Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0ACB0D8E7D9B11F1B8AF0519CF1D38B0.roa
File: 0ACB0D8E7D9B11F1B8AF0519CF1D38B0.roa (raw, json)
Hash identifier: mE7jOGeA9qdO4UXhH71waRrs48VY+tgy/2LaZC6ydEI=
Subject key identifier: 66:0F:3F:07:F2:EC:40:6E:65:F4:B8:A0:87:D3:D0:99:00:A5:FB:07
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D875
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0ACB0D8E7D9B11F1B8AF0519CF1D38B0.roa
Signing time: Sun 12 Jul 2026 02:40:28 +0000
ROA not before: Sun 12 Jul 2026 02:40:24 +0000
ROA not after: Tue 18 Aug 2026 02:40:24 +0000
asID: 329611
IP address blocks: 154.211.4.0/22 maxlen: 24
154.211.4.0/23 maxlen: 24
154.211.4.0/24 maxlen: 24
154.211.5.0/24 maxlen: 24
154.211.6.0/23 maxlen: 24
154.211.6.0/24 maxlen: 24
154.211.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 12:38:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120949 (0x1d875)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 12 02:40:24 2026 GMT
Not After : Aug 18 02:40:24 2026 GMT
Subject: CN=6a52fe9c-2ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d4:90:27:27:4c:90:7e:7a:40:82:b6:28:57:
4e:cc:90:dc:e1:48:20:c7:01:9c:83:58:33:46:0a:
5c:9c:0b:45:8f:f5:0e:fc:c8:62:fb:06:78:a8:ab:
d3:ad:37:89:d1:99:8c:df:d7:43:c6:86:71:35:75:
c5:85:7c:e1:3e:39:dd:7e:b6:cc:61:fb:cf:8f:90:
2f:7e:fd:b1:29:71:a2:82:ed:72:fc:98:32:eb:33:
b1:8d:c9:3c:90:e8:c4:91:61:c1:3e:e9:e1:62:f4:
a9:e4:9d:2b:5d:47:9b:03:d6:9f:d7:62:0a:5e:a7:
a6:46:b9:0c:3d:9e:d8:e2:e3:8b:64:a2:a2:b5:f9:
7f:59:2a:7d:d1:6c:9f:86:68:54:40:90:bb:2b:82:
4e:fc:55:9e:f3:75:e8:f5:95:04:3d:bf:e1:cf:83:
23:2c:0b:02:62:0b:6a:d4:70:c8:ab:24:2d:a9:a5:
f7:05:c2:1d:94:c4:f5:10:0e:25:c4:c7:51:e9:27:
2b:58:c4:6c:6e:ed:c6:c0:3b:fc:37:e3:df:64:04:
10:6e:56:be:5f:20:5b:df:ad:2e:7e:d3:88:da:82:
bf:76:52:3e:93:d7:b7:fe:ec:5d:2d:97:12:fb:52:
00:39:bc:2d:31:47:70:7c:6d:3c:cc:eb:1c:b4:fd:
13:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:0F:3F:07:F2:EC:40:6E:65:F4:B8:A0:87:D3:D0:99:00:A5:FB:07
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0ACB0D8E7D9B11F1B8AF0519CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.4.0/22
Signature Algorithm: sha256WithRSAEncryption
13:73:41:35:93:a1:3a:ab:ea:03:89:33:24:67:ef:3c:36:89:
1c:15:fc:de:6b:8d:04:b7:38:92:af:d8:49:6f:4b:44:fc:60:
2d:e3:00:ea:43:65:0c:33:64:9d:20:ba:aa:5e:a8:a2:4c:6e:
f5:86:77:95:2a:71:3d:ba:0c:67:c3:a1:12:a2:b3:9a:f5:fc:
cc:95:b2:11:06:5e:e0:ce:04:43:be:01:09:dc:32:a3:d0:11:
d9:7b:08:1a:ef:78:0f:a6:94:39:13:a2:ae:e6:f4:04:ab:20:
72:c9:af:ca:af:e9:44:00:0d:f1:bc:47:6c:0b:79:a1:ba:86:
61:4d:2d:9a:84:09:94:51:bf:c3:9d:5e:a3:76:5c:a6:89:d4:
17:96:46:7e:9b:cd:f3:e1:f5:12:dd:81:40:88:d7:df:a6:48:
4a:24:9c:0d:dc:14:1f:f6:39:13:8e:ae:c0:de:8b:fb:5c:8e:
c8:ac:07:2b:87:63:98:23:72:60:21:31:bf:0d:0e:35:b0:23:
54:13:f8:fd:b8:a8:4d:9d:43:f2:64:0d:e0:9b:7b:6a:60:17:
9a:ef:2b:95:1b:0c:99:1f:54:a4:1b:6e:fe:94:3b:1c:12:6d:
57:b9:57:cd:61:2e:05:ee:51:7e:a3:57:d9:48:ec:9c:4f:44:
82:e3:28:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:20:24 2026 by rpki-client