Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5F184AE810811F1AB422CC8CE1D38B0.roa
File: E5F184AE810811F1AB422CC8CE1D38B0.roa (raw, json)
Hash identifier: BpKHEmmItcZiPVfWbuXJO3qq4sW96aHHAg8XHFoCvvo=
Subject key identifier: 77:81:92:DA:20:11:47:D3:0B:2D:89:6E:CB:26:D5:C7:E2:94:EE:94
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D932
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5F184AE810811F1AB422CC8CE1D38B0.roa
Signing time: Thu 16 Jul 2026 11:24:25 +0000
ROA not before: Thu 16 Jul 2026 11:24:20 +0000
ROA not after: Tue 16 Feb 2027 11:24:20 +0000
asID: 271990
IP address blocks: 154.223.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:08:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121138 (0x1d932)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 16 11:24:20 2026 GMT
Not After : Feb 16 11:24:20 2027 GMT
Subject: CN=6a58bf68-55d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:8c:9c:66:27:2b:0f:c3:7e:d0:40:85:96:99:
7e:89:54:20:e0:d4:2b:9f:58:d7:27:16:ae:fc:ab:
86:3c:26:a2:28:f8:de:0c:ef:2b:64:4b:19:8b:33:
4a:a8:66:f9:38:2d:5a:0c:e0:a3:f8:2b:20:2c:ba:
d2:ac:85:92:e1:bb:c5:32:68:ea:a2:4d:d2:63:5e:
8a:ed:19:78:f1:58:37:52:bc:b7:fc:c6:1b:f4:a1:
57:a0:b2:70:9d:14:d9:c0:97:65:30:7d:59:b8:ab:
5c:37:84:56:74:6c:af:91:50:9b:64:18:d1:73:b4:
5d:97:1a:4b:63:bc:06:e2:8f:f7:86:8d:6d:54:f5:
fb:7b:05:fb:0b:e5:2c:20:27:02:a6:7c:d0:19:e9:
5d:f2:9e:2e:6d:87:ff:9e:e7:cc:9c:a4:a4:ea:a5:
d6:0b:24:39:a1:66:90:9e:61:8b:7e:91:49:d9:6d:
e6:de:75:ba:70:f9:41:8b:fb:3b:52:56:c0:35:60:
ad:38:ea:d0:7a:fc:d1:34:eb:51:21:f1:24:98:8d:
41:57:48:f3:06:e2:a4:48:aa:b5:8f:69:5a:ef:9f:
19:7f:90:fd:2a:b0:65:35:01:c3:b4:54:6f:0b:12:
c4:de:0a:20:8b:0a:c5:31:2d:ae:45:48:b2:e4:fa:
95:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:81:92:DA:20:11:47:D3:0B:2D:89:6E:CB:26:D5:C7:E2:94:EE:94
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E5F184AE810811F1AB422CC8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.128.0/24
Signature Algorithm: sha256WithRSAEncryption
cb:e9:e2:c4:de:eb:11:01:db:26:ef:f8:c1:33:6c:13:6e:fb:
8e:e3:3e:a0:0c:56:bc:b5:a8:3a:71:95:6c:e5:ca:04:71:61:
3c:2a:80:3e:cf:d8:96:90:8b:d4:c4:68:56:5c:ce:0a:aa:f4:
6b:e3:de:74:d7:d3:d7:07:66:6b:1b:bb:2a:7e:0e:ac:8e:70:
09:1f:8d:75:ca:86:45:da:66:74:d5:ae:19:f6:70:69:fe:81:
3e:ba:a5:15:7b:29:e8:54:13:c2:d0:4c:94:0b:6f:ee:da:c5:
ea:0a:78:ff:6e:c4:a6:0b:a2:6b:15:50:fe:73:e9:f8:c4:ea:
f8:00:58:99:9f:7b:83:80:cd:67:c0:0a:ef:96:3f:1e:53:b7:
58:ad:b5:b6:7e:d5:9a:61:99:2c:83:f7:a0:5a:40:ee:aa:d2:
e8:65:7f:2d:39:c8:b2:e7:1f:e5:0c:17:23:35:f3:65:d6:ac:
87:33:68:85:d9:01:46:ad:75:e1:59:e5:8b:1c:69:21:51:6f:
d1:10:53:f8:87:c6:75:16:a3:fd:be:c9:c8:57:c0:11:93:54:
7e:1f:36:23:41:bd:eb:ee:61:f9:f6:f5:16:78:d5:40:1f:6f:
d2:77:01:b7:c1:9a:59:ab:77:16:1d:c5:01:ca:81:75:03:f5:
dd:87:76:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:07:35 2026 by rpki-client