Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FEF4019E842C11F1A5CABAE4CE1D38B0.roa
File: FEF4019E842C11F1A5CABAE4CE1D38B0.roa (raw, json)
Hash identifier: hKRfGEgAAOLa6xi616rkIh8QHBsLgAtP+8TCWdrstgM=
Subject key identifier: C8:9A:A8:D3:A4:21:9D:2E:A1:61:9B:1B:53:63:A7:CA:34:FE:2A:EE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DA09
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FEF4019E842C11F1A5CABAE4CE1D38B0.roa
Signing time: Mon 20 Jul 2026 11:20:22 +0000
ROA not before: Mon 20 Jul 2026 11:20:18 +0000
ROA not after: Sun 16 Aug 2026 11:20:18 +0000
asID: 154132
IP address blocks: 154.198.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 08:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121353 (0x1da09)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 20 11:20:18 2026 GMT
Not After : Aug 16 11:20:18 2026 GMT
Subject: CN=6a5e0476-c7b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:52:88:33:91:36:95:b3:12:20:ce:76:17:df:
82:22:35:d9:38:e7:98:de:34:13:65:ed:b7:26:e1:
0d:67:7a:cb:91:1e:00:4f:54:7d:3e:df:12:c3:f7:
04:16:c5:a7:fd:e2:6f:83:62:6d:ac:66:d7:49:96:
b3:45:72:a3:3e:e8:2e:ec:b5:85:11:e6:2e:de:82:
87:62:59:62:ee:e0:76:49:c7:37:1c:8e:20:20:41:
e7:8e:36:01:1b:00:7a:71:9f:fe:fe:f1:20:ce:7a:
4e:74:2e:d5:0a:79:08:3c:b0:bf:36:6e:db:32:e4:
6a:28:72:4d:04:e6:d0:75:49:06:ce:67:4e:c6:d5:
7b:79:3a:7e:66:32:a6:1e:6e:b2:be:7a:b1:8f:a8:
fd:73:1a:a2:e9:e5:c3:d6:8f:8e:dd:aa:a3:7a:8d:
4e:17:e8:8f:84:76:1d:37:7e:3e:7c:3b:c1:f8:e4:
80:9d:9c:93:17:75:c2:71:d1:29:ef:ee:17:bb:af:
44:66:53:12:ad:3a:5a:d5:ad:1b:44:65:d9:a0:ed:
71:a3:90:29:c6:56:ad:3c:f8:b5:26:39:e8:6b:17:
ed:66:71:39:38:3f:52:84:ed:9d:d8:98:75:d9:74:
77:52:28:ab:40:a2:27:55:d2:b1:08:72:6a:37:0c:
3b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:9A:A8:D3:A4:21:9D:2E:A1:61:9B:1B:53:63:A7:CA:34:FE:2A:EE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FEF4019E842C11F1A5CABAE4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.10.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:f4:b0:b1:ed:fe:ec:67:f0:2b:8d:66:aa:f2:d6:f8:c9:65:
4b:b4:41:d2:b6:96:81:55:ff:38:db:33:9a:62:6c:c4:cb:a9:
e0:a6:c7:12:bc:21:4b:95:98:e7:5c:a4:78:80:31:9e:92:88:
7c:69:d5:80:95:64:1f:e8:a3:e3:72:45:18:1a:6f:aa:5b:73:
70:f2:6e:90:80:9b:04:6e:76:3a:af:49:ef:83:12:12:ff:2c:
76:ae:bd:8d:3a:df:e5:4a:9b:3d:f7:ea:73:8e:31:6a:ec:9d:
8e:eb:39:79:32:99:1d:4f:2d:27:ed:4e:71:b4:54:41:26:bf:
36:38:40:08:21:34:6d:23:49:9b:0c:ad:33:80:c6:82:d2:6d:
18:ee:23:15:fb:a7:04:d8:bb:c1:f4:7e:22:aa:f6:8f:9f:33:
ad:63:ef:9a:fd:f8:3f:08:a6:19:8e:c2:8e:16:38:d0:c1:f6:
4b:a0:bc:64:76:04:9a:9b:cb:0a:1b:14:f0:90:e7:b6:cc:af:
25:e9:09:b3:28:ba:eb:e9:e6:f3:85:29:3d:50:f7:52:c0:8b:
81:5f:c6:91:16:e1:dc:93:00:77:a2:6e:db:fc:69:2c:e8:80:
ad:42:83:64:a7:61:51:1f:39:4d:91:e8:b9:58:4c:51:e1:38:
f7:b5:55:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:02:14 2026 by rpki-client