Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FABA2F84757411F1B302F6D7CE1D38B0.roa
File: FABA2F84757411F1B302F6D7CE1D38B0.roa (raw, json)
Hash identifier: HZEZecIE/46sZlruFuJH8eFo2Fg27GN9EsrWRxmz5IA=
Subject key identifier: B0:6C:32:F8:D2:2C:56:67:93:25:31:C7:65:55:03:99:BE:00:93:8A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D656
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FABA2F84757411F1B302F6D7CE1D38B0.roa
Signing time: Wed 01 Jul 2026 17:47:51 +0000
ROA not before: Wed 01 Jul 2026 17:47:46 +0000
ROA not after: Fri 18 Dec 2026 17:47:46 +0000
asID: 40115
IP address blocks: 154.205.192.0/24 maxlen: 24
154.205.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120406 (0x1d656)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 1 17:47:46 2026 GMT
Not After : Dec 18 17:47:46 2026 GMT
Subject: CN=6a4552c7-fd30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:be:87:e1:c9:98:d4:bf:8d:d0:89:eb:d2:37:
ff:07:83:dd:6a:2e:32:9c:e4:5b:6d:75:2d:e5:3c:
ba:06:5a:ce:54:53:11:c2:86:75:46:ab:d4:8d:00:
6a:ec:92:ef:b8:35:41:e5:59:6f:d6:b2:cc:0a:1c:
76:90:0e:34:d6:8a:88:a9:46:51:be:a6:4c:ec:52:
b9:96:bb:fa:34:66:8c:7f:a9:59:16:65:9e:0f:9f:
78:98:f5:55:d9:c8:3b:d6:a3:b3:be:1d:77:72:35:
67:32:a2:67:db:48:0d:1c:cb:01:c8:8f:d0:ca:e6:
03:fc:28:d0:25:a8:e4:49:52:6e:c0:d7:31:73:3b:
07:04:af:14:cb:a6:6c:9d:64:53:3a:03:8f:b4:b0:
ff:f9:0d:6e:d6:dc:7e:b8:50:b5:f4:1f:0f:1a:2a:
9e:a6:59:05:a8:b4:63:91:cc:88:10:3f:aa:8c:c1:
2c:2c:94:8e:2b:a7:2b:45:41:d6:0a:4b:3c:88:46:
f4:bb:0a:e9:8c:f3:01:9b:71:9d:78:2e:44:f4:37:
cb:75:00:1f:b2:a3:5b:5e:9b:7f:c3:e8:12:5d:be:
ca:8a:b7:4b:42:be:8c:a2:0e:cd:8b:7d:b9:a9:c6:
ce:5d:17:be:ab:c1:2e:80:17:c6:ef:d0:92:c9:6d:
11:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:6C:32:F8:D2:2C:56:67:93:25:31:C7:65:55:03:99:BE:00:93:8A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FABA2F84757411F1B302F6D7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.192.0/23
Signature Algorithm: sha256WithRSAEncryption
d8:76:89:cb:71:1f:46:15:8c:80:5c:82:75:b7:46:a6:b6:0d:
2e:c2:9a:28:84:90:9e:10:6b:a7:1a:fe:b2:ad:c7:92:0b:fe:
d1:f0:fb:7c:5c:3c:ce:f4:6c:59:72:a8:d0:55:a8:1e:79:3d:
73:87:8a:0f:da:25:e5:d2:87:77:2e:15:30:85:f1:fb:4e:cf:
5a:f4:23:9e:94:2a:b6:df:24:c2:37:bb:d1:ee:ce:09:05:07:
e3:74:b3:b8:b9:25:46:30:d5:7b:cb:7f:e0:e5:0b:4d:bd:fd:
ec:7c:1f:34:cb:8f:79:a9:89:0c:03:a9:01:3c:45:a6:04:f9:
f6:62:e0:43:4b:83:a1:0e:6a:df:49:de:6a:c6:f6:06:21:89:
40:69:d6:f4:0d:36:0a:a7:ec:d2:d1:0f:6f:fd:6a:a8:9f:15:
cd:c0:5a:17:54:a8:b9:75:6b:ce:03:54:1f:0a:77:f1:7e:0f:
b8:00:90:a0:15:9f:2a:94:e4:46:d3:ef:52:64:0c:c1:1e:e4:
9a:18:d0:46:7c:2d:5c:14:8f:64:6e:57:91:ae:cb:b9:9b:b7:
9b:68:9f:b3:09:24:6b:45:3c:5e:c8:de:49:90:ab:a8:25:28:
d5:ca:cd:80:b6:16:e1:bb:2f:f9:27:20:d7:a4:05:d4:5e:32:
ce:b6:4f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:50:56 2026 by rpki-client