Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E64D9FF8866911F1B9263D15CF1D38B0.roa
File: E64D9FF8866911F1B9263D15CF1D38B0.roa (raw, json)
Hash identifier: N58+oWMQXM7R+eNeXZUKvK0MLNMS5Mmd6zsyot6IV9M=
Subject key identifier: 6B:7C:37:DB:A4:91:44:27:23:09:F4:36:57:54:1B:EB:C1:87:9F:4B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DB13
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E64D9FF8866911F1B9263D15CF1D38B0.roa
Signing time: Thu 23 Jul 2026 07:41:22 +0000
ROA not before: Thu 23 Jul 2026 07:41:18 +0000
ROA not after: Sun 30 Aug 2026 07:41:18 +0000
asID: 209363
IP address blocks: 154.208.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121619 (0x1db13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 23 07:41:18 2026 GMT
Not After : Aug 30 07:41:18 2026 GMT
Subject: CN=6a61c5a2-328f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:86:5e:c9:85:90:78:b7:1f:05:40:d6:b1:e0:
a4:60:7b:b9:43:ed:61:59:d9:20:18:9a:18:71:58:
96:8f:a7:6a:cc:c1:98:6b:eb:be:b7:3e:c0:0a:48:
63:f9:f2:20:66:28:d3:6f:c6:b3:40:19:1a:e4:11:
27:1b:75:5e:3d:25:f3:8d:cf:d7:88:bb:1a:f9:cb:
dc:f1:1c:07:8b:0c:c2:e3:3c:38:3e:30:28:d2:6d:
8f:dc:d4:d6:de:7a:68:96:97:b8:d5:b4:8d:41:08:
45:68:f6:c6:60:09:37:34:66:b4:16:ac:58:81:20:
f5:40:f8:a0:42:24:56:b9:6f:93:e6:0e:e7:ca:ba:
1d:5d:b5:33:bd:79:8b:d1:16:46:50:c9:a9:63:c7:
3d:1a:20:77:f0:e6:b8:76:1f:7c:42:7c:11:0d:b9:
30:e0:40:c7:ea:58:57:e4:31:a6:49:af:10:93:2b:
a6:a4:2c:09:3f:98:c3:fc:ce:21:b2:d3:9c:79:e1:
d2:56:eb:a5:ea:f7:f5:8c:16:e2:6f:dd:4b:13:fd:
f6:b3:98:27:6f:42:45:3a:81:34:de:1f:4b:e6:7e:
b7:3c:9b:d5:77:db:bc:51:f0:36:61:76:44:a3:f0:
35:a1:d6:74:15:d8:93:ec:03:1b:db:ca:07:0c:11:
d8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:7C:37:DB:A4:91:44:27:23:09:F4:36:57:54:1B:EB:C1:87:9F:4B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E64D9FF8866911F1B9263D15CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.117.0/24
Signature Algorithm: sha256WithRSAEncryption
c0:5f:a2:da:24:f7:36:ef:94:d9:af:ee:68:29:35:7a:d9:f9:
97:5e:12:66:c7:95:13:3a:71:29:70:cc:7d:d1:8e:e5:d9:e6:
ef:11:c3:04:41:d8:45:9b:90:f6:a8:4b:1f:6c:4c:90:0c:32:
8f:2a:ca:21:c5:a8:29:89:c4:b3:e7:cb:13:6c:d6:83:74:c5:
43:64:93:22:52:f2:28:67:49:e2:2f:65:ff:a7:20:4c:25:03:
43:cc:4f:0a:6b:99:89:33:47:cf:f0:03:37:26:91:0e:2b:cd:
80:1a:64:25:a3:b1:2c:46:35:bb:53:fb:a5:97:70:ed:0b:e1:
cb:83:98:6d:45:25:b8:02:76:8f:a2:16:03:8b:9b:fc:8c:91:
f8:87:35:4a:36:8e:30:de:81:c2:56:39:55:18:c4:90:09:f9:
20:4c:a1:87:03:b1:28:17:6a:af:95:6d:1d:ff:ce:98:da:51:
e2:e3:0a:55:f9:17:40:e3:8e:6e:ce:e3:98:f5:8f:6f:58:64:
02:0e:9a:74:4c:2c:9a:c7:5b:23:99:c5:52:f6:99:c3:34:33:
a9:08:9d:5e:23:68:2c:7a:5a:fb:79:74:09:98:d7:f8:73:0c:
00:7a:ba:1a:da:42:88:97:6d:1b:10:09:ef:e0:08:0b:20:3b:
11:40:a2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:07:01 2026 by rpki-client