Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAA89C08755B11F19228D5C2CE1D38B0.roa
File: DAA89C08755B11F19228D5C2CE1D38B0.roa (raw, json)
Hash identifier: /H8J4dWwDmwMrcpEjeNLSa/OKYP+myLZ5XIFjRtOE60=
Subject key identifier: 52:63:29:48:F4:82:E8:C5:3F:F1:B1:D7:F3:40:64:F1:8C:A4:4C:5C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D640
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAA89C08755B11F19228D5C2CE1D38B0.roa
Signing time: Wed 01 Jul 2026 14:48:00 +0000
ROA not before: Wed 01 Jul 2026 14:47:55 +0000
ROA not after: Thu 08 Jul 2027 14:47:55 +0000
asID: 146993
IP address blocks: 154.203.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120384 (0x1d640)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 1 14:47:55 2026 GMT
Not After : Jul 8 14:47:55 2027 GMT
Subject: CN=6a4528a0-5c82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:81:74:69:63:74:9b:d2:18:dc:57:a8:ac:92:
88:05:19:5c:a0:64:7f:b4:4f:cc:4f:e8:d7:0d:53:
6b:4a:27:a4:99:7b:ec:98:6a:06:e3:7c:79:39:2b:
59:f4:57:57:e3:17:d3:c7:af:5f:c4:e0:25:16:67:
43:38:ac:6d:cf:60:b3:01:bc:14:ca:c7:f5:dd:74:
92:ac:bc:e0:11:ac:ac:42:06:ff:0c:69:37:36:c3:
18:3d:fb:8b:d8:6f:1a:55:4a:fa:f5:44:52:e9:5c:
ae:ec:97:bb:0b:cd:a1:7e:2f:08:18:67:21:04:7a:
d0:f3:9e:b4:e0:e2:be:0b:4a:c7:91:01:00:b6:4d:
20:22:ba:e2:4f:b9:ed:c2:c8:e6:a6:c8:b6:0d:e3:
fa:2c:0d:97:f6:6c:46:25:0d:58:e2:21:87:f1:e6:
fb:39:d9:77:8c:b6:cd:11:d6:67:83:fb:53:82:10:
47:a7:33:11:04:5e:97:28:ca:50:b9:c5:f8:58:1f:
99:98:55:2d:a1:0a:0f:3e:f7:a9:ac:bb:4f:06:d1:
ac:2d:55:8c:03:57:58:92:65:9a:e4:f2:88:5e:cc:
95:aa:8b:ca:9e:3c:d0:01:65:77:40:64:68:10:2e:
00:9e:7f:18:21:c1:1c:0d:cb:c4:92:65:43:39:2c:
e2:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:63:29:48:F4:82:E8:C5:3F:F1:B1:D7:F3:40:64:F1:8C:A4:4C:5C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAA89C08755B11F19228D5C2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.16.0/20
Signature Algorithm: sha256WithRSAEncryption
6e:ea:6b:da:aa:01:90:0a:ae:53:4c:9c:6a:88:2f:50:15:c0:
76:fc:39:2d:f9:b5:31:ef:33:ac:30:d5:eb:40:78:41:b4:ca:
98:92:f1:45:5a:0a:15:24:24:50:49:01:97:89:06:a1:4d:25:
82:f1:7d:76:a2:15:8f:8f:ef:f2:c0:f0:f6:14:a8:c1:35:cd:
bf:72:2f:63:b3:87:ed:1b:b6:26:a3:c9:7d:bc:17:f8:96:57:
93:f0:52:6f:a8:27:b3:79:57:b0:f5:2a:9e:75:6e:05:74:64:
ef:fe:44:af:24:f0:38:67:23:05:d1:83:5e:88:03:b5:9c:b0:
b2:0c:17:a6:fb:35:bf:40:4f:d3:a0:c8:68:22:42:85:07:20:
5b:9f:70:23:1a:0f:23:5b:61:42:0c:2a:8c:a2:80:43:2a:fb:
ff:06:5f:e6:10:26:cd:6c:84:88:f4:66:86:9f:03:74:d3:a7:
d1:a2:99:25:8a:d3:32:2b:17:e8:b1:76:ce:ae:f7:a5:bd:ad:
e4:20:ce:ea:a2:50:b4:e2:6c:77:fc:cc:6c:ed:43:16:d4:61:
dc:11:dd:3f:a4:d8:ca:8e:92:ca:34:19:68:00:af:20:53:bd:
77:df:ff:86:0b:7d:81:a4:5e:3f:e3:8b:d6:f8:00:a4:21:09:
2f:fa:fa:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:08:16 2026 by rpki-client