Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7742D9A842711F1B5D193C7CE1D38B0.roa
File: F7742D9A842711F1B5D193C7CE1D38B0.roa (raw, json)
Hash identifier: j42ZEEK9jQ12iSnDKXMo98xFv4ihcB2CXCsQJ9WWl1M=
Subject key identifier: CC:33:20:1B:21:69:B2:27:99:C2:6C:1E:A7:1B:1D:1B:A4:6B:52:E8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D9F2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7742D9A842711F1B5D193C7CE1D38B0.roa
Signing time: Mon 20 Jul 2026 10:44:22 +0000
ROA not before: Mon 20 Jul 2026 10:44:18 +0000
ROA not after: Thu 27 Aug 2026 10:44:18 +0000
asID: 6079
IP address blocks: 154.202.138.0/23 maxlen: 24
154.202.140.0/22 maxlen: 24
154.207.0.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 08:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121330 (0x1d9f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 20 10:44:18 2026 GMT
Not After : Aug 27 10:44:18 2026 GMT
Subject: CN=6a5dfc06-2f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:95:07:30:c0:97:7e:a7:07:7d:09:c6:27:72:
5d:2a:3b:c3:96:a2:f4:4a:d4:64:ff:07:9c:a9:ec:
49:9e:03:bf:c6:be:4a:da:f9:ce:05:97:63:8f:bf:
c8:1c:64:2c:81:d8:58:74:22:02:1b:ed:76:80:f5:
24:7f:49:6c:d4:4d:3f:1b:fa:0a:e6:a3:c1:47:64:
e6:6c:7c:01:89:76:f2:d1:2d:60:12:1f:4c:e4:25:
87:a0:fb:6c:18:15:be:30:aa:04:b5:41:34:ce:db:
90:e2:e0:5f:89:38:2b:5b:60:c8:f1:d3:55:75:34:
d6:0b:c6:9d:9f:d3:d1:51:41:25:75:f1:b9:74:bf:
2d:8e:bb:1c:8b:76:37:f9:99:78:b6:78:e8:cf:65:
f4:fd:c7:c6:24:24:4f:00:38:c1:5a:5f:b6:5f:ca:
eb:44:16:a8:15:bf:7e:17:00:dd:cf:62:99:04:b2:
c6:3c:97:4c:bc:91:c0:44:42:0f:7d:06:d1:4c:22:
ae:75:79:9e:3a:0f:18:98:e0:f8:36:69:c5:18:87:
fd:5a:76:2c:3b:a1:90:c3:7c:f3:99:cf:5a:ff:b6:
a0:85:7b:d3:bf:20:08:74:cf:e1:95:e1:99:c8:9b:
58:5d:8a:bb:78:31:e2:d1:8c:a6:e4:71:9d:a6:ae:
55:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:33:20:1B:21:69:B2:27:99:C2:6C:1E:A7:1B:1D:1B:A4:6B:52:E8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7742D9A842711F1B5D193C7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.138.0-154.202.143.255
154.207.0.0/19
Signature Algorithm: sha256WithRSAEncryption
8f:32:6b:9a:fe:27:1d:6c:4f:a7:79:6e:85:00:54:b0:5b:87:
5e:32:bf:63:19:33:8e:87:c4:d9:6b:38:d5:06:6f:c2:c1:32:
99:d8:d7:a3:f6:6d:ab:43:cb:63:3b:d8:48:84:e3:61:5e:fc:
46:21:d6:08:05:f0:19:72:b5:1c:39:6b:19:21:6d:3e:f1:6e:
64:07:2d:ba:10:fe:fe:98:a0:9d:c9:04:57:78:78:75:a1:d5:
49:6f:ea:6c:9e:43:6f:29:3c:8f:ab:94:8d:30:60:f8:45:a2:
65:29:fe:ac:9e:0c:f5:4a:21:4f:07:28:a7:48:88:8f:86:66:
d6:ef:90:30:b8:9c:6a:c7:be:2c:f0:f0:0f:63:94:85:1e:8b:
ed:50:aa:d1:db:ce:0d:75:38:e8:7b:53:40:03:e7:13:26:57:
1c:ee:62:86:9d:12:2f:87:ec:76:fc:25:29:43:ee:36:16:61:
22:05:07:ae:68:e1:7d:8e:c1:a8:a0:99:47:48:2f:4e:81:66:
3d:49:a3:23:b7:0a:35:90:2a:bb:2d:25:66:21:7a:31:84:6b:
3d:03:18:fc:5c:9e:8f:6e:08:2c:7f:53:99:2f:4c:21:4c:c1:
b3:d9:16:36:53:66:98:09:31:77:97:c8:74:26:c9:63:eb:2e:
cd:ac:21:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:11:23 2026 by rpki-client