Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7432C56281B211F1A6CDF7D6CE1D38B0.roa
File: 7432C56281B211F1A6CDF7D6CE1D38B0.roa (raw, json)
Hash identifier: DKpcTKUAtwKadYyF4F1t4WkuUNM2D8TqZYrJ5r3Lr38=
Subject key identifier: 94:74:31:38:C6:A6:97:B6:4E:B6:90:4F:04:0B:94:34:56:04:B7:35
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D943
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7432C56281B211F1A6CDF7D6CE1D38B0.roa
Signing time: Fri 17 Jul 2026 07:38:08 +0000
ROA not before: Fri 17 Jul 2026 07:38:04 +0000
ROA not after: Mon 24 Aug 2026 07:38:04 +0000
asID: 58931
IP address blocks: 154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 12:38:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121155 (0x1d943)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 17 07:38:04 2026 GMT
Not After : Aug 24 07:38:04 2026 GMT
Subject: CN=6a59dbe0-036c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:20:5f:9f:09:dd:25:19:09:ae:88:80:72:47:
24:3a:98:c7:3a:8b:23:a1:2d:68:43:01:aa:70:61:
ff:7e:1f:5a:3d:36:a5:2c:5d:a5:16:35:d0:10:f1:
c8:60:17:76:04:37:3d:f4:55:46:70:05:5d:43:81:
f9:2c:50:cb:38:68:07:35:7a:5c:23:57:10:eb:3a:
b3:9f:21:67:b8:7c:49:b5:ce:b6:25:f7:5f:22:45:
e6:0a:4c:20:40:3b:19:48:50:6a:f4:28:c4:0f:64:
f4:37:84:97:83:9f:88:97:30:0d:0b:8e:87:6b:78:
50:4a:c0:04:36:f2:96:33:a0:ab:7c:f7:11:40:af:
72:93:bc:b4:fb:6d:c9:7d:68:dd:62:19:d4:54:22:
c4:96:26:d3:3a:2b:6e:78:64:7c:eb:5a:ef:6a:08:
a7:27:8f:29:ed:0c:d3:25:3a:14:4e:54:87:1f:f3:
43:ca:66:45:3d:47:ed:e8:5a:83:2a:53:fb:20:9a:
53:dc:b8:65:42:ce:41:70:a3:7c:f2:23:9c:d9:d0:
5a:02:b0:23:ce:03:2a:ae:60:1e:fe:1e:4e:ad:96:
bf:77:d5:d4:48:c3:3c:fc:ff:65:39:d9:32:46:8d:
af:71:6b:94:3a:3c:71:f4:ea:02:23:3d:80:5d:cd:
5a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:74:31:38:C6:A6:97:B6:4E:B6:90:4F:04:0B:94:34:56:04:B7:35
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7432C56281B211F1A6CDF7D6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
47:e9:14:13:61:32:25:78:94:b3:d5:73:0a:c4:d5:97:06:82:
39:cc:03:63:96:d4:5e:bb:ec:d6:e7:29:8e:2a:e4:fa:e5:bd:
74:28:df:ac:4e:65:5f:2b:db:22:49:f7:8b:db:2c:c4:33:28:
89:6c:94:ea:78:f6:47:2f:db:4b:ff:9a:74:ed:f0:04:d8:e1:
4e:43:fe:e8:a2:7b:3d:3b:b3:2b:37:89:e0:f6:75:0c:0b:8e:
b9:d1:75:f8:d8:42:a8:ac:fc:9c:e4:5a:76:93:d1:84:5b:90:
6c:b0:47:42:75:4b:df:23:f6:3d:cc:fa:64:d8:4f:7b:5d:0d:
1c:58:d4:1f:d1:cb:87:4f:6c:63:6a:09:25:41:e4:ec:c3:8b:
fa:d9:43:89:8d:29:a0:31:0c:38:2b:08:ec:78:57:02:03:2e:
15:b4:40:3b:87:2a:c9:4b:1f:95:e3:7b:0b:4c:4c:61:b5:76:
e7:7e:96:c4:3b:ce:4a:f7:d2:81:e2:5d:b5:6f:d5:3b:3f:e2:
9f:2b:42:a5:e1:e2:89:50:5e:b4:92:18:ea:f2:44:f8:44:91:
15:2c:d4:91:7e:47:ca:b4:d1:a6:48:45:f0:56:58:51:f7:57:
dd:09:12:04:75:0d:8b:84:b2:95:6f:06:a5:8b:8d:08:13:8c:
ab:2b:a0:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 19:36:25 2026 by rpki-client