Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C843BD06755911F1BDC6A9B6CE1D38B0.roa
File: C843BD06755911F1BDC6A9B6CE1D38B0.roa (raw, json)
Hash identifier: /cQ3ZUZlahdWZjeV5UlrIPvSvkwC4Lo/lWaR2S1OhAo=
Subject key identifier: 5D:8E:EB:A0:4F:1F:17:99:7B:46:9D:C9:04:20:EC:D2:F9:F6:6E:E8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D63C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C843BD06755911F1BDC6A9B6CE1D38B0.roa
Signing time: Wed 01 Jul 2026 14:33:10 +0000
ROA not before: Wed 01 Jul 2026 14:33:05 +0000
ROA not after: Fri 07 Aug 2026 14:33:05 +0000
asID: 59711
IP address blocks: 154.84.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120380 (0x1d63c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 1 14:33:05 2026 GMT
Not After : Aug 7 14:33:05 2026 GMT
Subject: CN=6a452526-d11b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a3:73:48:99:64:95:b7:df:0a:95:83:3d:a5:
47:d8:de:fa:cf:ff:98:57:68:82:9c:ab:58:46:2f:
fc:2b:02:f4:5c:dc:71:07:9e:ff:bb:81:1f:aa:a0:
ef:ba:dd:0b:84:51:5b:dc:4b:e0:7f:19:50:3a:a4:
a1:f3:8a:41:df:5a:c5:5d:ba:f2:ca:4d:27:ae:87:
24:a0:b2:14:3d:87:f0:37:f2:d6:e8:c5:9a:e0:0d:
27:19:f0:19:a8:6d:1b:94:b5:dd:ff:66:b4:d3:3a:
bf:9e:d0:26:5d:f9:ec:db:e4:22:5f:e2:68:28:0f:
00:5d:da:9d:76:64:b6:94:f2:3e:7e:f4:b2:47:81:
21:7d:43:b7:4b:98:03:58:46:46:bc:ac:70:09:18:
77:6e:cf:8e:56:05:e1:ba:15:28:f2:b9:09:22:45:
d3:65:71:2f:08:29:ec:c5:f3:bf:47:ee:b3:05:b8:
48:f7:4c:67:f0:82:15:0b:52:38:fe:af:70:21:df:
7d:d3:cf:77:cf:b7:ff:fc:54:76:57:77:a9:72:c2:
c6:83:40:64:b7:29:69:1b:33:ca:14:6b:ab:26:b9:
e4:5e:59:83:c3:07:ef:41:46:2a:fb:51:1e:74:5c:
a6:14:f4:a3:5e:cd:d3:03:e5:99:69:b3:25:76:2a:
8d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:8E:EB:A0:4F:1F:17:99:7B:46:9D:C9:04:20:EC:D2:F9:F6:6E:E8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C843BD06755911F1BDC6A9B6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.170.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:c3:7a:7f:28:42:d5:5b:d1:8a:47:82:46:0e:b7:3e:4e:48:
22:a1:9f:92:c1:2a:b4:fd:42:d5:56:be:dc:d5:1c:5a:db:76:
a6:18:17:7c:45:fb:15:e1:b9:0f:7b:21:dc:e1:57:00:ca:7c:
ab:96:7a:3c:98:3f:2d:42:4c:0d:b1:01:15:e1:01:44:2a:de:
ba:de:11:6a:37:8d:5f:81:33:cd:28:3a:be:22:d3:ef:29:46:
9e:40:6c:58:ff:f5:2c:e6:d3:ad:8d:30:b9:52:1a:44:88:7d:
70:07:d4:58:91:3f:09:29:16:d5:dc:35:88:7d:e2:33:2e:10:
f5:91:f8:f8:1b:f7:6b:16:25:50:1a:df:b0:44:29:fb:61:02:
fe:b3:b6:ce:80:44:e0:31:64:3c:44:7c:bc:13:e8:37:77:a6:
93:d1:f6:e0:ea:8a:b7:27:1c:86:b0:01:63:43:c1:d0:f7:96:
7d:3b:08:4d:1f:63:7f:53:e3:83:2b:40:35:22:c8:bb:2a:0e:
17:99:13:3a:36:07:6b:02:d1:7b:8e:03:9e:d6:f8:3b:73:4f:
55:5b:3f:84:4b:b7:b1:a5:14:0b:2c:7d:39:1b:94:b8:ab:53:
10:05:05:6a:fe:b6:27:b9:05:ca:67:a0:4c:53:93:45:cb:be:
e6:56:c9:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:57:05 2026 by rpki-client