Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F171CFAC85D411F1815D15FCCE1D38B0.roa
File: F171CFAC85D411F1815D15FCCE1D38B0.roa (raw, json)
Hash identifier: jMTGyAzb9F8AL9ElMLtoooRH5nh23cW4L7cEESv/zbs=
Subject key identifier: 1A:2A:7F:5D:B9:13:F1:15:40:9D:B5:88:D4:BE:CB:24:39:36:7D:68
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DAC5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F171CFAC85D411F1815D15FCCE1D38B0.roa
Signing time: Wed 22 Jul 2026 13:55:06 +0000
ROA not before: Wed 22 Jul 2026 13:55:02 +0000
ROA not after: Tue 11 Aug 2026 13:55:02 +0000
asID: 139056
IP address blocks: 154.214.2.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121541 (0x1dac5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 22 13:55:02 2026 GMT
Not After : Aug 11 13:55:02 2026 GMT
Subject: CN=6a60cbba-8dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6f:1f:7e:de:12:11:80:00:b4:d2:50:68:e3:
00:79:74:eb:d7:5d:07:e6:e5:d0:5f:f9:92:0f:6f:
9d:2d:6d:f7:15:75:d7:74:0b:2f:32:d4:04:2b:f9:
38:a4:cd:c5:8b:aa:55:e7:33:8e:9c:f0:e0:25:76:
87:54:1a:07:7d:a8:57:c2:db:55:17:d2:82:3d:32:
f6:98:85:12:5f:c9:b8:0a:3d:fa:e4:0a:19:56:70:
8f:50:f1:e7:0e:aa:0b:36:45:12:ad:bb:91:c1:de:
61:c3:c0:f3:af:24:e4:7d:99:ec:a4:cd:76:1d:f9:
3c:ad:d2:02:44:a9:cb:43:0a:de:98:e9:86:4d:83:
6a:9b:5f:4e:08:62:30:fe:94:da:a1:2d:44:8d:ab:
1f:89:c4:22:d5:57:51:92:70:cb:69:44:23:0c:31:
3e:7c:93:e8:24:ba:41:7d:52:37:8e:ca:86:72:13:
5c:fa:30:54:8a:d2:38:05:68:67:44:6f:61:9c:48:
98:c0:83:83:05:22:f5:d4:03:d6:80:e3:95:33:e4:
73:2c:84:59:95:a6:7d:7e:0a:13:12:31:3b:f2:6f:
2d:ab:e8:f9:5c:6e:2f:c8:c3:4f:75:a6:38:bd:5f:
38:83:70:ff:02:9d:73:4f:67:74:5b:84:b5:bc:b7:
3d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:2A:7F:5D:B9:13:F1:15:40:9D:B5:88:D4:BE:CB:24:39:36:7D:68
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F171CFAC85D411F1815D15FCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.2.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:98:67:40:a8:a8:45:9c:d4:63:75:5c:51:ef:6d:37:80:43:
db:83:94:4b:d8:47:99:df:25:f2:da:a9:9b:59:aa:1f:d7:d7:
78:bf:ec:9f:d1:05:4b:88:d7:0f:1e:dd:2b:4c:ce:e7:59:ab:
39:48:e0:d3:70:60:c0:5b:94:a5:7b:d7:e8:71:9f:58:1c:97:
4b:b5:48:70:f9:4b:c7:8e:3f:6e:81:08:14:ad:39:6e:4d:fa:
ac:54:98:56:0f:79:54:b8:df:a2:eb:8d:eb:dd:e1:14:5b:70:
52:89:38:78:b2:6d:a0:df:69:34:45:0c:d3:91:56:97:4a:4a:
9b:99:27:8f:3c:94:2b:01:8f:d8:38:2e:74:fa:35:6c:24:12:
3e:50:5b:0c:fe:69:c3:82:a0:0d:44:e3:2b:f9:6c:31:7c:d5:
73:1a:91:7c:92:ea:60:8f:fa:1e:20:6e:bd:22:0b:70:bb:29:
76:2c:74:29:9c:78:97:ca:9b:a5:40:4a:a8:0c:2a:7a:dc:e7:
ea:cd:ad:63:c3:ba:69:2d:dd:68:58:d4:ff:c6:96:50:13:9d:
59:43:51:af:27:ae:8d:02:46:64:c1:8e:1a:ed:97:1a:d7:f0:
bb:01:7b:01:83:3b:eb:20:24:19:20:ea:69:49:dd:f3:b5:a1:
7a:95:9a:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:24:09 2026 by rpki-client