb:55:39:7f:
9e:86:33:31:48:1a:8a:9d:e5:cf:49:fc:e5:32:08:e7:27:73:
c6:1e:41:90:96:e2:6e:20:24:67:05:f9:53:fb:7c:9e:5a:5a:
9e:a6:ad:28:5c:dd:f2:1f:5e:3c:7a:af:44:e3:f6:3e:18:8d:
dc:20:b6:f9:2f:f2:84:b5:de:c2:26:af:a0:2a:6b:a1:eb:e3:
91:fa:2a:16:8b:90:c1:6a:ae:92:d2:e4:82:ff:4d:47:9c:43:
b0:42:30:53:5f:ad:19:54:9a:2b:62:56:dc:cf:2d:57:c0:0c:
e7:14:c9:ed:92:c0:48:93:b3:fe:0f:8a:f0:37:db:fa:c4:a4:
b1:c5:54:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:08:25 2026 by rpki-client