Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C89C2D4C81B111F1A98DEBD2CE1D38B0.roa
File: C89C2D4C81B111F1A98DEBD2CE1D38B0.roa (raw, json)
Hash identifier: YLXmuNUWzv/jHgWkOaSKShwSd/GAs/shNxQyU6+7w68=
Subject key identifier: 6C:6E:2A:F2:F3:EF:E2:09:A2:93:03:8D:7B:2F:5C:33:62:84:E9:87
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D941
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C89C2D4C81B111F1A98DEBD2CE1D38B0.roa
Signing time: Fri 17 Jul 2026 07:33:20 +0000
ROA not before: Fri 17 Jul 2026 07:33:16 +0000
ROA not after: Mon 24 Aug 2026 07:33:16 +0000
asID: 61414
IP address blocks: 154.217.248.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121153 (0x1d941)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 17 07:33:16 2026 GMT
Not After : Aug 24 07:33:16 2026 GMT
Subject: CN=6a59dac0-9e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4c:a5:73:65:60:86:14:a4:e9:3a:73:c6:c5:
dc:c8:07:7f:e9:02:22:c5:f4:38:2d:ea:b2:89:d5:
96:d1:47:ff:5c:df:a1:ec:00:8e:54:69:06:37:c0:
a9:58:fb:fb:c1:7c:3e:dd:55:bd:52:f2:ce:8a:62:
97:eb:5c:cd:1c:b0:3b:6b:25:16:ea:b5:a1:d5:37:
dc:ea:5f:5f:a9:b4:08:2d:93:db:64:86:2a:69:da:
8e:fa:7c:db:4a:60:5c:94:71:03:cf:09:ed:44:d8:
a8:60:51:80:98:9f:3b:0f:a4:c7:d9:5b:2d:0c:d2:
0e:7b:c7:ed:63:e3:09:d1:d6:93:e6:d0:8e:1d:7d:
4a:c5:f6:96:eb:93:97:8b:03:57:8d:4c:77:38:50:
e7:3f:9f:ee:8b:a7:54:c1:32:44:f5:f5:99:4c:5d:
a4:c4:af:af:02:58:0c:39:3d:59:9f:9e:a7:2d:3d:
ed:fe:6f:61:1a:53:ae:01:03:7f:4a:50:80:fb:3f:
44:93:ce:52:87:1d:08:bb:70:14:86:d0:48:ae:5a:
52:06:8e:0e:ba:62:57:63:68:bf:2e:38:d9:d6:ff:
8f:4a:6a:f7:6f:d5:13:5a:9b:0b:82:89:0c:1f:ec:
0b:90:ea:a0:36:d7:2d:cb:93:a3:f3:49:4f:d5:a9:
15:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:6E:2A:F2:F3:EF:E2:09:A2:93:03:8D:7B:2F:5C:33:62:84:E9:87
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C89C2D4C81B111F1A98DEBD2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.248.0/21
Signature Algorithm: sha256WithRSAEncryption
5b:f1:ec:d5:ae:4d:e5:0b:36:86:d9:c1:4d:a3:38:78:b5:c3:
5b:40:7e:51:16:5a:6b:43:bd:f1:57:ae:42:ed:f0:07:9b:94:
23:d3:22:3c:1b:9a:69:25:52:05:c8:34:ef:3f:b5:e3:08:56:
84:5a:07:0a:6f:cb:1c:fc:1a:f1:7c:5a:8f:73:a6:8d:ae:71:
57:bc:c4:0e:2d:3a:c9:aa:1e:d1:d6:cf:82:34:bf:4b:58:85:
85:3e:c5:ac:c3:1d:80:5a:27:4a:c6:22:77:7a:71:6c:73:c7:
e0:97:00:86:d3:e2:e9:45:0f:f5:e3:e1:13:bd:b2:85:e3:0c:
05:cb:0e:83:56:03:df:9a:49:99:01:0b:5f:79:0c:a7:6c:98:
46:92:7f:de:5a:3c:95:83:18:e7:e6:6a:fe:d3:ca:0d:99:ce:
88:c5:96:f4:68:79:7a:2d:e4:23:1a:99:76:3e:d3:fe:15:40:
d9:52:c1:ed:08:24:ba:30:f8:b8:8a:33:e3:b0:a5:fa:4d:6a:
8f:ce:a8:31:89:f9:bf:d3:45:29:fb:8c:71:cb:27:97:eb:24:
3b:b4:5f:c7:94:2b:c1:34:77:51:0f:50:d6:d5:7c:fd:97:1b:
e5:e5:5c:fb:7d:00:3f:67:b7:30:27:30:ab:5f:d3:d4:1a:cc:
6f:19:71:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:28:08 2026 by rpki-client