Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C73B0402873611F1990D7DF4CE1D38B0.roa
File: C73B0402873611F1990D7DF4CE1D38B0.roa (raw, json)
Hash identifier: fK2y8zdALWI/hs9ET/0T3m7tTJi3kGUDZVnV+ZxiJPo=
Subject key identifier: 95:BB:D0:E3:E3:E2:0D:A4:D2:4A:6C:AB:6F:DE:28:73:EB:16:3B:D9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DB30
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C73B0402873611F1990D7DF4CE1D38B0.roa
Signing time: Fri 24 Jul 2026 08:07:57 +0000
ROA not before: Fri 24 Jul 2026 08:07:53 +0000
ROA not after: Mon 31 Aug 2026 08:07:53 +0000
asID: 139880
IP address blocks: 154.82.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121648 (0x1db30)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 24 08:07:53 2026 GMT
Not After : Aug 31 08:07:53 2026 GMT
Subject: CN=6a631d5d-29ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:50:ab:1c:63:c1:71:a9:d7:bb:95:47:76:71:
be:9d:75:16:88:dd:f8:85:6b:5a:9c:3e:8f:86:b6:
42:20:9e:6c:2e:68:bc:b7:54:b9:03:7a:08:e6:b8:
8e:e8:25:43:eb:f7:2d:f8:13:46:fa:08:ca:5e:a9:
97:a8:de:b0:4f:b6:13:f5:48:f1:0c:a8:d0:08:b7:
7d:e9:b0:1e:76:1a:eb:e4:c6:3b:12:0e:15:69:2d:
d5:94:65:b0:e0:99:55:d8:cd:fe:97:17:1e:39:30:
f8:49:a4:09:d5:df:26:65:1b:fe:2e:a9:ec:83:cf:
00:ed:6e:54:7f:d4:80:b3:7c:dd:52:c4:73:e4:2b:
41:8f:1e:ee:26:eb:c4:a2:ef:2a:cd:9a:94:a4:b8:
95:35:31:1c:c7:71:0e:61:67:65:9e:ae:e0:c7:d5:
97:1a:89:23:c5:1e:05:94:6c:c0:98:57:12:fd:5d:
66:49:39:c8:9f:f4:37:0f:40:03:e4:09:ed:89:19:
42:9d:18:90:30:e5:8a:6c:47:34:2b:43:10:9d:4a:
3c:67:47:35:39:3a:73:e2:b7:55:be:aa:49:f4:e4:
7e:65:7f:36:e1:fb:62:ad:d8:fd:09:c8:41:bd:46:
35:53:b3:6d:5d:75:e9:91:20:d6:05:7a:bb:3c:10:
f0:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:BB:D0:E3:E3:E2:0D:A4:D2:4A:6C:AB:6F:DE:28:73:EB:16:3B:D9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C73B0402873611F1990D7DF4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.32.0/19
Signature Algorithm: sha256WithRSAEncryption
c4:51:c2:a4:4e:79:14:2a:34:8b:9d:52:b1:9f:88:4a:c6:8e:
dc:60:a2:a8:20:e2:79:34:79:f4:59:cc:5b:37:32:b4:50:56:
f7:9d:6a:c9:ce:95:58:e4:c8:a1:cb:8f:5c:de:d4:85:02:fe:
8a:b8:64:af:9f:ae:2a:15:c6:e9:6e:69:b6:ad:37:16:9d:7f:
7d:f1:e6:f8:fa:a6:e4:9a:aa:65:b7:34:f1:fc:d7:75:92:e8:
8f:1e:8f:4e:8e:4f:69:e1:e0:a3:34:6c:d4:52:71:4a:83:8f:
55:67:ca:c1:cb:3d:1d:83:d3:33:ad:67:7c:8d:b8:63:3c:2f:
5f:d1:77:84:7f:db:38:a5:7d:3f:26:f4:26:fd:23:fe:e6:3f:
bb:a1:15:f1:0c:aa:08:c0:56:ca:df:04:dc:3e:c3:7e:8e:50:
61:fc:3a:b2:62:db:ad:bf:43:35:25:2b:0c:65:be:74:63:70:
2a:24:1c:ed:9c:6f:80:0e:f4:41:38:d5:67:ed:9e:06:fa:3a:
95:a8:f3:fe:62:dc:01:54:bf:5a:dc:0f:86:c1:2f:ae:b3:dc:
7d:62:cb:64:43:0c:ed:5a:ad:90:41:c8:10:fb:27:3f:03:ff:
9c:42:28:f5:9c:4f:aa:b0:47:53:bc:72:bf:7f:3a:66:6a:87:
1a:fd:84:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:43:44 2026 by rpki-client