Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB3CC3186FC211F1A8919ABACE1D38B0.roa
File: DB3CC3186FC211F1A8919ABACE1D38B0.roa (raw, json)
Hash identifier: 0Qrv8u/GKQ6HZPwDt8kkGZPud2YURePZxxN3YZLzs04=
Subject key identifier: 41:63:D8:CB:57:67:98:32:CF:37:8F:8F:0B:41:4F:F0:88:B8:12:7B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D4C7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB3CC3186FC211F1A8919ABACE1D38B0.roa
Signing time: Wed 24 Jun 2026 11:50:12 +0000
ROA not before: Wed 24 Jun 2026 11:50:07 +0000
ROA not after: Thu 30 Jul 2026 11:50:07 +0000
asID: 395886
IP address blocks: 154.201.72.0/21 maxlen: 24
154.201.88.0/22 maxlen: 24
154.201.92.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 08:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120007 (0x1d4c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 11:50:07 2026 GMT
Not After : Jul 30 11:50:07 2026 GMT
Subject: CN=6a3bc474-208c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fa:d8:97:0a:ec:16:65:73:b0:20:ba:00:eb:
7e:a0:1f:c3:b8:71:69:6d:90:3f:a4:7a:c2:da:9b:
09:e3:79:e4:1a:e5:1b:8a:56:82:8f:d7:29:35:0a:
57:a0:e5:03:10:1c:67:b0:60:21:16:51:30:07:2d:
f0:ee:ee:89:96:0d:ed:5c:4c:6e:cc:e3:04:76:24:
c7:1c:61:25:9b:6a:84:4a:b1:0e:d9:19:f3:97:f8:
fa:62:a7:55:36:34:50:f6:52:96:04:5d:84:95:a9:
17:15:3e:d8:49:37:7a:3d:89:d5:d8:30:f4:52:85:
21:af:e7:46:62:63:32:d8:fd:4d:58:9e:9c:f2:65:
e9:de:5d:1f:9a:e5:36:28:5a:12:87:9d:3e:bc:95:
b1:9e:07:39:bc:33:6a:a7:e3:c5:97:d7:c8:3d:01:
52:68:83:f3:09:df:12:76:93:49:33:81:21:f2:3b:
54:b3:c9:4a:e6:80:f3:4b:d6:38:ca:b3:30:4e:34:
9c:3b:a7:20:1c:e0:18:ee:5b:cb:6b:13:44:ad:bb:
4e:95:ac:e4:20:7b:6a:5a:48:a3:1b:55:dd:e7:73:
fb:3e:4b:3b:5f:51:05:41:67:8a:e6:5c:92:d6:1b:
9c:7c:21:7f:14:fe:e6:ff:5f:59:b0:7b:28:ef:6f:
e8:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:63:D8:CB:57:67:98:32:CF:37:8F:8F:0B:41:4F:F0:88:B8:12:7B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DB3CC3186FC211F1A8919ABACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.72.0/21
154.201.88.0-154.201.93.255
Signature Algorithm: sha256WithRSAEncryption
57:a0:a9:e0:8a:b4:95:f5:f0:f6:a5:3d:0e:e4:0f:2f:db:d4:
83:bf:57:55:9b:11:14:73:f4:43:91:88:1d:4b:6f:69:14:3c:
c9:9b:3c:0e:ad:48:e4:f4:88:57:6c:63:6f:20:df:b9:23:25:
60:ed:28:8e:85:4a:4b:7c:46:6c:47:58:4e:86:94:e8:b7:02:
cb:43:02:4f:59:db:05:70:bd:28:05:2f:f2:82:24:90:e4:ec:
1e:82:8f:8c:dc:56:46:f4:88:98:9d:2c:05:bb:85:3c:f8:f4:
46:0b:52:56:86:f1:18:3d:f0:84:e7:7a:14:95:1d:aa:7c:11:
ae:0f:49:7a:13:23:32:d2:0a:59:af:01:c3:30:90:1a:17:6b:
cd:9f:37:27:ed:c4:4e:00:94:01:01:26:05:83:fe:07:f5:23:
58:44:ce:ae:60:a9:29:d6:eb:4a:76:64:33:c9:b9:de:f6:6f:
10:80:04:30:b8:d0:53:d8:2d:01:6c:d2:79:22:56:f8:2a:10:
87:fc:52:47:f7:a2:eb:14:9e:a0:93:35:b3:8d:50:0d:6a:fa:
92:a7:7d:d7:21:f5:81:fc:a6:a3:24:16:22:8a:bc:40:aa:31:
4b:82:88:58:29:80:88:d5:5f:85:66:dc:87:27:6c:04:6e:c9:
18:1b:b7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:26:28 2026 by rpki-client