Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB3A4DA27B6D11F1947E26E8CE1D38B0.roa
File: DB3A4DA27B6D11F1947E26E8CE1D38B0.roa (raw, json)
Hash identifier: B39cTxiE+U9ns0Vsz23IY1CrFTD62JCeYQSzHU5Wai4=
Subject key identifier: 87:31:91:21:8A:78:C8:A4:11:F6:2E:40:D6:AB:FB:95:53:99:3E:08
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D7AF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB3A4DA27B6D11F1947E26E8CE1D38B0.roa
Signing time: Thu 09 Jul 2026 08:11:59 +0000
ROA not before: Thu 09 Jul 2026 08:11:54 +0000
ROA not after: Sun 16 Aug 2026 08:11:54 +0000
asID: 151407
IP address blocks: 154.88.64.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120751 (0x1d7af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 9 08:11:54 2026 GMT
Not After : Aug 16 08:11:54 2026 GMT
Subject: CN=6a4f57cf-4da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:eb:6c:60:ee:c4:af:18:35:5e:85:5e:d8:ef:
4a:ff:69:ce:84:c2:92:99:51:8f:1d:da:14:e1:bb:
2e:d6:b1:11:1f:40:72:dc:68:e8:96:64:3b:d2:4a:
78:a1:97:ac:ea:db:67:71:53:60:81:af:fa:99:16:
f0:15:35:6f:f0:83:b7:75:64:ad:22:f7:a5:cd:54:
d5:ea:35:e9:db:52:2e:59:6b:b0:09:73:53:31:a3:
6d:5b:4d:03:f8:4f:79:00:09:96:6e:94:26:34:68:
91:51:39:d6:c5:5d:4a:43:9f:76:9d:2e:33:2f:60:
9a:88:9e:3f:7b:59:d4:86:2f:a4:01:34:9c:81:a3:
e9:52:a5:75:6f:ec:e5:ce:62:69:e0:fe:cd:36:a0:
9f:37:a4:74:ec:6b:6b:e4:8d:d3:61:3e:a9:d2:84:
aa:a0:c0:04:d6:c5:48:ae:3c:88:cd:40:fe:7a:74:
a2:a1:1c:be:4f:37:e0:ab:bd:40:1a:6b:fe:33:28:
6b:f7:ac:80:a7:ff:67:3e:69:61:d4:12:4e:ae:20:
f1:8d:79:ec:58:ad:4f:c4:ba:b5:1a:fd:4f:e9:58:
42:9e:4e:90:40:16:3b:5f:07:a1:18:00:b1:3d:e2:
ca:14:c9:33:40:63:12:ab:2c:ba:d8:37:5c:aa:a0:
d8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:31:91:21:8A:78:C8:A4:11:F6:2E:40:D6:AB:FB:95:53:99:3E:08
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB3A4DA27B6D11F1947E26E8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.64.0/23
Signature Algorithm: sha256WithRSAEncryption
81:37:85:b0:2a:af:9d:0e:5a:31:e9:23:b9:11:e7:ce:a1:57:
cc:ea:44:f2:ed:a1:aa:d6:d8:ae:42:50:1e:80:94:f5:de:76:
91:2c:02:82:c5:b4:b9:94:e6:46:11:9d:1a:6d:d4:e5:3f:62:
a5:e6:43:ee:aa:31:e9:49:fc:96:01:eb:3e:9d:02:4e:7f:b3:
45:a2:db:2b:4b:4d:80:fa:86:e8:75:94:7a:b6:a7:61:4a:d4:
fb:e7:82:b7:e5:f1:e6:bb:ef:e8:c4:3c:77:2c:d6:aa:4d:eb:
d7:f7:41:0d:5e:27:08:11:e2:9e:c8:65:29:34:83:79:17:49:
5b:af:11:ef:d4:82:dd:94:7c:04:e3:ae:06:20:d8:04:09:f5:
b7:57:c1:35:cc:9a:ef:ee:ff:82:c9:05:a7:8e:b2:8c:f7:0d:
5b:26:8d:92:f3:72:e7:01:18:ec:20:f9:ba:88:04:6f:d4:f0:
50:0a:21:48:de:66:ce:a6:17:6c:2d:31:c4:1c:14:f2:d4:f8:
73:74:2c:77:0a:1b:31:74:5e:e3:b9:af:e0:f9:15:5b:a7:40:
0c:4e:6e:8c:b0:53:41:2c:86:27:18:5c:b2:f2:c0:94:81:3f:
b1:14:98:b9:b9:43:ff:62:b5:f3:bf:82:52:c7:4d:b1:d2:23:
71:87:5b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:14:05 2026 by rpki-client