Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08609D807A9811F18F551A1ACF1D38B0.roa
File: 08609D807A9811F18F551A1ACF1D38B0.roa (raw, json)
Hash identifier: 6yN5WlmMhb0S5vrhCYEl+9BFToYp59s9x/qaZ5jDIEU=
Subject key identifier: B7:6F:74:76:77:03:C1:01:B2:E4:DC:51:65:41:0E:6F:3E:B2:69:EC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D77E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08609D807A9811F18F551A1ACF1D38B0.roa
Signing time: Wed 08 Jul 2026 06:41:22 +0000
ROA not before: Wed 08 Jul 2026 06:41:18 +0000
ROA not after: Sat 18 Jul 2026 06:41:18 +0000
asID: 397423
IP address blocks: 154.202.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 11 Jul 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120702 (0x1d77e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 8 06:41:18 2026 GMT
Not After : Jul 18 06:41:18 2026 GMT
Subject: CN=6a4df112-d0fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:c4:78:05:37:45:78:9b:b7:6d:f8:5f:c4:ed:
2e:04:e2:46:f8:45:91:5d:5e:88:2c:2d:2e:b3:6e:
89:91:4c:9a:a4:32:0e:77:df:1f:18:3a:26:15:49:
e2:27:96:07:8b:58:89:c6:e9:d0:8f:71:c7:30:1e:
96:3b:cb:26:d0:4f:e9:b7:32:36:4c:09:55:9d:2c:
07:1c:64:fb:69:fd:9f:80:81:5a:e9:5f:5e:dd:9a:
85:f1:ea:66:ea:7d:58:1c:ed:98:7f:7d:ec:5e:6f:
4a:51:cb:7b:1a:30:4d:0e:9e:4d:a7:b1:a5:e0:a6:
2e:a1:6d:7a:91:22:6b:a1:e1:be:ac:cb:6e:a5:a6:
bf:14:c6:8a:41:0e:42:75:82:fb:47:84:ef:e5:dc:
59:52:bf:fe:4a:0f:55:21:66:9e:72:8c:f3:31:d0:
08:ea:ac:a5:b6:8c:ac:f0:a3:96:7a:18:d7:97:78:
87:ef:58:60:6f:6c:39:7c:3f:9c:98:78:d2:2f:fc:
58:91:5b:a1:fe:d4:95:ab:a3:3e:a8:f1:60:f5:ab:
96:2b:b8:65:39:fa:dd:14:dc:7b:11:f2:a3:a8:77:
81:4b:32:2e:ca:11:10:41:36:df:4e:81:29:f6:33:
2d:6a:9c:9d:66:4e:ab:cd:45:e3:16:d1:5a:9f:fb:
40:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:6F:74:76:77:03:C1:01:B2:E4:DC:51:65:41:0E:6F:3E:B2:69:EC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/08609D807A9811F18F551A1ACF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.3.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:a5:c6:b9:68:e5:d5:f6:bf:9a:ba:8e:e4:f1:f2:08:ad:25:
1b:35:3e:12:18:2e:a8:18:89:1b:7c:56:b7:9a:25:a4:2f:7b:
d5:c6:57:f4:16:f1:be:eb:26:45:68:f7:b1:d6:07:40:f9:7f:
a4:66:30:5b:16:dc:ac:39:4c:99:a2:97:9e:e9:c2:49:ec:9d:
26:e1:a9:96:64:5f:94:5c:dc:c9:fe:a0:0a:7d:35:1d:8a:f7:
12:18:3c:fe:f8:ac:a8:d8:50:d5:47:5b:9d:95:d7:a1:f3:15:
d5:ef:c1:ff:dc:10:d1:2e:96:d0:2c:92:5a:6c:ae:97:ab:d0:
87:7a:d0:fc:2c:7e:cd:ca:11:95:81:25:07:6b:9f:32:a0:37:
df:56:76:d6:23:26:45:e7:4f:9c:f9:2a:b2:77:b5:6a:10:9c:
f2:5a:fd:37:25:b0:19:76:66:84:62:66:40:f0:3a:5f:9b:32:
bf:c8:b7:4a:7a:07:00:1d:bc:2f:43:62:0f:7e:87:c5:4e:6e:
9a:62:3d:cd:3d:46:0f:db:23:60:1a:29:dd:6d:20:2c:99:cb:
d9:f7:1f:08:87:ec:ef:f8:b3:72:d0:9a:47:6f:f3:dc:93:ba:
b3:47:a5:d5:20:6e:f3:62:b6:91:cf:8f:2d:3a:a5:28:b1:fc:
cc:71:7a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 05:43:33 2026 by rpki-client