Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1F2AE56873411F1B89EF6E9CE1D38B0.roa
File: D1F2AE56873411F1B89EF6E9CE1D38B0.roa (raw, json)
Hash identifier: rGyb4KSc01Tm+SrqTnri02VJHLP5sAJD0d6YwbOSte4=
Subject key identifier: BB:EC:2E:BF:FC:9A:55:53:FE:9D:95:DE:07:9B:0D:7D:AA:0A:54:2A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DB28
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1F2AE56873411F1B89EF6E9CE1D38B0.roa
Signing time: Fri 24 Jul 2026 07:53:56 +0000
ROA not before: Fri 24 Jul 2026 07:53:52 +0000
ROA not after: Tue 01 Sep 2026 07:53:52 +0000
asID: 11427
IP address blocks: 154.194.232.0/22 maxlen: 24
154.194.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121640 (0x1db28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 24 07:53:52 2026 GMT
Not After : Sep 1 07:53:52 2026 GMT
Subject: CN=6a631a14-d5db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ca:a1:64:99:7f:71:a2:cc:76:ff:21:a7:d1:
aa:67:a0:10:72:c0:25:0a:44:6d:21:e2:64:fe:f3:
1b:58:76:f2:79:21:c8:c3:43:f0:6f:23:fd:a6:09:
7c:4a:b4:ec:f7:ec:81:ab:40:94:61:3e:81:a5:c8:
9d:e3:c3:3a:0b:6f:74:be:91:f1:a3:73:c0:1b:89:
8d:2a:2a:79:cd:94:4b:87:1d:8a:a1:f7:de:9d:44:
c6:9e:cd:82:1a:9f:ff:0a:4a:2b:1e:92:98:38:ce:
a1:5e:d8:3e:6b:da:e3:e8:2b:e2:78:2f:43:6d:09:
1c:c6:34:85:95:d6:ed:74:66:a6:02:3d:ee:5e:3e:
17:8d:b4:73:11:2f:25:e9:ad:47:86:fe:c9:83:49:
fc:14:b5:a4:ef:b1:ae:19:aa:04:6a:1c:2e:e3:ce:
f8:d4:2d:5f:35:10:45:6a:53:90:e2:58:25:85:55:
89:88:ad:52:39:4e:e4:09:83:76:d8:7d:ac:78:6f:
1c:9f:dd:22:dc:1b:c0:91:04:81:bc:fe:4f:02:d9:
96:11:11:06:56:01:62:13:59:ed:fb:9b:0b:fb:40:
ea:e8:89:a5:29:de:b9:c4:24:3b:27:43:cc:e1:24:
9a:3f:de:fd:88:d4:34:3e:cb:58:4e:f8:63:3a:58:
3f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:EC:2E:BF:FC:9A:55:53:FE:9D:95:DE:07:9B:0D:7D:AA:0A:54:2A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1F2AE56873411F1B89EF6E9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.232.0/22
154.194.244.0/22
Signature Algorithm: sha256WithRSAEncryption
61:e1:f5:cb:d7:45:dd:51:2f:b0:d6:04:c5:c0:b1:10:bf:49:
6a:e1:f6:93:d4:fa:84:32:7e:34:95:41:5d:aa:f9:e6:59:a4:
c2:a0:35:2d:bf:49:dd:6b:08:d6:e3:36:95:bc:a7:b9:72:fa:
50:c7:2d:b0:85:2c:9a:33:fc:f1:e0:14:85:87:ae:5c:49:0d:
02:02:ae:f6:89:92:31:c7:53:3c:53:3a:e7:85:c4:f2:8d:24:
88:31:bc:aa:a2:6b:1a:f2:82:8a:8f:4e:d3:26:5d:e2:16:67:
7b:1c:ea:7f:51:80:60:46:d9:24:5e:78:3e:c3:09:46:ec:f8:
3a:b9:67:54:e2:28:eb:86:9b:9e:23:4c:8a:03:bc:c0:30:9e:
6d:42:11:6e:ff:ba:52:01:ef:91:78:0b:a7:fd:22:d0:a2:34:
4e:b5:a0:75:6a:2a:f1:5e:2d:03:bc:80:5b:17:e9:5e:5e:b0:
15:98:19:17:61:bf:2f:01:d9:fa:2a:03:ec:3e:53:73:47:d4:
0c:30:52:d2:8b:62:7b:fb:dd:aa:8c:99:71:5d:25:29:50:b0:
93:41:fc:7d:ab:ed:f7:7c:f3:7b:24:52:dd:03:98:88:09:37:
65:64:88:dd:ff:7f:d5:74:93:eb:82:1b:6a:ea:6e:c6:cb:c4:
65:89:7f:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:26:18 2026 by rpki-client