Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0753D94861711F186C4CD0CCF1D38B0.roa
File: F0753D94861711F186C4CD0CCF1D38B0.roa (raw, json)
Hash identifier: IGK8RnyjBdjARXDzdmRNydWuabizu30POlOBGIHZRiA=
Subject key identifier: 37:B1:20:59:BA:B4:C8:44:83:2B:15:49:4E:F4:9B:31:12:BF:29:3F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DAF6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0753D94861711F186C4CD0CCF1D38B0.roa
Signing time: Wed 22 Jul 2026 21:54:40 +0000
ROA not before: Wed 22 Jul 2026 21:54:36 +0000
ROA not after: Wed 21 Oct 2026 21:54:36 +0000
asID: 209242
IP address blocks: 154.198.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 08:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121590 (0x1daf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 22 21:54:36 2026 GMT
Not After : Oct 21 21:54:36 2026 GMT
Subject: CN=6a613c20-f6ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:02:fb:09:32:78:d4:c1:0d:70:f9:ff:be:d7:
56:e1:a1:36:6e:d7:af:e0:68:4f:6e:44:00:6e:45:
13:32:5f:61:44:08:eb:dd:e3:dc:9d:97:4b:43:6a:
1b:f4:5d:92:22:3e:3c:7b:44:db:8c:6d:a0:f3:63:
12:c6:81:46:b5:56:e2:53:b1:13:12:bc:e5:fe:80:
75:fe:0e:6d:cc:11:4b:26:0b:97:37:05:0e:fd:ed:
88:8d:93:22:c0:ba:63:19:ef:81:49:7b:2d:b8:fa:
eb:41:6f:f0:27:3d:e6:77:ba:fa:cd:23:0a:cd:8c:
f9:2b:33:3e:16:ad:a8:e6:11:62:65:68:de:4e:89:
19:82:7d:e1:08:6e:0f:b5:f5:20:df:52:60:c5:55:
5a:c2:fb:0a:db:6e:98:c9:a2:fa:15:b7:69:07:d8:
21:fd:75:92:85:e8:65:09:8e:36:01:3a:6d:01:bb:
2b:f8:f8:7b:96:f7:d4:c9:9e:57:15:ff:c1:30:a0:
5c:89:30:6d:dd:19:77:ab:33:a0:9f:b7:28:35:87:
1d:cd:f4:e5:b0:01:98:e2:9a:78:7e:67:27:9e:bd:
e6:66:69:90:31:66:71:64:75:5d:6f:0d:a0:c3:ba:
28:ed:e9:66:ef:70:4d:f8:72:51:2d:a2:38:00:7a:
77:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B1:20:59:BA:B4:C8:44:83:2B:15:49:4E:F4:9B:31:12:BF:29:3F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F0753D94861711F186C4CD0CCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.173.0/24
Signature Algorithm: sha256WithRSAEncryption
69:9b:c9:a4:1a:af:73:24:f1:c1:9a:82:51:c1:00:61:51:35:
46:25:bb:4a:ed:d3:b6:9c:82:d9:aa:16:8b:e6:98:45:b9:27:
1a:67:6f:6b:4a:0e:bc:75:80:33:7e:60:36:5a:bd:cb:c8:2c:
66:69:a1:1e:c1:3c:c8:05:67:00:c2:56:bb:ff:f4:39:a1:61:
56:ba:17:2d:ce:33:9f:83:fb:cb:d4:64:d3:c3:5c:2f:29:79:
5c:61:44:ca:b4:ae:2e:61:48:8f:f0:98:08:04:24:05:61:3a:
06:4c:ba:2e:b1:be:90:12:83:0f:81:59:41:cd:b2:5b:e1:57:
ec:1e:45:6f:4b:42:88:27:8e:38:e0:de:98:53:c6:be:1a:21:
f9:79:d0:a3:8a:bd:ef:90:f6:ca:f6:4f:05:11:9f:21:de:73:
97:d6:bf:1c:33:e2:48:a2:4b:81:69:bd:eb:8e:1d:1c:74:44:
2b:de:b0:c6:9b:9d:95:66:c8:8d:2e:9b:27:be:8a:54:4c:0b:
cd:e9:94:f7:cc:98:82:24:2e:53:02:38:07:61:dc:99:b8:12:
5e:12:ae:a4:47:6f:b9:3f:33:75:48:df:e9:77:33:dc:a2:c5:
7f:38:23:e2:22:08:84:5d:33:f2:6b:19:48:56:cb:9e:3f:5b:
7e:44:a0:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:01:39 2026 by rpki-client