Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8134FEA841F11F1AAD3B818CF1D38B0.roa
File: F8134FEA841F11F1AAD3B818CF1D38B0.roa (raw, json)
Hash identifier: nGfEbb/YvNHIM57LeI6gZT2dAe3ah20nLfeKORQhXn8=
Subject key identifier: EA:E0:65:38:34:C4:5B:5A:1E:DE:14:3A:61:C6:3D:C6:19:90:72:AE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D9E6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8134FEA841F11F1AAD3B818CF1D38B0.roa
Signing time: Mon 20 Jul 2026 09:47:07 +0000
ROA not before: Mon 20 Jul 2026 09:47:03 +0000
ROA not after: Thu 27 Aug 2026 09:47:03 +0000
asID: 154177
IP address blocks: 154.93.104.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 08:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121318 (0x1d9e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 20 09:47:03 2026 GMT
Not After : Aug 27 09:47:03 2026 GMT
Subject: CN=6a5dee9b-7dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:6b:0e:f2:be:ae:9c:e5:18:fd:57:9b:c3:a4:
69:f4:ff:03:bc:76:30:75:16:38:2e:9b:86:04:7a:
2a:5e:1a:70:8a:31:d1:ae:1a:46:13:fc:10:bb:57:
78:9a:6a:46:7e:5d:71:f8:42:1f:2c:a2:ec:76:f4:
cf:80:b0:87:1b:49:65:3f:fc:89:b1:b3:e5:fb:93:
2b:55:d1:b0:0a:d9:b6:00:be:ec:84:d6:76:3f:65:
be:cb:27:d7:b9:d5:13:7d:7f:d4:3d:9c:a7:ee:42:
1d:8c:34:4b:04:12:9b:ff:00:ee:32:a1:bb:35:5b:
86:3e:df:f5:be:57:91:50:14:7d:21:e5:c0:20:2a:
97:ba:2f:6f:8d:65:15:d7:2c:72:59:c0:20:17:32:
f5:ed:56:d2:3f:60:ad:58:a1:fa:cf:1f:10:98:1c:
db:f0:91:27:ed:09:4d:57:38:d0:bc:48:81:a7:a5:
79:c8:3b:07:0c:3c:f1:00:e0:40:cc:72:47:41:e0:
ae:c7:76:41:f2:a3:5d:12:f2:ee:ce:f8:ec:86:32:
cd:57:5b:04:d2:63:e3:c5:f5:e3:9d:d0:95:92:b9:
f1:7f:4c:8e:df:2f:c1:c6:d1:d0:9f:57:cb:b3:f7:
3b:92:b0:dc:ec:8c:f1:60:f1:08:9d:a7:08:2b:80:
61:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E0:65:38:34:C4:5B:5A:1E:DE:14:3A:61:C6:3D:C6:19:90:72:AE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8134FEA841F11F1AAD3B818CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.104.0/23
Signature Algorithm: sha256WithRSAEncryption
b9:4e:65:bf:df:e9:b7:7e:cc:f8:cb:e0:43:f0:bf:23:d5:73:
df:38:c9:dd:73:ea:b9:ed:38:9e:7f:ec:1d:90:1e:68:8e:4d:
49:66:c6:3e:a9:0b:b1:da:73:b6:b0:93:fb:48:da:34:47:3c:
09:57:47:42:a9:55:94:a1:05:8c:02:e6:bc:75:45:f4:6c:6f:
f5:dd:18:78:e2:0f:9b:f8:cd:0a:6b:1c:78:ba:37:08:a0:af:
27:ee:d2:e7:8c:b4:0f:3f:8a:41:1e:0e:18:bd:9c:18:02:8f:
fb:80:da:ed:3b:c7:16:a1:a9:59:7e:b7:ff:e3:41:9a:c9:18:
a9:f0:a8:dc:43:6f:11:44:76:5f:2c:e5:32:10:55:d7:38:e3:
4c:de:47:38:9c:3c:11:d2:c1:ff:9a:3c:08:93:9b:9a:e7:f6:
24:c7:19:d4:43:bf:7b:06:d0:4e:79:47:60:6c:a7:40:a2:aa:
a7:8e:1e:55:85:3f:ae:5a:a2:14:25:a3:48:43:25:97:cf:21:
24:74:f4:92:47:3d:10:85:32:be:91:64:e9:32:1a:3c:db:8e:
b5:e1:cc:88:0a:34:eb:d6:1e:82:47:73:6a:cb:d9:76:9a:cd:
dc:dc:8e:e1:f0:34:46:19:c9:51:59:a5:95:ae:e6:3c:2e:b1:
e6:a0:f8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:34:54 2026 by rpki-client