Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FD5DA38084DB11F1A9659C16CF1D38B0.roa
File: FD5DA38084DB11F1A9659C16CF1D38B0.roa (raw, json)
Hash identifier: S+Dgg+7WnYehmEcF2EJP/Lb6phe3oPFl1vNxWfQHxVU=
Subject key identifier: 32:FE:18:07:36:C1:C4:C7:33:6A:AB:3D:4A:61:E3:F0:57:2B:9B:12
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DA56
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FD5DA38084DB11F1A9659C16CF1D38B0.roa
Signing time: Tue 21 Jul 2026 08:13:01 +0000
ROA not before: Tue 21 Jul 2026 08:12:57 +0000
ROA not after: Thu 27 Aug 2026 08:12:57 +0000
asID: 154132
IP address blocks: 154.94.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121430 (0x1da56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 08:12:57 2026 GMT
Not After : Aug 27 08:12:57 2026 GMT
Subject: CN=6a5f2a0d-25e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b6:fc:12:a0:65:ac:86:6d:27:a9:1b:bd:62:
c0:99:23:65:a7:68:ee:44:0f:b2:5e:54:cf:74:71:
0f:22:40:a7:86:69:12:6e:53:97:ed:3e:90:3d:60:
ad:a3:a5:49:09:5b:6f:1a:7d:18:a9:2b:fa:db:f4:
4e:19:9e:12:0a:c6:f0:1e:7d:17:58:f4:d3:a2:0f:
45:93:69:fe:82:35:aa:e1:80:c1:c1:64:67:3a:a4:
a2:7b:47:9c:7d:6f:83:67:d9:a0:30:ea:6d:3f:27:
3d:d5:3d:68:de:38:f1:be:71:5b:44:66:68:ef:8a:
c3:60:05:c5:9d:b4:ac:be:9e:cf:9c:78:6c:da:8d:
ba:69:7f:5d:94:3d:0e:f3:69:b9:1c:fc:98:85:4c:
2d:42:b0:a2:e6:a8:5f:cf:43:6e:f2:d2:3f:33:ac:
12:5f:59:50:e3:5a:e8:c9:6f:95:02:d6:38:03:eb:
9e:d4:63:36:66:1c:d1:93:fe:1e:5d:dd:32:d2:b7:
ee:25:a1:5f:a0:46:48:e6:09:a1:c6:17:e9:cb:7d:
28:e6:2b:82:c5:9a:ee:cc:6e:4a:cd:36:d4:18:7e:
5c:a0:17:84:7b:74:5f:2b:fb:bf:94:99:47:8e:f0:
fc:74:06:40:67:a4:18:e0:95:c7:82:30:3f:09:57:
12:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:FE:18:07:36:C1:C4:C7:33:6A:AB:3D:4A:61:E3:F0:57:2B:9B:12
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FD5DA38084DB11F1A9659C16CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.60.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:17:ef:89:f8:84:6e:11:b6:44:fa:8a:5c:81:56:4b:2a:f0:
6d:47:98:40:15:38:79:b9:ba:e5:51:04:6d:4f:23:66:46:85:
60:b4:bb:d4:44:dd:99:39:e2:f5:8b:8e:a0:2b:c6:8f:5b:75:
61:de:cb:fe:15:04:3e:41:2e:7c:2c:54:8f:dd:b9:98:d6:5f:
81:e1:cb:76:6f:af:b1:88:f0:26:2a:f8:49:fd:4a:5f:53:07:
0b:73:7b:49:12:f2:ef:7c:2e:92:8f:8a:20:70:93:9b:cd:58:
18:77:9c:0a:39:85:9f:9a:99:37:b4:ad:78:e0:17:f8:3f:9e:
18:14:c3:23:d5:6e:aa:c8:6c:9f:29:08:38:1b:15:bd:8e:ba:
e6:bd:4f:e9:80:0b:65:5c:00:6f:2d:63:eb:d1:98:97:7d:94:
0b:ef:cc:89:cc:89:5f:3d:c4:b3:b9:dc:d4:a2:6d:3a:4c:19:
6c:65:e3:58:74:d8:6a:4d:d1:cf:b3:9d:5b:5e:bb:4f:8a:16:
b7:e3:0a:1a:b9:6d:f4:3d:bf:e5:df:ba:d9:16:c7:e7:62:06:
5f:cd:16:ec:c7:f4:58:40:07:46:48:be:44:f5:9e:a6:60:55:
a9:06:a2:48:4d:a0:41:b4:e2:d2:dc:68:cb:2b:5f:87:43:77:
a9:fc:39:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:48:51 2026 by rpki-client