Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F37B1BC682B611F1854674FECE1D38B0.roa
File: F37B1BC682B611F1854674FECE1D38B0.roa (raw, json)
Hash identifier: guZbY4pwJ81pNJRs1zDuE4vWFTLztUO96UxFdMDLgUI=
Subject key identifier: 58:E7:27:08:E1:BE:E6:19:B5:23:A0:F0:3A:AE:95:38:41:5A:91:47
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D984
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F37B1BC682B611F1854674FECE1D38B0.roa
Signing time: Sat 18 Jul 2026 14:42:51 +0000
ROA not before: Sat 18 Jul 2026 14:42:47 +0000
ROA not after: Mon 24 Aug 2026 14:42:47 +0000
asID: 200758
IP address blocks: 154.83.186.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121220 (0x1d984)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 18 14:42:47 2026 GMT
Not After : Aug 24 14:42:47 2026 GMT
Subject: CN=6a5b90eb-3ded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a8:61:5c:3f:62:1e:a9:7d:b5:bd:4b:35:ed:
02:f5:40:c7:6d:ab:d4:0b:0f:03:40:bc:c3:7f:12:
c3:d1:01:a6:ac:13:07:e0:0b:97:f6:7a:5f:1c:10:
60:ea:d3:ee:5b:43:7c:e9:37:f7:41:23:fd:0c:d2:
d0:f2:fd:a0:71:4f:6d:d5:35:0e:57:d5:7e:d4:ba:
b9:93:64:87:a5:f5:89:6e:ae:b1:8c:a5:cb:13:1f:
c3:8d:6b:3a:40:0b:36:d5:6c:7c:9d:03:7d:d3:00:
e8:8d:a4:5b:c5:c3:25:bb:5c:cb:27:3d:9f:a4:a2:
11:90:30:e2:c2:c8:af:b2:42:50:e8:61:9a:e5:74:
c9:6d:5b:c1:26:5e:3b:8b:be:80:a0:35:b8:8e:28:
ed:52:34:85:5c:c4:b0:43:57:5f:9c:2a:f5:68:0e:
22:d6:8d:20:3f:1e:1d:14:c9:44:8b:66:8a:44:2a:
25:f6:7f:8f:56:dd:71:a9:33:49:08:29:15:dd:7d:
45:b1:70:fb:a3:80:63:ea:b2:03:96:1d:ac:0c:91:
77:7c:06:3c:f3:73:c0:c6:9f:02:43:2b:c6:c2:8b:
1c:68:31:89:f5:e9:f1:86:bd:6b:70:23:b1:79:65:
3c:70:28:c2:38:61:6c:b6:1c:a0:cb:93:2a:b3:79:
ab:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:E7:27:08:E1:BE:E6:19:B5:23:A0:F0:3A:AE:95:38:41:5A:91:47
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F37B1BC682B611F1854674FECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.186.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:eb:ec:64:7b:1f:b1:da:3a:19:ae:91:cf:49:68:16:ce:52:
66:32:7c:70:ea:b9:f3:d8:e9:ff:35:90:fd:45:fb:d9:47:89:
a8:6f:9f:ec:eb:44:a8:9f:8b:39:c3:39:a3:90:d1:e0:07:35:
96:69:5a:a3:d4:ef:c6:af:49:86:a3:f8:0f:8b:d5:00:b3:f6:
92:d1:45:b5:73:ee:4e:7a:04:58:93:7f:42:23:39:8c:29:a1:
b5:f9:1f:da:e9:5b:0e:9a:9c:cb:e0:c1:f5:3f:bd:f3:16:36:
3c:92:f6:4a:4c:e3:d2:1b:8c:31:2e:d4:da:03:20:e7:57:a2:
aa:3a:33:e7:18:48:17:97:f6:13:a5:22:59:06:a1:16:eb:f2:
3a:af:d8:d8:07:cb:f3:a4:fd:d7:27:81:06:57:9a:8f:b0:b0:
31:30:55:80:5e:bb:a9:b1:c9:1a:30:d3:e2:22:66:76:17:e8:
26:c2:e4:5e:8d:89:ef:0f:09:e1:a9:c2:a6:ef:03:3a:2f:97:
38:85:a8:0d:cc:e6:a4:31:4e:df:8c:d3:69:45:3f:fe:9b:10:
cb:19:eb:43:eb:d1:f0:a4:bc:f0:07:48:6f:c3:86:03:be:dc:
0f:1d:38:97:b8:78:a4:39:27:ae:d4:07:93:98:4e:e0:b7:f0:
51:be:3c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:13:01 2026 by rpki-client