Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0094A30866511F1B3C4C2FBCE1D38B0.roa
File: C0094A30866511F1B3C4C2FBCE1D38B0.roa (raw, json)
Hash identifier: p2Eoaj7xe5DmeGbHOHFFVgsLclllTnal0FmccJ2QUBo=
Subject key identifier: 9E:ED:5D:16:DB:76:D3:CA:2A:15:33:EE:46:7F:93:E9:95:DB:2C:2F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DB07
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0094A30866511F1B3C4C2FBCE1D38B0.roa
Signing time: Thu 23 Jul 2026 07:11:40 +0000
ROA not before: Thu 23 Jul 2026 07:11:36 +0000
ROA not after: Sun 30 Aug 2026 07:11:36 +0000
asID: 142032
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121607 (0x1db07)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 23 07:11:36 2026 GMT
Not After : Aug 30 07:11:36 2026 GMT
Subject: CN=6a61beac-bf18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:22:1c:07:47:8f:67:06:5e:08:fb:38:c8:aa:
fc:ab:78:33:59:56:7e:cc:03:28:0d:6a:37:d0:6a:
a1:b3:a1:98:e9:3b:b9:f4:35:8d:55:44:b4:47:27:
f6:0f:d5:8d:40:6d:a1:b4:f9:7a:53:96:d9:ab:47:
8c:63:29:08:e1:99:64:8d:1b:ee:04:2e:ec:14:9c:
8d:ff:1a:49:ab:85:b8:d7:50:83:73:a8:e5:30:d2:
e6:5b:1c:ba:65:0f:cf:78:e3:01:7d:12:1d:15:1a:
95:0d:d9:95:e5:38:f9:46:06:57:9e:76:42:2f:d3:
fe:d3:bc:7c:4e:9d:26:2f:a2:48:1f:51:de:ac:14:
f3:74:70:d9:ba:c7:14:9c:96:0b:c7:38:46:1c:d8:
9d:71:4e:d2:94:70:d0:ba:12:4a:bf:60:6f:2a:16:
cc:c2:74:af:9c:81:bf:31:93:94:6c:f7:8e:b8:93:
af:38:46:95:1c:15:7a:81:5c:4d:95:ac:ad:1a:9d:
a3:52:a9:4b:3b:b8:46:0c:85:e2:c7:24:5a:66:92:
e7:dd:ee:9c:ed:f1:df:e3:a7:64:ab:13:a1:3b:05:
b9:83:91:66:19:2b:9c:0e:fa:ab:75:73:ae:b8:fa:
2d:6b:61:60:4a:b0:7e:c3:1b:7d:b1:2c:ca:1b:0b:
55:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:ED:5D:16:DB:76:D3:CA:2A:15:33:EE:46:7F:93:E9:95:DB:2C:2F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C0094A30866511F1B3C4C2FBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
09:66:3c:a5:a9:2f:16:9d:4f:40:79:5b:42:e5:f9:25:71:c2:
21:50:c9:70:d6:79:c5:17:f3:b4:af:3b:64:13:d0:db:5c:61:
a1:cd:46:6c:d1:d7:45:19:a1:e2:a8:5d:c6:c5:c4:02:fc:00:
b1:90:54:f3:e4:c3:55:96:fd:99:ea:8c:cc:9c:f3:5e:72:64:
dd:18:46:f2:5a:e6:3d:a7:df:39:ed:a6:fa:39:05:1f:9e:64:
84:f4:3a:6f:c9:a6:e0:86:33:71:84:50:c7:66:b8:99:af:60:
5a:c3:2a:9e:79:22:89:a6:39:fc:c2:95:23:46:ec:14:24:84:
e7:67:db:ea:26:cb:0f:03:1e:59:b7:f8:57:0d:b1:43:cd:fb:
31:79:b6:88:96:48:4b:8e:0a:7e:63:dc:fe:12:06:80:ea:92:
33:9c:1e:08:ea:07:4c:4a:e6:12:aa:ee:32:26:fe:65:a8:78:
80:c3:d4:b8:fa:2f:82:ac:78:80:53:a4:5f:d6:73:a6:7f:5b:
28:76:4b:f0:10:db:3a:72:9f:69:9d:b1:0e:6d:44:df:04:1f:
b7:89:19:8e:ce:6f:75:87:7e:ea:2e:53:d1:41:fb:2c:f6:8b:
d7:db:c3:1a:54:50:ac:34:37:e3:9c:ab:1f:8f:5b:39:9d:ad:
d8:cb:ff:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:27:40 2026 by rpki-client