Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75836A5476F711F1BEC52809CF1D38B0.roa
File: 75836A5476F711F1BEC52809CF1D38B0.roa (raw, json)
Hash identifier: 8LEGf0kHjLvdPzr0KOmimTHYWVqTSF61eVx8ZER3uuk=
Subject key identifier: C1:F8:8B:BB:19:AF:8D:AE:32:E1:3C:7E:90:8D:AF:07:99:7E:E2:DD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D6CA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75836A5476F711F1BEC52809CF1D38B0.roa
Signing time: Fri 03 Jul 2026 15:54:23 +0000
ROA not before: Fri 03 Jul 2026 15:54:18 +0000
ROA not after: Mon 10 Aug 2026 15:54:18 +0000
asID: 138915
IP address blocks: 154.223.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:08:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120522 (0x1d6ca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 3 15:54:18 2026 GMT
Not After : Aug 10 15:54:18 2026 GMT
Subject: CN=6a47db2f-8676
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e4:23:a0:12:ff:c3:97:4b:85:cd:f4:7b:9b:
46:c9:24:a4:36:cf:4e:9e:07:00:c1:e0:f1:35:3e:
23:84:b0:34:47:d3:bb:97:97:9a:1a:3c:b6:d7:c7:
1b:cf:5c:87:f4:a1:f1:3c:d0:9f:96:9d:cb:3e:47:
0e:86:82:0b:ab:08:80:eb:d7:a8:d9:f4:11:a8:7f:
8f:a6:d1:d7:1a:86:23:ae:99:f0:ba:a3:4f:fc:b3:
e6:bc:3e:ea:3c:df:f3:33:ad:5a:24:f0:70:65:ae:
c8:82:b3:da:e2:59:82:8b:84:1b:e3:37:46:6a:e1:
95:69:72:5b:25:dd:dd:df:b8:90:7c:66:a1:7b:ca:
d6:8e:af:a0:a4:ab:3d:54:e5:be:05:f3:bb:5c:c0:
07:1a:a3:3e:16:26:ed:61:12:0b:e8:27:3d:65:44:
84:4b:bd:bd:75:1e:bb:f3:7b:93:7a:ee:7b:3c:ab:
95:40:2e:01:12:0c:af:53:cb:62:1b:03:41:b0:b3:
59:ce:ef:1c:36:ce:61:a1:16:c5:ac:f7:00:c2:d0:
44:16:a1:cb:91:a5:93:80:ae:ac:3c:6c:b4:6f:70:
28:5f:c2:68:91:cb:78:6c:1d:3f:ea:bb:21:9c:cb:
60:77:13:1d:5d:14:8e:c0:2d:58:d7:6e:a0:8f:79:
4a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F8:8B:BB:19:AF:8D:AE:32:E1:3C:7E:90:8D:AF:07:99:7E:E2:DD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/75836A5476F711F1BEC52809CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.65.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:da:29:8e:39:7d:56:6e:bf:98:7e:0e:9b:ca:9f:08:f2:78:
a2:64:eb:48:03:b8:8e:8e:bc:97:f5:f9:c4:94:0f:91:a7:45:
94:98:77:38:f5:ed:e7:6c:70:bc:ac:1c:7c:83:2a:38:5b:ca:
7a:5a:7b:14:ee:e5:6c:19:78:91:21:1c:ba:d9:8f:88:07:53:
63:6d:69:c1:55:1b:7a:5e:46:ca:b1:db:5f:35:83:33:41:37:
96:7e:f5:44:d1:ff:ba:3f:f4:d7:04:f6:57:c6:9b:d4:9f:0f:
37:31:11:6a:00:2c:b2:82:b9:b8:89:77:b3:16:b7:0c:b6:0a:
cf:91:d3:d1:95:4a:b2:e4:65:50:15:c5:f1:9c:9d:c9:54:5b:
a1:50:cc:51:db:df:ef:94:cc:3a:fd:2d:3a:f7:a8:e3:92:47:
36:04:31:58:04:7e:a0:f6:00:7b:17:96:f4:1c:3d:b3:8a:c8:
98:f4:9f:0c:3b:77:af:d9:81:70:9c:4d:81:1a:bb:26:1f:30:
9d:a2:0d:5d:cf:01:cd:99:a8:e4:53:b0:b9:68:7c:e4:4b:bc:
99:f5:d8:2d:b6:04:b5:7c:10:0e:8f:f5:54:7f:ed:db:e6:7f:
04:8b:e4:2d:8e:c8:a3:5e:d4:d5:f7:c5:97:08:2c:ca:df:26:
59:f8:1d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:34:50 2026 by rpki-client