Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6DFF7AC844411F19E20C0F5CE1D38B0.roa
File: F6DFF7AC844411F19E20C0F5CE1D38B0.roa (raw, json)
Hash identifier: p3z5tTe/OBxwKv+k/fwhAzNWjpEtINIF4WqglQhkZoM=
Subject key identifier: 79:49:FD:28:0C:A5:20:F5:00:BE:C8:CA:BD:B8:77:A2:DF:EB:D4:06
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DA34
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6DFF7AC844411F19E20C0F5CE1D38B0.roa
Signing time: Mon 20 Jul 2026 14:11:56 +0000
ROA not before: Mon 20 Jul 2026 14:11:52 +0000
ROA not after: Thu 27 Aug 2026 14:11:52 +0000
asID: 63139
IP address blocks: 154.94.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 08:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121396 (0x1da34)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 20 14:11:52 2026 GMT
Not After : Aug 27 14:11:52 2026 GMT
Subject: CN=6a5e2cac-b045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8a:1c:59:92:c3:65:da:fa:28:f0:09:20:e4:
42:57:79:61:f9:c0:26:33:bc:66:f4:f2:f8:85:1e:
c4:f0:37:13:dc:e3:c6:55:5f:93:ff:5d:c4:77:0e:
3a:19:d9:98:c3:c2:69:c7:bd:bc:4f:e3:f8:8e:3d:
ca:f4:7f:32:07:31:8b:fe:69:f3:a4:85:3b:37:94:
54:76:a5:ef:d8:f5:3a:37:20:a8:95:32:fb:52:5c:
3b:32:b7:3c:fc:9e:79:ba:9d:1a:d5:b1:3a:a3:1e:
a5:3b:5f:6b:51:c0:40:42:d5:f6:98:3f:fc:ab:2d:
6d:e3:21:b9:b7:a3:dc:cc:9c:c6:df:e1:80:80:54:
10:ce:e8:cb:e0:fb:33:10:6c:63:66:b4:2c:b5:a1:
49:be:73:c5:fb:23:36:5a:78:f9:8c:05:5a:b0:4c:
65:33:e9:66:49:ff:e1:e0:9b:c4:0f:e7:f7:a8:7b:
43:fa:85:33:19:17:d2:25:c0:c5:2f:67:49:ac:2b:
ad:72:6a:6e:27:a2:2f:90:d5:41:4f:bd:99:f9:24:
58:65:84:85:45:83:91:cb:26:55:50:06:d4:c5:6e:
75:1c:b9:22:fd:3d:c5:9e:1a:ab:aa:6d:3c:4b:11:
6c:8c:e1:81:32:b9:1f:11:e3:45:19:16:14:51:4b:
68:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:49:FD:28:0C:A5:20:F5:00:BE:C8:CA:BD:B8:77:A2:DF:EB:D4:06
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F6DFF7AC844411F19E20C0F5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.90.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:6e:ac:ed:ed:55:e3:d1:25:0f:64:22:73:d0:0a:b3:6e:d4:
b2:0e:35:08:1c:37:f8:f9:82:e3:1e:09:3a:62:6d:4b:f2:7b:
b3:fc:bb:a0:46:25:d1:10:e2:71:d4:6c:61:ad:22:9d:24:94:
78:ff:24:9c:21:f6:27:a7:c7:00:c1:0f:89:2f:0a:67:93:0e:
e8:9d:bd:4c:83:79:88:27:81:26:a4:e4:1d:5d:66:da:32:32:
84:7e:cc:c6:86:73:90:f1:92:be:65:12:91:1f:4e:c0:cb:5c:
e2:ec:9d:cb:63:37:3a:6d:dc:df:6e:c6:f8:7a:0f:b8:c1:c7:
3f:82:fa:77:3a:dd:74:1e:19:3d:08:f3:16:e2:b7:92:c5:c3:
b6:4f:e2:77:8c:5c:bf:11:a9:21:76:ad:c9:91:af:bd:e8:f8:
03:ad:f8:4f:09:42:98:6a:81:25:0c:1a:a8:22:b1:19:c5:e8:
d9:21:db:42:16:56:72:03:98:a9:15:75:d9:b6:be:f5:71:55:
2f:1d:fb:18:23:e1:59:50:82:60:8d:e2:3a:00:f2:a7:54:78:
39:dc:a9:d7:c6:26:31:c7:b3:c6:e1:0a:6a:fc:24:2a:e2:c4:
5c:df:a9:4f:d4:2a:32:07:ec:eb:76:62:a3:10:a2:d7:79:56:
d1:e1:4e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:48:14 2026 by rpki-client