Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1786622720311F1BFE7CCF3CE1D38B0.roa
File: E1786622720311F1BFE7CCF3CE1D38B0.roa (raw, json)
Hash identifier: v9Run19z08lF0Fd3kbrjQb5AbDxvNOZnFtqAatiHdxw=
Subject key identifier: CD:DA:9C:A1:3A:6D:2B:2F:A1:72:9F:E8:2A:1D:4A:1A:CA:30:4C:31
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D588
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1786622720311F1BFE7CCF3CE1D38B0.roa
Signing time: Sat 27 Jun 2026 08:40:42 +0000
ROA not before: Sat 27 Jun 2026 08:40:37 +0000
ROA not after: Thu 30 Jul 2026 08:40:37 +0000
asID: 32043
IP address blocks: 154.95.6.0/23 maxlen: 24
154.95.8.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120200 (0x1d588)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 27 08:40:37 2026 GMT
Not After : Jul 30 08:40:37 2026 GMT
Subject: CN=6a3f8c8a-a528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:39:ec:0e:3a:59:63:8e:40:c2:49:b2:ec:2a:
7f:9c:25:1d:c0:82:20:0a:4c:be:3a:fa:d5:1d:e2:
71:0c:91:26:02:29:7a:b9:5c:be:72:5c:34:56:9f:
56:91:32:b0:e1:32:ae:2a:46:ea:c5:ec:32:91:3c:
54:da:52:69:f6:ce:a6:be:0e:2d:f3:18:86:b5:39:
35:a9:04:4b:0a:67:73:82:12:6b:e8:5e:c5:32:28:
e6:e9:b1:a5:81:6d:54:c6:0d:3a:94:2a:e1:3b:e1:
0f:05:88:bc:61:f6:1e:d8:17:a7:61:8d:d7:b5:4c:
b3:38:6d:25:31:eb:34:75:0d:b3:03:34:3c:56:45:
05:9e:c9:56:2e:23:5d:99:e3:61:2c:61:8a:0e:7c:
6c:ac:89:0a:72:e9:16:97:4e:2b:8c:ce:ae:dc:92:
c7:50:e9:98:47:3e:90:b6:42:a2:ce:01:63:d3:f9:
a5:74:c7:4a:eb:f3:4e:03:37:a2:34:b8:83:cd:76:
00:76:87:eb:46:5d:3f:47:6d:cf:31:fd:76:77:0f:
aa:a0:71:c8:01:63:3e:6c:f7:8e:1d:db:3d:23:28:
62:51:61:9e:d1:81:16:cf:28:de:d3:12:71:f8:ed:
52:53:db:9d:b7:29:64:20:23:25:cb:f5:2d:45:86:
7a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:DA:9C:A1:3A:6D:2B:2F:A1:72:9F:E8:2A:1D:4A:1A:CA:30:4C:31
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E1786622720311F1BFE7CCF3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.6.0-154.95.9.255
Signature Algorithm: sha256WithRSAEncryption
91:17:80:23:c5:b6:45:f8:97:54:00:be:f7:fd:64:75:5d:ed:
7d:30:f4:52:a2:ff:c5:76:b2:94:d8:31:f5:6f:a2:f7:15:d6:
e4:35:e3:6c:ee:4a:c7:d5:74:e1:fe:4e:e0:16:70:13:24:77:
69:28:af:bb:8c:4c:6b:e7:bc:ca:ee:44:e6:f5:3e:90:bf:65:
a6:aa:b4:6e:cf:3e:87:1f:99:83:a9:22:2f:71:fe:16:bf:7b:
07:8e:a7:7e:dc:e5:3f:d5:63:de:7e:63:3c:09:1a:e7:39:50:
bd:84:9e:d1:37:11:42:a0:77:fb:06:da:ab:fa:2a:97:68:ff:
b7:91:36:06:de:4e:f1:fb:cf:6d:a6:13:45:34:6e:4f:23:c6:
8e:c4:4e:a6:a5:ab:b8:e5:0e:b9:b3:e7:52:3a:ba:58:44:fb:
ee:43:4d:81:3a:a7:39:9d:23:8a:19:1d:cc:64:44:fe:41:ba:
15:f5:2e:aa:e7:3e:44:b6:d5:1e:ab:76:8c:d7:21:8e:38:1f:
19:8e:ea:38:f2:8f:8e:79:cd:5a:8e:e9:18:34:8e:d8:79:af:
fa:65:89:8d:6b:04:6f:e8:7b:e9:4f:e8:58:be:45:2e:44:86:
2a:86:e3:40:fa:56:91:ea:7d:89:9f:17:58:e8:da:7b:6d:1f:
9d:51:ac:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:24:40 2026 by rpki-client