Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E79BF1E67D5111F188EC0CE0CE1D38B0.roa
File: E79BF1E67D5111F188EC0CE0CE1D38B0.roa (raw, json)
Hash identifier: /LN4yTPlmzDXnyUbnd5k6Hce2J1HnwjgW/fLZicXMyg=
Subject key identifier: 57:7F:E7:B3:47:E5:D8:A3:BD:B2:4F:4E:7E:77:9A:EF:B1:54:C2:6A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D84E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E79BF1E67D5111F188EC0CE0CE1D38B0.roa
Signing time: Sat 11 Jul 2026 17:56:56 +0000
ROA not before: Sat 11 Jul 2026 17:56:51 +0000
ROA not after: Tue 18 Aug 2026 17:56:51 +0000
asID: 214432
IP address blocks: 154.193.211.0/24 maxlen: 24
154.193.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120910 (0x1d84e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 11 17:56:51 2026 GMT
Not After : Aug 18 17:56:51 2026 GMT
Subject: CN=6a5283e8-9989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:7c:d4:42:0c:b9:5e:e6:5e:b6:0a:f8:dc:7e:
39:c8:1b:70:d5:6f:ac:2c:b6:e4:fe:fd:51:df:1d:
b1:7a:7a:bd:f9:62:a7:43:89:90:ef:5d:d4:91:c2:
43:5a:49:7f:9d:d9:08:2e:d7:d8:2c:be:48:be:46:
21:2f:53:bb:b6:d2:b0:56:3d:b6:8f:d2:b6:2e:85:
00:90:09:ab:ea:d4:ff:7a:06:83:23:8c:56:82:74:
14:3d:b8:b4:22:cc:56:6a:16:64:c3:55:d4:5e:49:
66:2a:c9:fb:ba:da:d6:dd:6d:bb:3d:53:6e:fb:99:
c5:70:54:92:3c:d2:da:2d:86:5c:e6:c8:62:86:36:
5c:a4:37:3f:f6:a3:62:96:e8:21:09:ec:50:ab:ac:
30:5f:99:8b:3e:57:08:f2:b9:8f:27:56:cc:fc:50:
1c:4b:4e:7b:91:d3:6a:f7:d0:62:63:c6:05:94:f2:
98:a4:83:c8:ce:42:02:d8:a1:e5:40:78:b7:4a:1e:
41:00:2f:b4:47:63:a2:d2:53:c8:93:a0:a9:14:03:
95:c7:5e:58:09:82:6e:c7:21:10:f0:23:44:7e:87:
3e:a5:5f:ce:bd:e3:48:1d:94:dd:14:2c:1c:22:ed:
b3:1a:5b:8b:75:b9:e3:ff:63:d7:b5:58:12:24:bf:
c9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:7F:E7:B3:47:E5:D8:A3:BD:B2:4F:4E:7E:77:9A:EF:B1:54:C2:6A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E79BF1E67D5111F188EC0CE0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.211.0/24
154.193.247.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:5b:d2:e9:4e:0e:c9:e2:40:20:46:28:cf:fc:9e:dd:d6:54:
4c:be:e6:12:b3:0d:ab:de:c6:1c:06:6a:9b:09:96:75:50:86:
a8:2b:e1:7e:23:32:d2:10:36:91:04:ae:23:ce:a9:91:30:a6:
b0:28:34:c0:e6:25:17:66:02:6e:62:d8:7f:c2:21:f7:a9:7a:
e4:63:9f:a1:fb:48:4d:85:39:85:e6:d4:4f:27:15:58:a2:42:
fd:6b:1f:40:81:50:af:67:18:cd:3f:54:e1:9b:df:4c:e7:42:
72:d7:15:b4:be:16:bf:ef:86:88:68:ba:0a:91:10:9e:8f:c7:
86:f0:8f:6f:ee:57:b1:13:ef:b1:1a:b0:74:04:71:2d:67:65:
ed:24:fd:1b:06:87:5e:d0:dd:6a:be:c5:88:c0:73:e8:97:b9:
2e:54:9b:d8:83:1f:8d:11:f5:da:f2:78:f1:6d:ab:cc:6e:d3:
b7:13:6e:5f:6e:72:8c:37:cb:8d:be:64:08:7c:eb:5c:0e:9d:
7c:4a:d9:89:5d:5c:14:86:78:27:fb:c0:c9:22:7d:08:0c:53:
a7:cb:dc:25:9f:f8:71:fb:11:b9:35:76:23:f3:9f:d9:c0:8d:
96:da:4d:4c:97:9b:11:98:75:fb:62:5f:4b:1f:52:ad:2f:90:
9b:2f:67:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:53:18 2026 by rpki-client