Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1263A7B07F6F11F18A28CFC2CE1D38B0.roa
File: 1263A7B07F6F11F18A28CFC2CE1D38B0.roa (raw, json)
Hash identifier: 80A9/b/YUf5ccr4KYlvKIeaq0PgOzWqQ6wNHOhTBxEE=
Subject key identifier: A5:67:41:85:1F:EB:5E:0D:5A:8B:BA:B8:22:14:06:7C:0C:C5:B3:10
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D8E0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1263A7B07F6F11F18A28CFC2CE1D38B0.roa
Signing time: Tue 14 Jul 2026 10:30:45 +0000
ROA not before: Tue 14 Jul 2026 10:30:40 +0000
ROA not after: Fri 21 Aug 2026 10:30:40 +0000
asID: 401783
IP address blocks: 154.82.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:08:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121056 (0x1d8e0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 14 10:30:40 2026 GMT
Not After : Aug 21 10:30:40 2026 GMT
Subject: CN=6a560fd5-262c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6b:1c:40:f3:79:c1:66:3e:1e:d7:5f:d8:a4:
9c:a7:81:5d:84:09:7b:d9:a9:f9:03:9a:5b:93:c0:
e2:59:2a:73:d0:e3:52:9e:c8:55:26:aa:b6:fb:18:
8e:e2:36:38:f7:9f:9c:90:38:10:0f:76:dd:e8:51:
71:40:09:dd:cf:ec:78:b3:6b:51:5f:c2:34:d0:93:
36:19:86:a3:36:40:a4:03:32:97:0d:84:ac:5b:fb:
98:f4:3a:ab:1f:49:9b:24:07:78:d7:77:52:07:5d:
b2:a8:16:45:81:a2:29:60:ac:42:35:d2:36:99:b6:
f7:22:7c:35:23:66:99:3a:84:98:ce:51:d6:a7:f3:
61:75:98:4a:21:3a:41:38:a1:49:5a:88:4f:3e:a0:
e5:3a:90:6c:2c:d9:4e:71:86:2d:3f:8f:52:8d:ca:
d3:66:d7:26:60:03:65:df:6c:29:38:a3:17:78:a4:
ab:b5:24:67:1d:dc:1e:97:1d:9f:55:78:cf:78:2f:
26:cf:4f:fd:7a:04:66:33:b2:97:11:dc:20:c3:c5:
ff:d1:9f:ba:03:62:d9:61:5d:2f:c4:f6:d2:dd:4b:
c2:87:c3:1d:37:5b:53:b2:13:db:83:1e:57:29:40:
47:53:90:1c:a1:77:fa:59:a1:db:08:82:d6:ed:34:
db:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:67:41:85:1F:EB:5E:0D:5A:8B:BA:B8:22:14:06:7C:0C:C5:B3:10
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1263A7B07F6F11F18A28CFC2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.181.0/24
Signature Algorithm: sha256WithRSAEncryption
39:d7:77:98:70:bf:0d:48:83:9f:a1:54:5b:da:8f:89:70:f3:
d8:f4:a2:84:5f:6f:54:64:7e:61:cf:55:f7:55:9b:5b:1e:9a:
b4:0b:48:4d:29:0e:11:93:65:3b:2d:92:0d:99:35:e1:85:f8:
b4:6f:8d:29:c0:58:37:1c:e4:41:89:fe:92:6f:56:cf:a1:47:
88:c1:a8:5d:02:17:1a:38:a4:6d:e9:1a:78:37:d5:80:80:fe:
cf:07:9e:f1:1f:31:20:48:86:3c:85:d6:40:8f:3e:02:82:2c:
92:3e:98:c3:79:aa:8e:43:da:24:f9:41:f6:e5:c1:50:14:82:
a9:01:2c:20:34:98:45:fe:2e:2d:bd:a7:71:7c:8c:2b:5b:51:
d2:d7:ab:f0:60:3b:b4:27:4f:01:82:bb:7e:3b:73:4e:68:58:
65:30:3b:98:c1:ad:5e:47:0e:cb:b4:56:af:85:64:70:34:82:
59:23:49:40:0d:0a:76:4a:99:11:07:4c:d0:98:4f:1c:7e:d9:
29:56:f2:4e:ff:31:a2:19:e3:a4:b2:7c:63:bc:5c:48:22:5f:
a5:79:43:11:69:33:fe:a2:4a:0e:ff:f3:28:fc:9a:30:e2:d8:
d6:e7:a4:cd:ab:b8:75:0f:28:29:ad:9a:72:66:3a:38:27:6c:
bc:85:8e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:43:12 2026 by rpki-client