Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C15EB2DA7C2E11F1B9189B00CF1D38B0.roa
File: C15EB2DA7C2E11F1B9189B00CF1D38B0.roa (raw, json)
Hash identifier: 5GbsAcLJU1tJRrAAlSHVH/7cabBb7BwZhYBtR4OWZZs=
Subject key identifier: 76:A6:27:76:A1:4A:B7:D2:02:15:C9:8C:48:53:4C:BF:B8:FE:27:86
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D7DB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C15EB2DA7C2E11F1B9189B00CF1D38B0.roa
Signing time: Fri 10 Jul 2026 07:12:48 +0000
ROA not before: Fri 10 Jul 2026 07:12:44 +0000
ROA not after: Mon 10 Aug 2026 07:12:44 +0000
asID: 20473
IP address blocks: 154.196.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120795 (0x1d7db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 10 07:12:44 2026 GMT
Not After : Aug 10 07:12:44 2026 GMT
Subject: CN=6a509b70-f125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:49:45:5e:1d:82:a8:72:b7:17:3f:bb:3f:4b:
09:d7:b0:65:f2:46:ff:00:bf:a2:dd:25:91:ea:97:
36:3b:d0:62:52:9b:db:4b:29:1f:57:7c:9f:d7:11:
60:2b:ce:03:a2:98:0b:b1:81:3a:dc:81:2a:f8:06:
8b:57:fa:7f:ea:84:5f:a7:7f:97:35:27:84:b9:52:
72:37:52:bd:3d:c2:14:14:7d:a0:cf:17:82:02:ee:
be:e4:ce:a3:2f:6b:64:9d:41:1c:15:fe:4c:c3:1e:
e6:f3:44:21:40:06:66:c1:e6:9a:22:9b:a3:bb:63:
c9:5f:ee:02:91:36:d3:3d:6b:87:14:16:35:40:6d:
a4:b0:36:f3:b0:da:ab:5c:f9:be:7f:09:e0:e9:56:
ea:8e:e7:a2:3e:69:e2:c3:99:76:a6:f9:48:c6:2a:
a2:d6:f7:05:ed:6f:d3:09:33:ad:d6:41:8a:2d:41:
9f:2c:a9:cf:6d:93:e1:a1:e1:ec:7b:73:dc:39:5b:
0d:73:ef:95:9c:23:09:10:f0:cb:4f:5e:4b:ae:d6:
8b:8d:9c:10:92:6b:ec:7e:4e:b2:25:3c:56:57:76:
0b:36:a2:7d:11:6f:3d:a7:84:96:af:66:b1:aa:1f:
44:a4:cd:df:bf:12:97:83:c7:2a:b3:8c:b0:36:4e:
72:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A6:27:76:A1:4A:B7:D2:02:15:C9:8C:48:53:4C:BF:B8:FE:27:86
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C15EB2DA7C2E11F1B9189B00CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.131.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:90:a2:7e:ce:de:57:bb:7f:ad:ea:72:53:f4:2c:0d:64:68:
56:e6:9a:e0:a0:0f:47:c1:4c:6e:84:28:45:98:4c:db:c0:61:
aa:bb:09:2b:43:85:72:26:5d:8c:c6:75:ea:bb:4e:52:26:cc:
91:76:cb:d7:71:d6:12:47:61:3f:ea:4c:cd:a8:e0:bd:07:ff:
52:6b:39:fd:e1:33:cd:33:78:1a:30:2e:58:ae:10:35:ee:77:
d8:e0:ca:df:10:64:4f:1f:f0:2c:97:98:71:55:ab:4f:e9:c4:
0e:8e:ce:67:41:57:70:ba:7b:c1:9a:f6:ee:e4:93:c9:6e:4b:
14:81:62:dd:59:04:a3:95:d7:79:43:27:a6:dd:6a:3e:7a:a0:
04:52:85:2f:03:04:90:3a:59:76:ee:74:8e:cd:91:70:b0:c9:
eb:f7:98:46:38:bb:ab:f8:bf:90:c4:58:8c:d2:ee:39:28:40:
e6:da:88:b1:26:21:12:81:07:fd:5d:7b:d4:5b:7c:9f:20:55:
53:a9:98:b5:10:be:85:d4:db:0c:f4:b5:19:21:9f:5e:5a:3c:
0e:5b:8c:ed:b9:21:eb:d5:f7:47:3a:01:cd:6a:a0:f5:3f:34:
f8:1b:44:11:a1:42:c1:2c:22:64:6a:ff:0e:82:df:a7:4f:d0:
a2:59:6e:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:09:37 2026 by rpki-client