Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F35E28767D4E11F1A31B4DCCCE1D38B0.roa
File: F35E28767D4E11F1A31B4DCCCE1D38B0.roa (raw, json)
Hash identifier: Pa8wlB690ScqWZRdmZ0AtktNK5USIe3to1yhoiC/SgQ=
Subject key identifier: CE:7B:D4:1C:E8:D6:05:64:E3:84:4B:A3:59:CD:DC:C0:22:A1:2D:07
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D848
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F35E28767D4E11F1A31B4DCCCE1D38B0.roa
Signing time: Sat 11 Jul 2026 17:35:47 +0000
ROA not before: Sat 11 Jul 2026 17:35:43 +0000
ROA not after: Tue 18 Aug 2026 17:35:43 +0000
asID: 395886
IP address blocks: 154.193.192.0/18 maxlen: 24
154.193.192.0/20 maxlen: 24
154.193.208.0/21 maxlen: 24
154.193.216.0/21 maxlen: 24
154.193.224.0/20 maxlen: 24
154.193.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 08:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120904 (0x1d848)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 11 17:35:43 2026 GMT
Not After : Aug 18 17:35:43 2026 GMT
Subject: CN=6a527ef3-7e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:c4:ed:bf:10:b7:39:fe:0c:a3:dd:38:8c:8b:
c6:f3:5b:72:88:2c:4e:b7:46:57:c7:fb:0c:5d:ec:
71:27:67:8d:30:84:85:a5:96:d1:4e:32:a6:7b:65:
d8:ff:aa:dc:42:3e:e1:3c:58:34:e0:e8:bc:64:26:
f4:80:77:d6:1b:18:66:96:06:61:f6:8b:69:a7:9e:
90:7d:d6:6a:6c:42:3b:25:b9:88:be:e5:3f:65:47:
7f:c3:ec:1d:85:41:15:d0:51:20:8f:cd:bc:3f:a9:
99:83:51:5a:06:fb:59:16:ce:b2:1a:f9:51:55:93:
a7:9c:82:ef:46:91:11:18:8e:87:d5:67:11:eb:65:
7e:70:2f:0a:bc:6b:b5:e0:94:11:96:2b:11:05:4f:
02:70:1a:ec:ec:c0:99:ad:ef:8d:40:3b:2d:ee:9f:
ce:79:b6:15:d7:ed:b1:e5:d1:63:38:36:35:09:38:
d9:25:17:fb:b8:9a:11:c5:86:ca:b0:c1:b3:b7:ff:
6f:c6:b1:87:07:5f:92:16:82:81:e9:27:5c:84:38:
ee:27:99:62:b7:73:2a:8d:8e:f4:76:97:76:7f:65:
59:86:7c:58:71:43:92:eb:ed:df:34:af:39:de:3b:
67:09:de:70:ee:05:17:b7:45:6e:e6:cd:0b:ed:92:
a2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:7B:D4:1C:E8:D6:05:64:E3:84:4B:A3:59:CD:DC:C0:22:A1:2D:07
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F35E28767D4E11F1A31B4DCCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.192.0/18
Signature Algorithm: sha256WithRSAEncryption
27:37:73:56:24:31:d0:08:5e:28:db:98:30:3a:ae:70:ee:6d:
ba:ce:77:53:8b:c3:21:41:aa:3a:f4:4c:3a:91:c3:73:ee:20:
7c:28:60:9b:68:dd:94:4d:a1:89:95:ac:c5:9b:cd:9d:4f:0d:
21:b1:ba:2a:e2:a3:c8:c5:37:52:8f:3a:ac:4f:c5:15:2f:f2:
07:c7:0e:eb:89:a0:fb:0f:89:7a:23:5c:8b:69:b2:7a:69:0b:
24:f3:d2:2d:3d:c7:97:11:15:0f:ca:d5:25:f2:0b:30:87:a7:
be:dd:2c:c2:a1:53:f0:bf:68:d0:59:f7:62:63:72:a8:df:af:
03:e2:b8:ea:74:d1:3e:e2:cd:b4:87:25:68:2d:d1:22:6f:d6:
6b:72:fe:a3:85:f7:36:16:8d:a7:3e:52:31:2c:1b:96:34:f3:
8c:68:b0:1f:62:22:49:2a:54:af:83:3d:75:b6:7d:31:9e:d8:
19:1e:7a:ed:c5:d3:27:1a:c8:64:f7:43:b8:36:f7:02:b3:56:
82:a3:2f:87:62:63:b0:49:6f:74:31:79:e1:f6:43:f8:ef:e9:
00:fc:a2:8b:58:81:5e:ad:53:69:07:bb:42:29:dc:42:24:51:
06:f8:b0:fd:d9:45:f1:72:55:5a:ea:be:1d:3a:48:3a:42:c6:
ea:86:e9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:41:00 2026 by rpki-client