Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEC8A13080FA11F1A81BC2F3CE1D38B0.roa
File: CEC8A13080FA11F1A81BC2F3CE1D38B0.roa (raw, json)
Hash identifier: 1zneG5ru5G7RCkoCjSsXXdne9rZfcCrZWJ5g4z8LO/o=
Subject key identifier: 2E:2E:D2:41:3D:41:AD:22:07:86:21:B1:E5:C5:2B:19:4C:1B:C5:0F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D91C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEC8A13080FA11F1A81BC2F3CE1D38B0.roa
Signing time: Thu 16 Jul 2026 09:43:33 +0000
ROA not before: Thu 16 Jul 2026 09:43:29 +0000
ROA not after: Sat 22 Aug 2026 09:43:29 +0000
asID: 142032
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121116 (0x1d91c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 16 09:43:29 2026 GMT
Not After : Aug 22 09:43:29 2026 GMT
Subject: CN=6a58a7c5-c64a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1a:9f:5d:b7:4e:2b:27:43:a5:7d:fa:88:63:
7a:d4:68:e0:f6:5e:a1:2f:f2:fa:19:46:d5:26:06:
77:27:aa:fd:9b:1c:f0:a1:c2:33:03:21:39:6c:66:
59:74:4a:6e:76:ff:e8:1b:a3:0f:0d:db:5e:36:d6:
40:88:5e:d6:01:6d:e4:47:e1:43:90:2d:1e:d0:ad:
cb:ab:71:0e:ed:72:f8:7f:3f:f2:93:f7:a2:82:75:
b9:16:7c:f4:7c:27:c3:4c:e1:a8:e5:13:10:14:aa:
8c:5e:dc:eb:88:3a:c4:0f:90:06:ba:85:35:07:65:
c2:0f:2b:3b:13:b6:69:63:a2:0f:2b:a7:c5:8d:6b:
96:52:f0:5d:1e:43:c3:d9:36:e7:d0:2c:57:54:79:
b9:7d:da:bb:30:85:c9:20:a1:b2:33:c6:09:12:0e:
73:e1:d1:33:9b:c8:05:f0:5f:de:6a:10:62:db:ef:
19:53:43:36:41:f6:88:58:d3:2a:a7:7b:1d:65:81:
d5:4d:03:51:fc:ba:e5:34:d2:72:e2:ea:0b:1d:30:
1f:2b:6f:50:b4:82:1e:94:fa:07:5d:64:7d:ea:b5:
3f:32:b6:23:ad:f4:9b:67:dd:43:bd:b4:58:93:53:
d7:78:53:0e:65:49:e6:fc:c7:50:a7:63:15:9d:99:
b1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:2E:D2:41:3D:41:AD:22:07:86:21:B1:E5:C5:2B:19:4C:1B:C5:0F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CEC8A13080FA11F1A81BC2F3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
28:53:b0:87:82:39:13:12:97:8e:e5:71:59:a5:5b:b7:ec:1b:
bc:69:d1:d3:08:19:e6:b8:6b:c9:dd:da:78:bc:ce:5b:c7:dc:
f6:46:47:92:97:c2:8a:73:b9:eb:55:0e:a4:1c:e7:4a:0a:4a:
97:5b:dd:a8:78:bc:0a:d5:29:73:ec:a7:5b:85:65:5f:75:7e:
85:3c:17:70:37:31:27:cc:16:c7:10:67:ff:62:b5:e4:f3:7b:
8a:d9:9c:39:b5:24:14:4e:dc:59:81:94:f4:18:35:a2:6e:ab:
ef:ad:fd:e9:62:f8:aa:de:e9:f3:10:a5:c4:75:52:7d:dd:e1:
2b:33:21:4e:4d:3c:c9:c0:34:f6:22:b0:17:0d:be:7c:3c:91:
a2:1f:15:fb:4f:6d:da:f1:90:fb:16:86:14:0f:20:ff:0f:95:
99:a8:64:1c:a0:03:ff:23:22:5b:99:31:4a:a2:f1:99:55:5d:
0f:b1:5f:79:a4:8a:75:77:93:a8:d3:2d:fe:97:de:c7:bb:80:
ea:22:58:22:88:31:64:f0:f9:28:f9:7c:54:da:bd:84:4a:bc:
f3:06:fc:d2:e1:95:a6:b2:89:db:f4:7c:e5:e2:62:4a:2d:08:
ee:4f:77:a5:db:c7:cf:c2:2a:5b:e5:45:ba:ed:f7:44:08:b8:
04:d1:c9:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:50:21 2026 by rpki-client