Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D61C88F481C511F1AF31EECBCE1D38B0.roa
File: D61C88F481C511F1AF31EECBCE1D38B0.roa (raw, json)
Hash identifier: SCkyABRZgRgv2KdBZywpn2WUtykzQvdJI8Ciwv1TcFw=
Subject key identifier: BD:CE:E9:A7:32:EC:1A:3C:97:4B:A5:5A:73:AF:4D:96:DA:04:06:D0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D979
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D61C88F481C511F1AF31EECBCE1D38B0.roa
Signing time: Fri 17 Jul 2026 09:56:53 +0000
ROA not before: Fri 17 Jul 2026 09:56:49 +0000
ROA not after: Mon 24 Aug 2026 09:56:49 +0000
asID: 18013
IP address blocks: 154.89.144.0/20 maxlen: 24
154.89.160.0/19 maxlen: 24
154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121209 (0x1d979)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 17 09:56:49 2026 GMT
Not After : Aug 24 09:56:49 2026 GMT
Subject: CN=6a59fc65-4bb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a3:bc:73:91:c0:56:27:d0:c6:1a:49:ac:47:
f3:70:7e:0b:6a:9d:76:c1:5f:b8:ff:0d:e1:49:94:
c3:2d:7a:55:c1:79:63:92:96:5d:c2:3f:a5:b4:08:
0f:8a:a7:09:d2:74:d9:25:ad:7b:e2:df:2f:b5:00:
f7:54:c3:b5:b2:db:35:22:87:b4:76:c8:0b:f6:df:
fd:dc:83:31:88:6f:00:e8:4d:9e:25:0a:f6:21:00:
ce:27:1b:c2:4a:07:da:c7:57:94:02:26:c3:cc:db:
bb:cf:09:35:4c:df:03:f9:7a:86:06:ad:5e:d2:eb:
5f:f2:e1:e3:15:1a:80:6d:b4:1e:cc:66:37:f6:66:
38:41:ca:f4:62:bd:f3:53:1c:9e:5e:23:56:9b:98:
64:78:63:f3:4d:7d:5d:12:88:d9:c8:7c:0c:65:a1:
be:b3:46:03:d5:8a:40:96:5e:e2:11:24:05:fc:82:
60:1e:eb:40:5b:0a:22:a4:cf:bc:35:fb:0f:f6:ca:
63:06:82:ed:7c:77:6c:eb:98:b8:d2:df:d2:e6:c6:
6b:9e:f4:f8:aa:6d:11:c2:31:69:d7:42:78:35:7f:
a4:6e:3a:87:24:9e:8d:e5:0e:86:16:be:d5:33:e6:
b0:18:e7:b7:c6:f9:e6:97:e9:a3:e6:4d:67:2d:c8:
ca:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:CE:E9:A7:32:EC:1A:3C:97:4B:A5:5A:73:AF:4D:96:DA:04:06:D0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D61C88F481C511F1AF31EECBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.144.0-154.89.191.255
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:ea:bf:51:84:79:c7:be:e6:06:9a:4c:27:d4:cb:e3:bb:ff:
1e:a8:67:62:d3:85:7d:eb:13:01:b1:73:08:7e:b1:03:e5:88:
06:f4:23:27:51:73:9b:32:d0:53:c7:74:50:ad:4d:8e:5b:dd:
20:43:16:c8:4a:88:56:15:9e:83:06:c7:64:43:63:e4:bb:90:
38:d5:fd:a5:b3:3a:45:8e:8b:61:e6:ff:bd:0a:cd:6d:63:f4:
8f:c8:e0:97:fc:0d:e3:8c:92:53:7e:91:f1:6a:d1:db:45:6c:
e7:91:fa:9f:21:ce:63:5e:6a:38:b4:24:7b:71:f9:8a:89:8c:
47:9c:64:36:3d:a6:ef:e3:4b:29:61:59:83:41:5b:04:85:1d:
0b:01:50:d5:e7:e2:ba:d2:14:38:a0:88:d9:13:72:f3:57:ce:
27:21:dd:ff:a5:b7:46:0a:74:48:4a:ee:59:0c:e7:5e:cd:8e:
c7:95:26:ca:1f:6c:38:19:7e:75:52:54:b0:18:80:25:b1:0f:
62:aa:f3:ac:ea:df:38:41:ad:e6:f2:f3:b3:7d:18:4c:8f:28:
26:e5:80:4a:e2:ae:f0:41:d5:4e:1c:d4:d0:cb:64:7d:0c:1a:
f0:65:71:e5:ba:05:87:07:7c:c2:be:f8:bd:c2:96:be:36:f6:
f3:de:b3:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:29:32 2026 by rpki-client