Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC4AE422866211F1AF4CE3E7CE1D38B0.roa
File: DC4AE422866211F1AF4CE3E7CE1D38B0.roa (raw, json)
Hash identifier: 7w5V2nYYVj0WNz5IoU6NA65lsj+B906Gpyc+CTnBldI=
Subject key identifier: 00:5B:C0:D0:20:03:37:6B:08:94:C2:5D:EA:71:E6:81:70:FA:FB:FA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DAFF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC4AE422866211F1AF4CE3E7CE1D38B0.roa
Signing time: Thu 23 Jul 2026 06:51:00 +0000
ROA not before: Thu 23 Jul 2026 06:50:55 +0000
ROA not after: Sun 30 Aug 2026 06:50:55 +0000
asID: 402506
IP address blocks: 154.201.72.0/21 maxlen: 24
154.201.88.0/22 maxlen: 24
154.201.92.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121599 (0x1daff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 23 06:50:55 2026 GMT
Not After : Aug 30 06:50:55 2026 GMT
Subject: CN=6a61b9d4-a9d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:82:7c:69:03:39:48:73:2d:24:b4:9a:03:93:
6f:3f:bd:25:37:2b:a5:5b:d8:06:cd:70:5d:0d:a1:
bf:32:68:9e:fd:07:c8:00:4e:71:39:3c:9e:a0:c2:
c5:a0:ad:89:22:66:cb:65:75:7c:02:c0:9e:66:4c:
6e:7d:0c:66:4d:8b:54:6a:ca:f9:e6:a6:67:49:32:
c1:21:8e:80:e9:e3:7a:9b:9c:13:e1:69:ac:85:fc:
af:0a:27:0c:c3:11:b4:b0:3e:d5:0c:c7:ea:b6:79:
c3:6c:79:76:bf:7a:72:d0:69:46:ba:5d:63:a0:62:
ce:7b:8e:f6:fa:2b:66:2a:67:98:91:f4:54:f0:f1:
c7:55:53:29:af:5d:c3:b8:64:7e:8c:a8:3e:5e:08:
10:9e:3f:06:26:83:b7:ba:fe:f2:27:67:66:4c:d2:
f8:de:27:71:04:10:fc:e3:ab:20:e7:bb:22:f5:02:
f3:ff:4d:7c:1a:c4:05:e5:d7:2d:f2:a7:a5:70:8b:
cf:77:50:6c:74:9a:46:f9:d8:0a:19:0e:66:ac:eb:
8e:05:fe:05:05:f1:f1:8d:a9:6a:b0:6c:f4:37:72:
10:36:a8:d7:b3:ed:4c:06:80:99:b8:5f:0f:02:90:
7e:6c:e0:2e:ab:94:b8:e5:98:8c:c6:81:4b:cf:88:
a8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5B:C0:D0:20:03:37:6B:08:94:C2:5D:EA:71:E6:81:70:FA:FB:FA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC4AE422866211F1AF4CE3E7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.72.0/21
154.201.88.0-154.201.93.255
Signature Algorithm: sha256WithRSAEncryption
46:cc:fa:81:7a:3b:02:9c:73:d7:d4:e2:20:38:3c:20:7b:b1:
8a:30:2f:87:a5:c2:bf:16:9f:8d:23:94:f3:4d:ab:69:8e:cf:
8e:48:d1:80:c7:ba:2d:d0:17:e0:de:5c:0b:90:d2:a0:4d:c9:
88:72:04:5f:ee:9b:ba:ef:10:0f:42:b5:3f:ec:7c:45:58:93:
7f:a0:c7:f7:b7:f3:2c:a7:ca:b1:95:4b:0e:00:e8:49:6d:4e:
be:15:70:80:91:30:c4:7c:9c:cd:34:24:88:cf:b6:5d:0c:27:
77:02:8f:50:e8:6c:67:d4:39:fa:44:ba:a4:b7:49:88:18:54:
8d:a3:36:32:81:50:88:0f:0c:e6:c8:5e:ac:c9:95:59:f8:48:
32:a3:08:6f:49:a8:ca:46:ca:1c:d6:c7:49:08:f1:51:1f:b0:
da:22:9e:47:c5:50:fa:17:33:56:a0:28:10:a9:41:f1:01:0a:
99:ae:bf:ea:28:8a:a4:ec:0b:a2:cc:ad:4c:ad:a5:2e:21:35:
b0:67:3f:e3:9c:ca:b8:ff:f2:f9:b8:43:f1:0a:52:d8:98:dc:
b6:c1:5f:90:eb:b2:52:a3:34:b5:5a:2f:7b:06:58:58:6e:90:
ca:8f:70:81:b5:f2:df:a2:c1:62:3d:b9:b9:4d:f2:34:5c:bb:
aa:db:75:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:23:50 2026 by rpki-client