Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3421270739A11F1A0CBAC1ECF1D38B0.roa
File: F3421270739A11F1A0CBAC1ECF1D38B0.roa (raw, json)
Hash identifier: kDrZsgK+rs4YRSBB3yoLC7JFBlPd9O1K+P9QiPo1JxU=
Subject key identifier: 95:F9:66:C1:6D:96:5F:B0:EF:AC:5B:0E:49:60:FC:94:19:7D:F0:13
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D5F4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3421270739A11F1A0CBAC1ECF1D38B0.roa
Signing time: Mon 29 Jun 2026 09:14:37 +0000
ROA not before: Mon 29 Jun 2026 09:14:32 +0000
ROA not after: Thu 30 Jul 2026 09:14:32 +0000
asID: 32043
IP address blocks: 154.195.8.0/24 maxlen: 24
154.195.9.0/24 maxlen: 24
154.195.10.0/24 maxlen: 24
154.195.11.0/24 maxlen: 24
154.195.12.0/24 maxlen: 24
154.195.13.0/24 maxlen: 24
154.195.14.0/23 maxlen: 24
154.200.8.0/22 maxlen: 24
154.200.12.0/22 maxlen: 24
154.200.16.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120308 (0x1d5f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 29 09:14:32 2026 GMT
Not After : Jul 30 09:14:32 2026 GMT
Subject: CN=6a42377d-aa0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:22:1f:de:20:e8:91:a1:69:2f:cc:51:a7:1a:
6c:0e:dc:00:9a:e1:0d:f2:bc:2c:ac:68:b4:59:ea:
06:2c:14:1a:c0:b5:cd:4c:7f:59:69:12:1d:d6:1f:
4f:20:56:cb:c6:b3:0e:96:13:c8:b2:76:92:66:28:
da:6a:58:d6:5d:6a:ed:98:60:fd:8c:ac:5c:02:8d:
91:19:93:31:42:57:88:a9:ef:e6:75:80:a0:64:89:
db:f9:1f:54:97:10:38:e3:0b:e8:51:5c:b9:2d:4b:
19:b5:f9:eb:fa:30:90:76:f4:8e:98:59:2b:56:25:
74:1f:6e:91:f0:25:ed:14:cd:ab:d0:63:90:15:17:
05:74:25:e5:2c:e7:58:7e:1e:80:f8:95:16:67:d2:
37:c0:ca:d9:9f:dd:df:0f:fe:0e:5a:7e:41:07:ec:
98:1c:71:5f:53:0f:fb:a5:ff:c2:40:e3:ff:bf:59:
7c:51:33:9d:fc:19:c7:82:64:5c:5b:94:26:0a:a6:
88:41:a5:fd:2b:e9:c5:a6:c0:72:a8:e6:01:dc:c1:
eb:e6:96:e9:e3:03:8e:c5:b8:9d:16:e0:78:c2:9b:
07:41:83:fe:f6:a7:37:79:2c:4e:a2:e7:eb:25:8a:
f7:18:0f:36:e9:6a:82:96:e7:72:54:f3:43:36:d9:
3b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F9:66:C1:6D:96:5F:B0:EF:AC:5B:0E:49:60:FC:94:19:7D:F0:13
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F3421270739A11F1A0CBAC1ECF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.8.0/21
154.200.8.0-154.200.17.255
Signature Algorithm: sha256WithRSAEncryption
d0:71:e7:f3:91:e0:c1:01:32:ef:c8:38:13:88:64:f9:44:39:
2f:93:5e:7d:26:d4:f2:bb:ab:99:45:89:e0:4d:0b:27:f0:94:
42:4b:23:34:a1:19:c8:d2:10:f6:38:2d:db:08:84:64:f0:64:
18:f3:c1:28:6b:86:65:1d:fd:45:2c:7f:4a:54:d3:86:fd:99:
12:e3:3b:21:4d:00:09:a6:e1:a0:a9:f8:54:55:ff:58:97:08:
4a:43:a6:1f:f3:87:01:a3:2c:6c:18:cf:bc:41:e5:60:34:74:
3a:f1:8f:f2:8f:fe:ef:6f:bd:84:e4:47:20:65:1b:be:30:6e:
5e:64:50:cf:60:a6:a9:f3:3f:64:b6:6b:c2:9f:aa:e3:0c:71:
89:0d:20:84:92:aa:87:d7:06:d3:45:68:29:a1:19:d5:f2:43:
24:64:6f:cf:9c:bb:27:56:1e:af:34:72:31:ca:49:f8:a4:d6:
40:bf:8d:65:e4:d8:a3:1c:32:62:ad:3b:dc:0c:8c:e4:91:01:
29:f7:66:f0:f5:cc:c4:8b:4d:90:e4:b3:7d:60:18:b1:32:22:
93:70:48:d7:c6:4d:bd:df:c2:be:44:ec:6e:74:d1:c4:37:23:
9d:d3:4a:8a:6a:21:5d:59:bb:df:fc:a8:4d:eb:20:33:e5:67:
01:60:c3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:39:01 2026 by rpki-client