Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E11D778A7D9811F1BCB7210BCF1D38B0.roa
File: E11D778A7D9811F1BCB7210BCF1D38B0.roa (raw, json)
Hash identifier: CLnVwKXCuRs4HEYzH/YQFscas2rvt+toGa8VwuRyWtg=
Subject key identifier: FC:8E:FE:96:74:F0:7E:8A:76:29:B5:E7:E4:CD:E1:B5:F6:9E:B0:F5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D86F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E11D778A7D9811F1BCB7210BCF1D38B0.roa
Signing time: Sun 12 Jul 2026 02:24:59 +0000
ROA not before: Sun 12 Jul 2026 02:24:55 +0000
ROA not after: Wed 07 Oct 2026 02:24:55 +0000
asID: 150750
IP address blocks: 154.208.32.0/24 maxlen: 24
154.208.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120943 (0x1d86f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 12 02:24:55 2026 GMT
Not After : Oct 7 02:24:55 2026 GMT
Subject: CN=6a52fafb-d522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7c:85:a4:60:b8:ad:2c:76:b8:d3:db:cc:29:
ae:b0:1f:da:56:97:a1:fa:07:b8:fe:10:04:77:04:
85:b7:a3:d2:30:99:ef:cd:d5:0c:ef:80:90:3f:68:
d2:9f:32:1b:b7:87:45:3b:69:8a:8a:a6:dd:a7:95:
63:8f:e0:38:de:be:ff:79:59:3d:f7:d6:6d:89:df:
a7:3c:17:8c:7b:45:e2:3b:16:c6:0e:6f:e9:94:14:
21:1a:08:a3:65:7a:a6:33:ed:51:5f:ab:ce:72:7f:
39:e4:04:89:e1:b4:48:97:e2:72:09:05:3e:4c:6d:
ea:1e:bd:80:64:26:c5:b4:7c:15:60:23:2d:04:e1:
76:f8:32:6e:0a:0a:41:b1:72:69:e5:70:91:77:df:
35:47:26:db:85:d3:2c:28:a8:41:c9:9d:04:cd:c8:
06:ad:95:9a:ad:a9:48:5b:0e:25:0c:be:bf:a6:30:
71:bf:13:9d:03:e5:55:9b:35:88:7f:f0:72:7d:f5:
7d:2b:2f:1d:6e:49:2b:e7:50:72:0a:51:02:25:22:
73:c8:46:21:33:b3:b1:81:61:d3:13:e3:12:0c:79:
f2:46:8c:53:1a:b2:61:9f:34:39:74:68:a8:13:d9:
5c:53:de:1d:93:2a:5f:d4:41:c0:5a:53:f3:7a:df:
70:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:8E:FE:96:74:F0:7E:8A:76:29:B5:E7:E4:CD:E1:B5:F6:9E:B0:F5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E11D778A7D9811F1BCB7210BCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.32.0/24
154.208.63.0/24
Signature Algorithm: sha256WithRSAEncryption
92:b3:8f:38:34:17:f1:6a:33:f8:cf:6c:13:42:9e:42:5d:5f:
e9:42:6a:9e:df:ab:84:ee:b4:1c:cc:15:c8:4a:a1:f6:b9:7f:
09:8a:86:5c:0c:b4:a6:48:d0:bf:81:bf:3d:01:e2:ae:bc:d7:
52:2b:bd:5b:72:6d:3d:30:a4:88:48:62:fc:2f:ab:51:f8:78:
a0:bc:79:4f:2f:32:61:c7:4a:7c:81:fe:66:69:32:10:40:3e:
d5:56:14:56:fa:22:15:6b:26:6f:e6:e3:f7:28:9a:87:84:19:
7c:90:84:8d:df:cb:38:c8:c5:bb:25:dc:38:8b:c7:3c:d8:07:
f5:60:d2:38:8a:ae:b5:b6:2c:68:bd:a4:df:5a:21:79:99:58:
9c:0e:f0:33:da:ec:92:a2:59:50:5e:92:6a:4a:e4:4c:da:2e:
be:30:0b:f3:25:c4:41:78:b9:f2:32:df:d6:b0:aa:8e:1a:f3:
38:44:0d:96:b4:32:54:4b:2a:37:6f:b5:26:73:37:9b:18:2d:
47:93:97:2b:ab:c1:76:c2:42:eb:b5:3b:03:e9:d2:a0:e5:49:
2b:20:6d:f3:35:c8:06:14:55:3b:a8:21:4b:c4:71:db:ac:68:
02:12:99:31:8d:f1:b8:3a:19:22:76:08:fa:ed:65:56:7e:0d:
98:94:0d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:56:31 2026 by rpki-client