Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7098C9C84E211F19E9543C1CE1D38B0.roa
File: D7098C9C84E211F19E9543C1CE1D38B0.roa (raw, json)
Hash identifier: n/pAXEhlxCKk979kt2OiKggXTPGbqwmXdm6i65lSGTA=
Subject key identifier: 52:9E:C3:4B:5C:2F:85:02:D3:30:7A:7C:9B:C4:B2:CE:AB:A4:F2:BC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DA60
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7098C9C84E211F19E9543C1CE1D38B0.roa
Signing time: Tue 21 Jul 2026 09:02:03 +0000
ROA not before: Tue 21 Jul 2026 09:01:59 +0000
ROA not after: Thu 27 Aug 2026 09:01:59 +0000
asID: 55286
IP address blocks: 154.84.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121440 (0x1da60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 09:01:59 2026 GMT
Not After : Aug 27 09:01:59 2026 GMT
Subject: CN=6a5f358b-d8df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:83:bc:6f:c7:70:03:1d:9a:e6:e4:0d:0e:ec:
23:66:a2:76:1b:03:f0:10:63:e1:13:63:db:4b:d8:
eb:81:54:64:76:9e:aa:9a:91:50:40:fb:88:ac:4f:
65:bd:95:9e:76:8d:a1:35:b3:c6:12:f8:6a:26:5f:
09:2e:62:4b:97:b7:6d:20:51:5c:40:08:fb:8a:a4:
bc:28:cb:00:73:da:b3:c1:6e:87:a0:36:40:1d:fd:
6e:f9:74:22:81:3a:1a:f4:c7:d2:92:59:72:08:f2:
b7:16:57:58:ae:43:c7:ad:a2:25:6e:98:76:77:16:
11:29:c1:c5:81:ee:ec:4d:ca:67:e0:31:c2:4f:22:
8d:6d:c6:54:30:93:1c:45:ae:83:a9:91:cd:66:d8:
3b:e1:a3:91:50:95:f3:21:4c:1f:a1:20:21:1d:b1:
69:26:7c:37:69:99:6c:10:5d:ef:a8:5f:c3:46:82:
24:55:60:de:9e:99:88:7b:7d:8e:3d:d9:9f:5f:a8:
fc:73:c6:23:0f:df:66:f7:55:55:bb:f5:29:36:52:
91:35:21:bc:ec:80:6a:9e:51:ac:20:c4:c1:4a:8e:
a9:7a:c5:85:84:07:31:69:ea:59:75:7f:17:b5:e9:
02:2c:37:fe:04:ac:b4:61:9f:43:7b:6d:29:da:c9:
00:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:9E:C3:4B:5C:2F:85:02:D3:30:7A:7C:9B:C4:B2:CE:AB:A4:F2:BC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7098C9C84E211F19E9543C1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.169.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:cc:e4:3f:6c:ff:89:82:90:21:2f:be:f6:e5:c4:ac:68:b5:
a9:f0:c4:30:09:10:61:69:e8:fe:de:b7:13:bf:a3:88:8d:98:
8f:d7:0c:c1:e4:b8:1b:d2:16:e6:9f:b7:4f:1f:e9:59:9b:ea:
2e:6b:e3:88:0d:2b:09:7b:1c:82:78:cc:02:5b:27:9e:5b:44:
e0:e5:fa:ca:d8:80:f3:32:16:9a:30:7c:8e:94:80:bd:dc:e6:
4d:2d:3a:43:38:35:fe:9b:79:c8:83:31:ba:dc:5a:ec:0c:31:
e3:b5:cb:c5:21:7f:02:cb:4b:c8:b1:53:e8:e3:20:b7:28:64:
e3:93:14:bc:ef:a8:14:96:5c:0d:4c:13:85:b7:44:a7:f1:ce:
60:fc:f4:28:db:97:3d:f5:d6:fc:30:f5:5c:ae:6d:4f:c1:96:
1e:55:21:c3:3c:9a:84:f8:18:be:9c:86:d8:7d:b5:ed:d9:03:
6c:bd:26:6f:68:42:c0:26:0e:7d:76:37:bc:be:01:2a:e3:0d:
ed:e3:ef:b8:81:d8:ab:f4:4e:ae:05:38:33:18:de:83:67:26:
00:40:f9:de:fe:f1:e5:c5:f0:48:b0:bd:6d:91:9e:51:c7:65:
16:2b:e2:e8:f6:d5:f5:a9:69:b3:25:1e:f6:a0:87:65:0a:66:
75:39:1a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:39:11 2026 by rpki-client