Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/034CE6CA923811F1957C46FACE1D38B0.roa
File: 034CE6CA923811F1957C46FACE1D38B0.roa (raw, json)
Hash identifier: I6uhAvB5CQbi11BlJm/JGso07AVSsOoQyHAhHLQT3SI=
Subject key identifier: 1B:68:62:65:92:03:AB:37:16:A5:66:32:E4:1F:9B:73:A5:E5:C9:4C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DD48
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/034CE6CA923811F1957C46FACE1D38B0.roa
Signing time: Fri 07 Aug 2026 08:14:30 +0000
ROA not before: Fri 07 Aug 2026 08:14:26 +0000
ROA not after: Sun 13 Sep 2026 08:14:26 +0000
asID: 206675
IP address blocks: 154.203.0.0/23 maxlen: 24
154.203.204.0/23 maxlen: 24
154.203.244.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122184 (0x1dd48)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 7 08:14:26 2026 GMT
Not After : Sep 13 08:14:26 2026 GMT
Subject: CN=6a7593e6-6c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:3a:da:59:a5:45:8b:2f:99:90:ff:f5:f9:80:
2c:64:14:8e:24:39:3b:e0:98:b5:a1:40:10:09:e6:
f5:b6:3f:ae:63:30:ad:15:29:8e:b2:7a:48:9d:8e:
dc:31:77:b1:65:54:71:03:91:2a:e6:45:72:d7:d9:
e1:47:e6:cf:17:78:23:5f:0d:3a:8d:d9:c1:0a:51:
26:68:8c:77:82:6f:5b:ef:28:60:0d:b4:bb:af:3d:
ca:08:fa:79:97:10:83:ea:5e:db:f2:25:8e:55:dd:
8f:46:9a:6c:fb:11:a4:4c:08:91:e4:35:d0:71:eb:
83:03:82:49:76:f2:31:3c:29:68:7a:05:ef:21:61:
23:5c:75:2a:09:9f:7f:71:01:0f:a2:b2:34:32:ff:
9f:55:02:69:dc:c1:2e:55:11:e6:de:27:66:3e:61:
ba:26:21:f2:d4:6b:24:58:b9:a9:d4:52:ae:01:01:
6b:e8:f8:8e:f4:0a:95:3c:e0:57:1b:f3:bb:d1:5b:
4e:38:9c:27:51:13:c2:40:5e:3b:62:8e:6a:5c:de:
8b:b9:15:b3:f0:59:ed:e2:15:07:49:e8:a3:97:8b:
e0:78:c1:64:93:e9:3b:dd:9e:4b:8d:3e:29:37:c5:
90:96:62:6c:86:bf:e5:31:89:42:74:cb:3b:e9:0a:
6b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:68:62:65:92:03:AB:37:16:A5:66:32:E4:1F:9B:73:A5:E5:C9:4C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/034CE6CA923811F1957C46FACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.0.0/23
154.203.204.0/23
154.203.244.0/23
Signature Algorithm: sha256WithRSAEncryption
1f:94:da:c9:f1:f1:e3:d4:33:00:45:0b:99:27:91:d0:40:f3:
6d:e2:9f:d2:74:fd:72:2d:23:7e:40:b0:5a:e9:52:c9:8b:f9:
08:19:09:6f:c2:09:18:9b:1b:c6:eb:47:eb:49:1f:0d:cf:b2:
09:09:82:0e:6a:3c:e1:79:79:31:4d:a8:c0:20:a1:5f:8d:c7:
14:56:b2:e6:67:b3:fc:ba:af:99:6a:81:4f:1a:c7:37:39:c4:
17:a9:fe:45:b7:1c:52:4e:12:57:45:1b:34:15:c5:25:80:b0:
7e:ce:a1:3f:d0:57:90:c8:97:d8:c5:df:8e:67:78:05:f0:40:
5a:2a:06:ea:03:0a:af:c1:88:76:ab:31:24:e4:e0:5d:61:1f:
61:6c:3d:75:7e:c8:b9:e8:6c:42:cf:46:3d:16:39:d2:2a:ca:
50:5d:9c:8d:d3:c8:da:88:5c:d1:37:53:88:5d:f8:63:b3:11:
17:bf:59:9f:cb:43:43:01:08:eb:e4:6e:6a:fb:1a:dd:05:cb:
a2:9f:d8:97:10:ec:cd:ac:69:ab:08:ac:82:8d:ce:72:52:cb:
4b:20:6a:9d:a2:83:ac:4f:92:32:3e:ae:91:06:d6:69:7e:68:
24:54:07:bb:b3:42:a6:79:23:93:14:cd:05:7f:da:c6:8e:af:
07:e8:d2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:11:52 2026 by rpki-client