Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD414BAA7C5311F1B95C02DECE1D38B0.roa
File: DD414BAA7C5311F1B95C02DECE1D38B0.roa (raw, json)
Hash identifier: YDBd5SakdKgXwb4x6rwALhm1I4EjvwzDLAMt1DCLZfU=
Subject key identifier: C7:B2:AB:3B:3C:8F:81:CE:26:A4:39:55:C2:25:05:F1:11:2F:29:8C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D805
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD414BAA7C5311F1B95C02DECE1D38B0.roa
Signing time: Fri 10 Jul 2026 11:38:26 +0000
ROA not before: Fri 10 Jul 2026 11:38:22 +0000
ROA not after: Mon 17 Aug 2026 11:38:22 +0000
asID: 139880
IP address blocks: 154.206.128.0/18 maxlen: 24
154.215.64.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120837 (0x1d805)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 10 11:38:22 2026 GMT
Not After : Aug 17 11:38:22 2026 GMT
Subject: CN=6a50d9b2-eecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e0:e0:fc:10:74:27:0f:56:a0:56:fb:46:f2:
c6:20:67:5c:bf:5d:d8:12:d9:ef:b5:f2:7b:fe:d4:
34:f5:24:ae:9d:75:70:a0:19:dd:e1:c8:c5:45:bb:
2a:d3:fd:f4:ea:53:8f:d5:fb:f0:24:72:01:07:d1:
4b:7d:5e:c8:99:0f:3b:c7:bc:13:2c:82:88:76:03:
d4:ff:03:66:f3:f2:ed:3f:42:c2:aa:d9:8f:f0:91:
47:6e:a3:4f:ee:56:a1:0e:d2:82:67:80:79:84:f0:
d7:85:29:1d:e4:5b:0d:4a:d2:12:87:92:81:dd:7c:
29:4f:60:e9:19:cb:26:55:d7:be:2a:c5:ee:62:5e:
7b:59:47:5f:94:60:fc:8b:06:c9:2a:c9:7b:bd:4a:
31:33:63:e3:32:40:d1:28:15:0c:95:20:48:c4:79:
d6:15:5b:51:c9:7d:12:ef:e7:09:47:c6:8e:bd:c4:
c8:08:e1:f9:5d:cc:e2:e1:d5:89:19:f9:3d:c8:9e:
95:c0:f5:67:b3:7f:89:aa:3a:d0:54:28:a1:7b:00:
b8:a6:94:32:20:c5:48:7d:6a:25:27:a3:3e:9f:8b:
4f:7c:28:18:c4:d9:d0:fb:d7:80:91:b0:fe:3e:e8:
8c:c1:81:32:32:7e:7c:93:20:9a:7a:77:1c:fa:70:
6b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B2:AB:3B:3C:8F:81:CE:26:A4:39:55:C2:25:05:F1:11:2F:29:8C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD414BAA7C5311F1B95C02DECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.128.0/18
154.215.64.0/18
Signature Algorithm: sha256WithRSAEncryption
6a:e3:55:f2:48:30:d7:17:ab:3e:95:f4:00:ee:88:4e:48:de:
44:89:3f:64:a9:ae:d9:d6:ea:a3:46:6e:d2:30:d0:60:02:5d:
51:ae:51:5e:a6:51:5f:49:d8:96:76:f5:40:1f:6e:d4:0b:38:
3c:1e:65:dd:ec:b7:70:1f:ed:c9:28:cc:10:34:59:0b:22:52:
3b:6b:d2:9f:15:16:54:36:59:ba:85:31:1a:42:6c:fe:97:b1:
8a:47:03:de:30:d2:7e:97:22:d4:78:f3:8d:fc:d0:a3:b9:16:
ae:77:54:89:d3:0f:38:35:71:cb:26:e0:a6:35:81:74:fa:18:
e0:cf:94:85:99:95:da:62:9a:0e:c8:90:a7:9f:54:2f:ed:64:
e2:ae:8b:6d:9e:cd:15:e7:bd:5d:f8:98:52:1d:1a:b4:80:ac:
04:a6:d0:37:46:55:45:2d:e6:3c:09:fb:8b:f0:32:ae:a0:d7:
dd:34:a2:29:bf:ad:be:36:ff:b2:63:ed:78:9c:ba:e7:32:40:
87:0c:73:ce:89:f9:be:b7:29:16:cf:51:3b:52:ac:73:76:34:
e1:6f:bb:bd:04:df:a9:75:ea:10:2b:eb:54:34:54:02:47:d7:
a6:d9:c2:2c:d4:5c:b7:09:ed:c4:6a:92:2b:27:c7:96:5e:63:
72:16:4b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:51:34 2026 by rpki-client