Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CFB351107E0411F1A9C298A4CE1D38B0.roa
File: CFB351107E0411F1A9C298A4CE1D38B0.roa (raw, json)
Hash identifier: kmPM7yMJ2JnOUHqIq9dv/shXGY4jRkLqA+To25+Sygc=
Subject key identifier: E7:DD:F1:01:F3:94:DD:92:CB:31:0D:59:06:6F:C5:CF:5E:35:72:32
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D897
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CFB351107E0411F1A9C298A4CE1D38B0.roa
Signing time: Sun 12 Jul 2026 15:17:36 +0000
ROA not before: Sun 12 Jul 2026 15:17:31 +0000
ROA not after: Thu 13 Aug 2026 15:17:31 +0000
asID: 137897
IP address blocks: 154.203.0.0/23 maxlen: 24
154.203.204.0/23 maxlen: 24
154.203.244.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:08:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120983 (0x1d897)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 12 15:17:31 2026 GMT
Not After : Aug 13 15:17:31 2026 GMT
Subject: CN=6a53b010-a55d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a4:74:a7:e8:47:ac:50:62:2f:6b:83:49:dd:
26:41:d9:c6:09:cf:54:38:56:fc:31:90:44:9a:68:
2b:ad:ef:a8:64:e1:72:fb:18:96:22:59:d5:73:1f:
31:87:78:81:ba:78:b6:1c:ad:08:8e:a1:24:6c:7a:
51:9c:65:66:8e:28:70:5a:07:cd:e9:20:53:bb:d1:
da:fa:07:9f:21:d9:aa:f6:52:d2:1a:b6:2d:b8:35:
bf:6d:87:13:b9:13:c9:8b:62:91:7d:67:57:d0:af:
58:ec:65:42:34:cc:3d:d4:18:33:cf:92:d6:73:80:
5a:ee:3e:82:af:09:5f:8c:1e:81:75:7f:3a:78:57:
1e:98:d5:42:96:66:6b:8d:db:94:31:2b:0e:d5:8d:
44:20:b2:73:01:ce:86:fd:8f:32:6f:1f:c5:a7:13:
c1:ff:23:df:67:e2:1c:16:8f:68:76:0d:f6:6d:d1:
30:41:2f:30:c7:19:99:9a:e5:b8:d3:a9:12:83:9c:
7f:10:eb:2d:9d:fc:c8:09:e2:15:28:58:2e:b0:17:
1a:b7:d3:54:3a:f1:47:e7:14:67:34:4d:2e:52:85:
e3:48:0d:b6:0c:f4:07:c2:4e:f0:90:0b:8b:20:2e:
c0:e6:6b:7d:79:ae:df:ab:4d:12:73:66:d3:65:86:
56:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:DD:F1:01:F3:94:DD:92:CB:31:0D:59:06:6F:C5:CF:5E:35:72:32
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CFB351107E0411F1A9C298A4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.0.0/23
154.203.204.0/23
154.203.244.0/23
Signature Algorithm: sha256WithRSAEncryption
ba:ea:5e:b2:51:2b:f6:9d:b3:a5:7f:22:b7:0f:6b:e8:8f:d8:
a4:65:a9:cd:42:0d:15:12:71:a0:91:c9:db:85:a0:68:94:b6:
91:28:92:f8:35:29:1d:60:65:fe:78:a3:bf:68:b9:1f:db:1c:
72:9f:7b:41:2b:35:d0:3f:e6:dd:54:df:dc:e0:66:3a:4b:f8:
30:30:00:78:33:10:e5:db:dc:1a:03:01:4c:35:94:51:32:a1:
f4:83:f6:3d:3d:0a:8d:eb:04:49:be:6c:1a:a0:70:f3:f2:ab:
8e:71:4d:4f:84:7d:a6:a8:c9:c1:3c:4a:f5:23:ca:eb:eb:53:
5e:93:cc:a2:32:ac:6a:65:71:aa:c5:91:d3:9a:bc:bd:29:56:
0b:8b:a0:ed:22:48:40:6e:9c:8c:97:8f:e8:23:17:7c:4d:f5:
1f:a1:15:91:72:5d:2d:4c:5f:e6:0e:92:75:79:bf:c2:d7:17:
ad:db:97:55:7f:9e:30:09:ed:c6:71:21:46:e9:4e:a4:3d:a8:
26:f2:c7:06:b2:8e:be:68:3a:fe:a3:7c:6f:5e:ab:af:77:2c:
4d:a4:ce:5f:ce:a7:fd:75:56:b3:c2:0e:9a:50:0f:d7:b2:cd:
f6:39:d7:dd:03:49:c4:4a:04:c7:34:c2:d8:13:c5:0d:b8:bf:
bf:bc:12:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:37 2026 by rpki-client