Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F52A6372850511F1983D6B11CF1D38B0.roa
File: F52A6372850511F1983D6B11CF1D38B0.roa (raw, json)
Hash identifier: ewqRVuSBOPi1XKmhZgm4CMmyJ8Nl1kDm8nQ+5BFBkj8=
Subject key identifier: 99:F0:33:54:73:5E:3C:3D:77:E5:37:49:F2:0A:51:FA:51:5B:E9:B5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DA9A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F52A6372850511F1983D6B11CF1D38B0.roa
Signing time: Tue 21 Jul 2026 13:13:26 +0000
ROA not before: Tue 21 Jul 2026 13:13:22 +0000
ROA not after: Sun 16 Aug 2026 13:13:22 +0000
asID: 17497
IP address blocks: 154.193.8.0/21 maxlen: 24
154.193.8.0/24 maxlen: 24
154.193.9.0/24 maxlen: 24
154.193.10.0/24 maxlen: 24
154.193.11.0/24 maxlen: 24
154.193.12.0/24 maxlen: 24
154.193.13.0/24 maxlen: 24
154.193.14.0/24 maxlen: 24
154.193.15.0/24 maxlen: 24
154.222.148.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121498 (0x1da9a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 13:13:22 2026 GMT
Not After : Aug 16 13:13:22 2026 GMT
Subject: CN=6a5f7076-df4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:82:04:82:bb:1f:dc:28:b5:70:69:cd:a2:6b:
8d:80:96:b0:52:60:b5:9b:fc:b5:67:a5:11:3a:b3:
b4:e6:64:f0:d3:10:3f:fc:4f:89:50:60:2c:37:d2:
35:25:ce:8a:c5:a7:a7:9d:0a:6b:6c:36:c7:71:eb:
a8:1f:b6:fe:71:0d:aa:bf:06:74:f1:df:fb:b0:cf:
68:c5:b0:f8:29:fb:3d:34:3b:60:95:e1:20:81:65:
06:3c:7a:3f:aa:d6:e1:67:17:bd:a5:41:9e:56:01:
10:2c:88:75:54:0b:ef:78:36:53:ad:8b:13:27:99:
5c:67:a8:38:f1:7c:4a:e9:90:62:02:07:cd:ef:96:
f2:49:e2:27:e4:e7:5b:e4:cf:ff:d5:cc:23:b3:5f:
95:52:fc:f2:91:f5:8b:94:53:0c:6c:6d:2f:54:3f:
4f:04:60:de:ea:b1:6d:f5:30:68:07:cf:dd:b3:a9:
63:eb:db:36:aa:be:e9:8c:9f:2d:7f:72:e7:da:16:
41:19:67:4b:02:88:85:7b:36:47:b4:96:b1:bc:46:
c2:8e:de:af:b8:11:43:d1:3d:56:a6:3f:2b:e4:11:
83:53:01:dc:3a:3b:48:f5:80:d3:88:62:8c:8c:8b:
54:a8:f6:1a:a3:ad:46:39:ae:25:8e:e8:d9:bb:ef:
cd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:F0:33:54:73:5E:3C:3D:77:E5:37:49:F2:0A:51:FA:51:5B:E9:B5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F52A6372850511F1983D6B11CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.8.0/21
154.222.148.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:79:48:de:df:aa:cc:4b:42:f6:6c:76:bd:0c:82:15:dd:a4:
b4:a7:77:35:88:07:64:d1:41:e9:57:dc:aa:97:53:8b:e2:05:
66:53:60:e9:72:fe:44:06:c1:40:be:e0:dd:d4:e9:c4:87:fc:
41:e8:c2:81:be:1d:d2:bc:36:6a:b3:32:37:65:16:91:e5:ef:
3f:4e:41:f1:b7:98:a1:da:db:1a:32:a2:79:a3:08:2d:14:40:
c7:00:2c:27:bc:db:e5:44:c4:a0:40:fc:b2:26:ba:3e:e9:23:
26:35:eb:72:a1:d4:9d:53:24:f6:ef:6b:e6:3e:a4:a3:ca:08:
63:2f:59:53:30:5f:92:93:e1:38:1a:30:bf:ef:84:1f:13:14:
2b:59:0c:5c:5d:3c:57:cf:b0:61:05:d6:7e:70:39:d9:af:03:
3f:f1:08:79:b5:ef:0f:91:df:91:2e:ad:fa:6f:d1:ea:bf:e0:
92:a8:c1:e8:2d:2b:f3:44:d8:8c:ae:be:5f:d4:12:34:da:ec:
87:a8:f4:8d:3a:f4:f9:b3:0b:38:cd:90:f1:08:ab:25:62:c9:
d4:43:21:00:5d:8c:20:b0:f3:95:30:cc:f7:34:36:83:06:a8:
66:25:7c:01:d0:b3:ed:66:ba:24:4e:22:83:5e:62:21:41:44:
77:57:a1:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:12:20 2026 by rpki-client