Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF7C4D40717811F1A6D3551CCF1D38B0.roa
File: AF7C4D40717811F1A6D3551CCF1D38B0.roa (raw, json)
Hash identifier: cbR1hPbIHXgN1nUAuGH1+x0eZjjl5VdzPbDIwVz/jjA=
Subject key identifier: 95:1A:E3:BC:7E:8D:DB:EE:65:85:F0:70:AD:A4:8E:86:9B:66:31:9D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D57D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF7C4D40717811F1A6D3551CCF1D38B0.roa
Signing time: Fri 26 Jun 2026 16:04:18 +0000
ROA not before: Fri 26 Jun 2026 16:04:13 +0000
ROA not after: Sat 01 Aug 2026 16:04:13 +0000
asID: 63199
IP address blocks: 154.202.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 12:38:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120189 (0x1d57d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 26 16:04:13 2026 GMT
Not After : Aug 1 16:04:13 2026 GMT
Subject: CN=6a3ea302-4423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:af:9e:3f:8e:6c:27:cc:98:21:77:0a:99:12:
e2:a6:6b:55:41:a9:54:bb:80:4d:f4:8a:09:d4:b0:
96:b0:2b:3a:48:aa:5f:0a:ce:2e:a8:e3:17:8e:46:
1e:13:a7:50:76:fb:8c:d2:48:4d:41:54:ef:4a:40:
13:f2:3d:6b:99:ae:3e:09:51:50:90:b1:7b:c4:3d:
93:75:fd:47:99:f7:28:0a:bb:3d:12:37:84:7e:6f:
a5:4b:be:d2:d0:5b:9d:56:06:5a:98:29:db:1f:6b:
83:27:29:18:d6:9d:90:4f:f6:33:1e:82:c7:ea:ef:
02:05:90:8f:11:99:b4:2b:66:ac:f6:04:26:36:4f:
64:e7:be:52:d5:3d:cc:3f:7d:e8:45:9c:c4:e2:92:
80:f3:a3:96:93:e8:37:ae:6b:85:7f:7f:b1:b7:b5:
15:08:2f:a6:8c:61:27:7c:79:6c:1f:93:f8:31:9f:
7b:85:14:4f:32:f7:86:16:88:78:37:f2:d0:2c:43:
d7:51:56:b0:2f:15:18:93:7d:23:02:3e:21:31:5b:
d0:65:f4:3c:2d:05:d2:9c:02:32:09:da:87:8d:91:
0a:96:ea:24:52:92:6a:cc:89:1b:d6:7b:75:8a:92:
ff:23:4c:e2:df:d5:dd:a9:b6:6b:33:9c:bc:be:29:
96:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:1A:E3:BC:7E:8D:DB:EE:65:85:F0:70:AD:A4:8E:86:9B:66:31:9D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF7C4D40717811F1A6D3551CCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.101.0/24
Signature Algorithm: sha256WithRSAEncryption
91:5a:66:ac:3a:36:ea:9c:3f:d8:a0:9e:d7:7d:19:04:45:bc:
16:76:6f:a3:04:76:21:65:cb:d3:5e:0d:f8:4b:57:78:c8:71:
7f:af:7a:1e:69:d1:d7:b7:26:34:e4:1a:15:42:c1:ac:49:75:
e7:d7:e2:b8:ba:52:f3:b8:16:39:91:d8:44:65:ea:b5:60:b0:
0f:24:0f:a6:a7:64:f2:91:03:bf:63:7a:17:52:f3:71:67:50:
ce:75:39:58:7a:4b:11:7b:3a:cb:ae:7c:07:28:0a:15:46:59:
59:06:c1:c9:f1:1c:87:cc:f1:88:99:fb:a6:db:3b:5a:b9:c7:
fa:f5:22:25:70:43:f5:b9:55:0c:ee:b0:05:9a:b0:10:6d:42:
71:76:8c:f3:de:30:a5:41:ec:38:f4:1e:45:12:2a:16:04:36:
cc:44:2a:22:54:79:45:7c:b3:d6:c9:eb:78:f7:ca:fb:04:72:
f8:30:4d:09:59:6d:05:67:57:99:97:a3:85:7e:20:ac:29:d6:
ed:a5:de:8e:3e:96:b8:dd:b2:e3:31:8c:28:c1:d1:79:45:2d:
ec:8b:7f:95:72:c0:7c:da:73:15:3a:4e:1d:b6:67:c1:b7:4f:
ed:e8:02:5c:f0:77:2d:10:ca:3e:c4:d1:46:c7:19:c1:e0:be:
27:4b:35:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:23:42 2026 by rpki-client