Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B07DF0476FA11F1829BAA17CF1D38B0.roa
File: 0B07DF0476FA11F1829BAA17CF1D38B0.roa (raw, json)
Hash identifier: CeHJGcvub0Yr5eiK2pahObb9EbCZD36VYF4xoxs3slk=
Subject key identifier: 09:89:17:89:B3:08:0A:87:ED:76:23:E5:69:B1:40:2D:2D:D0:36:61
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D6D0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B07DF0476FA11F1829BAA17CF1D38B0.roa
Signing time: Fri 03 Jul 2026 16:12:53 +0000
ROA not before: Fri 03 Jul 2026 16:12:48 +0000
ROA not after: Mon 10 Aug 2026 16:12:48 +0000
asID: 138915
IP address blocks: 154.90.42.0/23 maxlen: 24
154.90.44.0/23 maxlen: 24
154.90.48.0/23 maxlen: 24
154.90.50.0/23 maxlen: 24
154.90.52.0/23 maxlen: 24
154.90.54.0/23 maxlen: 24
154.90.56.0/23 maxlen: 24
154.90.58.0/23 maxlen: 24
154.90.60.0/23 maxlen: 24
154.90.62.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:08:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120528 (0x1d6d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 3 16:12:48 2026 GMT
Not After : Aug 10 16:12:48 2026 GMT
Subject: CN=6a47df85-9d8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:83:5d:42:11:ef:46:ea:97:82:56:f8:d8:16:
28:5f:79:97:db:27:6a:47:e6:88:c6:6d:47:12:1e:
d1:a4:ce:fa:23:e5:ba:e7:91:5d:fb:ae:79:84:9a:
55:9a:ec:5c:d2:a3:b8:62:67:4b:5f:b2:d6:bc:fc:
39:23:db:e5:e4:d8:2b:36:be:3e:54:c9:79:a9:61:
95:ea:c4:70:7c:54:9c:cd:b7:03:be:c7:9e:ad:45:
0e:ca:a0:2f:e2:b7:af:11:69:3d:2c:5f:e2:fa:63:
64:58:d7:ed:6d:be:fc:cc:17:10:8c:aa:92:b4:13:
88:aa:8c:c5:f0:ab:f9:b9:33:ce:69:37:e8:d4:5c:
e5:15:9e:ec:09:68:0e:bd:7c:aa:55:1f:47:71:65:
68:9a:ab:72:18:b7:d0:1c:6b:3a:ca:36:19:ec:5b:
fa:b4:76:7d:8d:52:db:b2:c7:43:dc:a1:b9:f8:a8:
75:0f:7d:2e:d2:29:6a:20:e0:ee:c1:84:45:67:98:
9a:4d:0b:12:07:8c:bd:12:bf:31:75:be:4a:c3:47:
29:5e:b2:39:f0:56:8a:e7:02:62:b4:5a:32:fd:ec:
06:c5:fe:bb:01:6e:3d:99:f3:7c:44:f7:37:bf:b7:
c6:3c:78:c5:f6:57:71:50:01:36:6e:79:40:15:e8:
09:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:89:17:89:B3:08:0A:87:ED:76:23:E5:69:B1:40:2D:2D:D0:36:61
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B07DF0476FA11F1829BAA17CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.42.0-154.90.45.255
154.90.48.0/20
Signature Algorithm: sha256WithRSAEncryption
c4:cd:fb:b9:10:7b:02:06:58:5f:f2:d5:32:12:a2:90:b3:12:
dd:4c:10:01:8c:68:07:ce:72:cf:c8:ea:65:55:f7:38:4f:6d:
86:97:d2:4c:49:8d:40:41:38:99:83:1e:9c:bc:8c:b9:ea:d2:
8c:bc:24:6f:cf:6c:ee:e4:a9:53:6d:e3:2c:51:f3:ed:c9:52:
b3:17:1d:b8:c6:9f:91:ec:6b:d1:19:0c:69:fe:13:f1:96:83:
8f:d9:c9:da:9c:ac:a8:cc:7b:15:92:ee:4f:15:44:a8:9c:73:
3f:b4:17:38:2e:80:fa:76:7e:40:73:03:95:aa:15:0d:a1:83:
78:63:ae:1f:4c:6e:15:ca:79:25:c3:c2:ed:fd:41:b4:3f:0e:
74:9c:2f:b8:fd:20:99:a9:aa:32:cb:f4:f8:9b:9b:48:cc:7f:
b2:f6:6d:17:48:d6:ed:81:84:8e:aa:e1:64:10:91:93:ce:21:
49:d2:28:1f:54:d5:04:c5:22:a2:e3:d1:43:64:5c:5c:18:f8:
48:8a:ef:10:0d:7c:2b:13:77:02:97:9b:33:5d:3f:48:ae:2f:
ec:49:13:17:bf:74:c1:91:a1:19:b4:57:f8:fe:81:d2:0f:d7:
b4:bb:05:80:2a:3f:b7:54:c0:f3:17:b3:d2:fb:f7:eb:7d:79:
83:26:23:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:35:04 2026 by rpki-client