Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0368DF0861811F19712D814CF1D38B0.roa
File: F0368DF0861811F19712D814CF1D38B0.roa (raw, json)
Hash identifier: U0ms8ySLS2JWIotMk8/teQPDS2jgj9DmsROuBgBhtR0=
Subject key identifier: 71:55:FC:34:27:B7:33:88:A3:31:AA:DC:DB:65:93:9A:02:21:37:38
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DAF8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0368DF0861811F19712D814CF1D38B0.roa
Signing time: Wed 22 Jul 2026 22:01:50 +0000
ROA not before: Thu 23 Jul 2026 22:01:46 +0000
ROA not after: Sat 01 Aug 2026 22:01:46 +0000
asID: 212238
IP address blocks: 154.208.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121592 (0x1daf8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 23 22:01:46 2026 GMT
Not After : Aug 1 22:01:46 2026 GMT
Subject: CN=6a613dcd-7c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:99:7a:c4:5f:83:a2:ae:0c:fb:69:92:3b:f1:
a9:92:2b:cc:9e:af:0d:7b:d4:52:76:4f:75:90:e4:
be:81:f8:ee:df:3f:5e:10:93:fe:c7:6e:5c:0c:93:
b8:89:3f:4c:f2:85:a4:57:a1:01:5c:d8:ca:f0:23:
5e:ba:a3:4f:2d:bd:5b:d4:bb:fc:57:bd:33:13:c1:
73:44:f8:fc:6f:59:32:45:db:3d:c9:c0:1d:d8:ea:
eb:ac:2b:b4:1c:c8:9f:9d:0b:e4:95:de:af:ae:d6:
e1:bf:99:0f:3d:1d:43:32:05:42:51:ae:76:cf:77:
46:3d:03:2d:3b:4e:39:36:c5:d0:c0:3e:78:ea:4e:
9b:6d:29:32:f5:a9:7c:af:52:a5:4d:4a:b3:39:34:
5e:69:60:3f:fa:e4:5f:f7:28:c6:37:9d:2c:39:d5:
ab:99:e6:c4:f8:aa:8f:4e:fc:ba:74:50:a5:bb:52:
c3:cf:6f:10:93:3a:08:a4:b1:22:6d:84:13:15:2d:
df:ad:b2:9f:91:d2:87:f0:20:73:8e:0f:fc:f7:a7:
51:b1:67:c5:7f:fb:44:2f:1b:1f:02:d0:b4:78:71:
fa:d9:72:ac:91:58:30:63:b7:97:8c:10:e5:ff:44:
6b:83:d0:5a:e3:93:7b:e0:93:52:f1:e8:30:c7:d4:
74:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:55:FC:34:27:B7:33:88:A3:31:AA:DC:DB:65:93:9A:02:21:37:38
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0368DF0861811F19712D814CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.115.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:7d:6b:bb:43:be:36:45:5d:60:a7:5c:9b:03:0a:e8:c1:01:
db:4f:ac:c3:9e:70:03:15:9d:39:ed:7d:39:c7:f4:74:a0:70:
a3:cb:35:46:62:f4:22:35:8e:0e:34:22:72:2a:53:5e:35:dd:
10:08:d8:5c:3c:3e:4f:da:c2:f6:bc:c4:03:45:bf:52:e6:0b:
27:80:0d:e0:a1:58:d2:3a:48:2b:8d:fd:03:08:51:73:1d:b7:
53:25:1a:cf:65:56:ca:7b:68:4c:09:63:4d:53:ba:89:85:d0:
13:5a:89:bf:89:1f:fd:e2:89:e1:d7:37:f5:43:f4:15:9c:cb:
ea:6b:52:d6:38:a1:36:05:2e:d7:94:1e:f0:d2:8a:3b:5f:b0:
8e:b2:32:16:ee:b3:cd:1c:d2:9d:b3:bd:00:af:17:90:87:2f:
91:41:25:e0:2f:a5:88:d5:7f:b2:0b:39:f3:54:5c:fa:54:c8:
ad:ed:a6:31:c1:d9:ac:2f:4a:92:f4:36:78:12:96:5a:67:80:
aa:c7:b2:72:33:0e:96:77:e6:6c:a1:b4:3d:4b:7a:db:15:83:
01:4a:3e:06:28:a4:55:8a:7a:f6:29:57:3e:24:4c:6f:6a:c2:
df:4f:a2:2c:34:be:a3:9d:80:3c:17:b2:8d:37:3f:e7:14:26:
94:98:cc:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:02:33 2026 by rpki-client