Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6D0D9E27F7811F193AD37FFCE1D38B0.roa
File: E6D0D9E27F7811F193AD37FFCE1D38B0.roa (raw, json)
Hash identifier: H25ufBuSO18CpEXg1vzBu75cKwJiMojCnmbSIbyEyVI=
Subject key identifier: 58:92:11:83:85:F8:DE:9F:0C:B5:5F:D0:EF:13:37:1B:36:B9:AF:87
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D8EE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6D0D9E27F7811F193AD37FFCE1D38B0.roa
Signing time: Tue 14 Jul 2026 11:41:07 +0000
ROA not before: Tue 14 Jul 2026 11:41:03 +0000
ROA not after: Sun 23 Aug 2026 11:41:03 +0000
asID: 63969
IP address blocks: 154.89.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121070 (0x1d8ee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 14 11:41:03 2026 GMT
Not After : Aug 23 11:41:03 2026 GMT
Subject: CN=6a562053-98cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7c:38:24:da:bc:99:81:1b:c9:ed:7e:57:f4:
ae:a4:e7:7c:99:7d:48:db:a9:34:5a:45:4d:15:e7:
92:3a:df:08:8c:21:a5:3f:22:02:03:91:84:94:e5:
67:a0:6a:ed:28:c6:82:4b:c7:1d:28:1d:2b:87:e6:
a8:e3:0b:78:88:18:7e:e0:9a:77:ab:db:91:9b:c5:
1e:dd:4b:c4:a5:bb:7e:18:35:f2:08:30:e2:6f:29:
c0:91:08:2b:43:d1:d4:e1:b3:89:b0:11:e7:10:86:
b3:3f:19:1f:d5:ef:19:25:aa:58:75:0f:43:9d:ef:
ff:07:fa:ae:36:2e:83:b8:22:95:5e:a1:2b:21:d6:
ab:12:34:50:04:b2:3d:21:c8:d4:00:db:4f:df:47:
f6:fe:be:cc:7a:6e:00:fd:1b:a1:f3:00:ae:ec:80:
b6:5d:0e:0c:4f:1c:a6:57:94:26:f8:34:24:be:51:
c8:cd:de:70:90:a7:c3:ed:6c:ac:02:b3:63:ef:9b:
e1:80:62:a8:59:9e:a5:ed:b6:66:79:48:04:c0:9b:
59:4f:66:2d:0a:55:9a:9e:12:29:f1:c6:db:3f:4c:
fd:3d:e9:c6:57:78:01:2d:f5:da:fc:fa:50:ff:9b:
1c:5c:f1:74:c1:c4:1b:c7:4a:de:5b:a5:9b:35:6e:
31:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:92:11:83:85:F8:DE:9F:0C:B5:5F:D0:EF:13:37:1B:36:B9:AF:87
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6D0D9E27F7811F193AD37FFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.7.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:57:8d:6f:f2:80:66:fd:7a:ba:7a:80:c3:05:f1:16:79:70:
f2:34:99:1b:05:ca:57:13:84:be:99:3d:b5:41:a9:ba:b0:1e:
a9:5f:07:36:91:c4:e2:ca:13:05:ed:d0:28:88:3c:5d:86:15:
38:de:79:5a:f6:19:6c:0e:d0:2b:a6:f4:ba:33:1e:e9:e1:2c:
e5:81:3d:53:55:10:46:46:6e:d8:a2:b2:f0:2d:1f:0a:e7:88:
1e:00:a6:55:8c:53:28:2c:58:9b:ce:0f:19:6f:e7:53:31:9d:
b2:9e:35:a5:b6:aa:96:e9:e4:0c:0b:5d:da:e7:aa:e8:ea:75:
14:d7:77:dc:e2:3c:73:bd:04:0c:10:0e:70:3d:64:ff:1b:0b:
67:8b:0b:f6:ee:59:17:b5:af:60:84:16:69:fd:0e:2c:c7:8c:
6b:63:86:58:3f:83:fe:6c:b8:85:9f:43:20:4e:af:4f:2c:5a:
40:86:6d:08:52:0d:8f:39:33:b1:f9:94:44:92:e9:39:87:d6:
a0:28:a6:6f:27:34:6e:09:a5:ee:aa:ce:f4:40:c7:25:cc:b2:
60:07:ff:cf:15:2f:47:03:d0:29:2c:89:8b:b9:b1:9d:7b:e3:
d8:fd:c4:12:81:16:bb:c1:d3:87:bb:11:7b:7e:27:d7:aa:17:
59:4e:ba:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:38:09 2026 by rpki-client