Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DEED566076DB11F18848DFE5CE1D38B0.roa
File: DEED566076DB11F18848DFE5CE1D38B0.roa (raw, json)
Hash identifier: Kuay4OjpAFf8GHgku96NauM+zRUQrG3rMiYj2vZMqkM=
Subject key identifier: 89:56:5A:F7:DD:32:26:10:6F:58:07:AE:03:7B:C2:AE:E7:A0:92:CF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D6B4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DEED566076DB11F18848DFE5CE1D38B0.roa
Signing time: Fri 03 Jul 2026 12:36:54 +0000
ROA not before: Fri 03 Jul 2026 12:36:49 +0000
ROA not after: Fri 04 Sep 2026 12:36:49 +0000
asID: 46071
IP address blocks: 154.210.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120500 (0x1d6b4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 3 12:36:49 2026 GMT
Not After : Sep 4 12:36:49 2026 GMT
Subject: CN=6a47ace6-5336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:00:f6:d5:85:75:db:3f:25:f6:43:d8:5c:4d:
a8:95:00:0c:47:dd:6f:18:32:46:9f:f5:ac:62:5a:
0a:cd:50:a5:9c:f5:12:94:79:b0:79:64:b5:62:ec:
ba:53:12:0c:39:0e:26:b4:0a:54:c4:4e:6a:cb:80:
bc:a3:2e:b0:35:78:45:b6:2c:ab:2a:b5:22:1c:a8:
32:ae:5f:7e:1b:b0:9a:17:4a:2b:bf:4f:bf:b6:8c:
1b:f6:87:c5:5a:59:a3:a7:60:35:01:2b:54:39:8e:
16:84:3a:1f:b7:e6:4e:5f:33:9f:dd:0f:e9:a3:79:
27:95:71:05:cb:c8:61:b8:83:41:3f:0f:ee:f5:50:
3b:29:36:b7:7e:2f:af:f7:5a:5b:86:20:de:13:e0:
c0:2c:58:1d:9d:04:f7:89:6a:08:0f:0e:6b:d5:b0:
15:5b:61:f9:29:8a:a1:fa:f4:c3:40:85:18:99:3b:
4b:4b:5b:e4:84:a6:e3:d1:03:c0:2e:0a:2d:b0:5c:
b3:a0:12:8d:d4:18:ab:f5:77:ea:d0:ea:88:d4:60:
94:88:ec:46:96:57:c6:be:84:8c:0d:0e:6d:2e:8c:
fd:a0:6e:6f:8f:69:5c:95:90:b1:ca:49:16:b3:43:
ae:17:2a:e7:0a:cd:d3:4f:bc:a0:8a:f9:9d:50:b8:
02:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:56:5A:F7:DD:32:26:10:6F:58:07:AE:03:7B:C2:AE:E7:A0:92:CF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DEED566076DB11F18848DFE5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.205.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:2a:97:dd:4a:27:77:9c:4e:d5:70:ab:8a:c0:8a:e9:b8:00:
d8:11:9e:18:50:8e:0e:5e:f9:63:b1:f6:e4:16:d8:a2:08:c3:
d6:0b:9a:4d:22:c9:20:39:a8:68:ab:47:7a:d9:5b:75:ac:6f:
2c:30:5f:12:4f:fc:2a:73:58:e6:74:39:d6:9d:f8:f4:f5:2d:
89:77:ba:0c:f4:9e:43:f7:56:cb:d8:4e:1b:70:bf:9f:af:4f:
c4:f4:2d:71:6a:81:5d:97:5c:3b:48:ca:be:4e:5f:20:aa:87:
ed:1b:2f:67:3f:0f:bd:4f:29:af:d4:7e:67:74:05:6b:a5:9a:
ba:6a:49:c7:36:6d:94:ce:8f:88:31:60:ce:86:d3:cd:27:73:
e5:62:b8:69:1f:f4:20:a2:30:5b:cc:40:a7:be:fa:3b:84:61:
bf:55:8b:99:67:f4:12:d4:c3:42:19:8b:24:f5:48:dc:34:0f:
20:fc:2d:f6:31:bb:59:65:63:9a:0b:ed:a2:ff:cb:fe:35:c7:
6f:17:51:3d:ba:5a:6b:7a:1e:c8:92:3c:29:94:97:ba:fd:0e:
a4:85:f1:bf:09:7c:5f:11:dc:ea:e0:8d:3b:fb:ec:d2:69:e4:
08:97:4d:1e:b9:36:61:2f:1d:e4:d4:d2:71:4d:27:e2:e1:da:
4b:17:48:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:25:17 2026 by rpki-client