Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D88CE27E842B11F19B7B00E0CE1D38B0.roa
File: D88CE27E842B11F19B7B00E0CE1D38B0.roa (raw, json)
Hash identifier: HicCaihTz2qXNY62Vem8IKgZ74NAZ5tVlIhzfdJLQ+M=
Subject key identifier: FF:F0:1B:6E:89:0B:C2:38:98:01:FE:C9:41:A0:13:4C:91:68:4E:60
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D9FC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D88CE27E842B11F19B7B00E0CE1D38B0.roa
Signing time: Mon 20 Jul 2026 11:12:08 +0000
ROA not before: Mon 20 Jul 2026 11:12:04 +0000
ROA not after: Thu 27 Aug 2026 11:12:04 +0000
asID: 55286
IP address blocks: 154.84.169.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121340 (0x1d9fc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 20 11:12:04 2026 GMT
Not After : Aug 27 11:12:04 2026 GMT
Subject: CN=6a5e0288-b9b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1d:f6:1a:fa:fe:8e:d4:71:3d:50:a8:bd:a4:
2f:aa:f6:b2:83:e5:84:9e:bb:23:23:71:72:4a:42:
db:d4:51:e1:73:df:1f:bf:99:11:f5:77:71:53:0d:
07:6a:e0:92:48:d8:02:92:85:a2:9d:f1:5a:f1:94:
31:fc:82:c4:4c:89:82:1a:c2:2d:48:9e:5a:c0:97:
4b:38:ce:10:73:9f:f3:e0:f6:a7:69:5e:24:29:15:
9a:63:9a:6b:82:7f:1b:8b:e4:90:26:10:98:16:72:
00:34:82:4a:b6:bc:9c:69:87:8d:16:0e:e1:63:12:
1a:65:31:ed:f7:87:4a:17:ff:5c:54:3f:0c:a3:25:
fd:1d:be:1b:b4:c3:9d:5d:9d:0d:86:f1:3e:48:56:
cc:75:89:f2:44:62:b1:bd:f0:55:93:a6:5e:ca:50:
e4:bc:2b:fd:0f:05:39:5d:bd:79:93:dc:8e:08:54:
4b:6c:d8:a6:bb:26:4f:45:3f:da:d0:c8:3c:d3:30:
0b:a4:20:25:27:0d:44:b0:c4:18:71:2b:a2:c6:6e:
1c:58:87:d0:4e:16:1e:e6:b6:13:b2:7c:cd:c5:99:
60:9f:59:06:4c:bb:5d:c7:a0:f0:ee:2c:5c:80:d8:
5f:a5:5b:f2:cb:07:6e:58:0c:f0:82:88:30:3c:3e:
e2:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F0:1B:6E:89:0B:C2:38:98:01:FE:C9:41:A0:13:4C:91:68:4E:60
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D88CE27E842B11F19B7B00E0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.169.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:8d:d3:e0:4a:fc:f4:aa:17:be:01:97:16:35:e9:b7:87:2b:
b5:c1:b2:f7:d6:ba:be:ca:43:95:6c:c1:aa:68:da:4b:71:2e:
bb:39:d6:3a:5e:f0:6d:ea:36:55:29:42:d4:f3:68:62:29:e6:
48:73:5c:48:c0:57:8e:80:4a:ef:da:a3:1e:8a:b1:7b:05:8e:
b3:e7:90:cc:6b:68:db:ac:53:6e:de:31:7d:74:b6:b8:0a:5f:
d8:94:66:51:0b:bc:ca:0e:05:a4:c9:da:45:61:24:2b:1e:f1:
c5:2d:1b:3e:94:25:ea:de:b3:de:f5:d2:79:8c:27:ec:7b:57:
e5:90:89:22:f4:02:3e:52:fe:7f:11:e8:c6:46:49:33:7d:bd:
d2:6d:46:d7:58:24:c0:8a:a8:4e:5f:f1:cd:1a:68:4b:42:08:
90:f1:19:53:bf:ad:ba:ce:1f:08:dd:bd:a7:10:49:77:d8:ba:
9f:7d:7f:f0:a3:a0:76:c6:fb:50:72:9c:66:e9:3e:4b:4c:00:
c4:dd:c9:e2:94:6f:e1:3b:44:c5:35:b0:66:4d:cf:70:5d:75:
f7:3f:12:b7:89:d8:2b:6e:01:37:8a:64:98:0c:8f:b6:2b:1a:
bd:68:db:96:ca:00:48:f5:2d:8f:69:6b:ef:cc:df:0e:21:25:
55:b3:ef:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:38:28 2026 by rpki-client