Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D377987479DB11F1982B51A2CE1D38B0.roa
File: D377987479DB11F1982B51A2CE1D38B0.roa (raw, json)
Hash identifier: Cu/Lx68T1EAY26mjq6OkEpfaTZAlB1TWbzUGWrEpdhM=
Subject key identifier: A8:44:E3:44:95:07:88:C7:0A:F3:15:A5:73:A1:7C:EA:71:C0:D3:C3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D765
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D377987479DB11F1982B51A2CE1D38B0.roa
Signing time: Tue 07 Jul 2026 08:14:08 +0000
ROA not before: Tue 07 Jul 2026 08:14:03 +0000
ROA not after: Wed 05 Aug 2026 08:14:03 +0000
asID: 274916
IP address blocks: 154.88.182.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120677 (0x1d765)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 7 08:14:03 2026 GMT
Not After : Aug 5 08:14:03 2026 GMT
Subject: CN=6a4cb550-ebf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5b:8e:3f:6f:8a:4f:22:e4:45:53:70:a3:96:
d6:80:fd:61:74:20:83:2f:92:30:f8:19:8f:0a:7f:
43:90:e2:d0:ed:1c:3d:20:41:20:3f:f2:6d:48:5e:
34:97:aa:e5:93:47:24:f5:90:00:c9:78:ef:ae:b2:
e3:0e:ec:b8:08:08:ff:39:42:71:1c:b7:bd:bf:49:
20:58:fe:04:20:2c:07:d3:91:87:44:e4:58:f4:4e:
50:83:8f:1f:14:e5:48:08:bf:21:03:fe:1f:d9:23:
e2:52:f0:de:85:3b:d7:a0:04:b2:1c:ee:30:c7:b5:
04:cd:87:26:4d:93:13:34:9a:1d:e4:54:7d:61:93:
9a:95:36:10:dd:66:e9:e2:89:d0:90:05:3f:7b:c6:
3c:1b:7a:08:33:90:54:5d:93:fc:11:8b:7c:72:07:
03:0c:4b:83:19:12:62:90:ae:95:9c:8b:47:4f:3c:
15:c3:d3:e5:53:83:ce:eb:31:02:90:65:ce:81:36:
a1:77:77:57:ff:5a:8c:64:59:43:97:19:79:88:76:
11:4f:3b:7b:ae:ba:39:d6:70:ad:2f:a9:25:90:3e:
a2:df:4d:e0:fe:59:03:5d:81:0e:61:8a:c8:4c:1f:
09:eb:4f:92:db:a9:3a:d2:f0:27:76:eb:5e:cc:31:
8d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:44:E3:44:95:07:88:C7:0A:F3:15:A5:73:A1:7C:EA:71:C0:D3:C3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D377987479DB11F1982B51A2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.182.0/23
Signature Algorithm: sha256WithRSAEncryption
06:58:50:c6:89:04:f6:db:93:36:10:15:73:4c:a3:d9:61:a4:
51:a1:ba:f5:84:4a:ed:3e:7e:be:52:34:88:b7:12:a5:37:54:
79:97:2f:43:bc:8b:73:ed:53:43:f5:55:b9:bf:f2:49:2a:20:
b8:b3:12:06:a5:6b:6f:b2:c0:a8:1f:fd:68:9c:f1:01:7b:84:
e1:93:6a:de:98:bc:88:7f:b1:58:f1:dd:82:cd:ad:31:7e:a4:
a6:82:89:95:96:a5:34:c8:7e:be:cc:e0:fb:85:5a:86:3a:17:
b8:2f:31:fa:a4:c0:36:5c:f9:2d:1c:32:fc:40:98:c9:e0:89:
13:d0:85:34:17:ec:ae:0d:1c:7f:d8:4f:34:97:7b:cf:af:7e:
c9:26:8c:49:25:03:97:27:04:54:a1:8a:c8:01:5c:dd:5a:e9:
0e:2c:4d:31:59:ae:ff:da:ee:2e:4b:f2:7b:6f:37:0b:c6:e2:
48:3e:a7:ff:77:8a:16:1e:f3:a0:d0:23:0c:fc:0e:fc:2d:44:
1a:d7:c1:e6:6b:67:b9:da:7b:26:d3:f3:41:14:f8:9f:8b:bb:
7d:24:d2:3d:1c:a0:aa:59:de:f4:6c:6f:ed:94:1e:bb:e0:f2:
5a:6c:de:d7:e7:fd:c4:1d:d7:3d:d1:b2:25:28:71:46:3b:aa:
aa:7e:87:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:43:46 2026 by rpki-client