Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09E5BB088E4911F1B1789DA3CE1D38B0.roa
File: 09E5BB088E4911F1B1789DA3CE1D38B0.roa (raw, json)
Hash identifier: O5lu9zwcyyWasEbF1noiRDeiLRKdpkI5DXTgydjXoSk=
Subject key identifier: DD:CE:03:EC:6E:3B:FE:07:DD:89:9D:5D:DD:C2:F5:95:99:09:82:05
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DC43
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09E5BB088E4911F1B1789DA3CE1D38B0.roa
Signing time: Sun 02 Aug 2026 08:06:18 +0000
ROA not before: Sun 02 Aug 2026 08:06:14 +0000
ROA not after: Sat 12 Sep 2026 08:06:14 +0000
asID: 212042
IP address blocks: 154.83.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121923 (0x1dc43)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 2 08:06:14 2026 GMT
Not After : Sep 12 08:06:14 2026 GMT
Subject: CN=6a6efa7a-1484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:5c:bc:5c:ff:57:d6:c9:6e:f2:c7:35:a5:90:
e5:a0:63:54:c7:90:1d:20:34:00:eb:f2:ca:e0:ab:
50:59:30:27:a3:93:3a:5c:40:b0:c6:7b:8e:b8:65:
94:df:ea:10:16:45:e4:1d:33:66:80:4c:88:87:4b:
5d:33:0e:1b:55:d3:60:21:69:92:00:9b:92:23:f0:
b4:28:a0:e3:90:49:0c:4a:57:b9:3a:b3:50:54:ba:
ee:9d:c6:ca:f8:bb:fc:2b:ea:1d:3b:44:eb:c8:19:
fc:d1:9f:0e:7b:ca:39:c2:30:43:c5:08:eb:ad:d2:
d1:9b:51:a7:29:97:92:10:5b:62:4b:dd:c8:12:64:
fb:d5:de:f3:19:1d:85:05:3b:31:87:b0:ff:00:a3:
13:7d:1d:98:a4:c6:a3:37:c0:12:62:9b:05:dd:fb:
6e:28:03:3e:a7:f5:1f:1d:91:ad:18:30:db:55:ec:
95:dc:d8:e3:d4:42:b1:a9:63:5a:66:d6:4b:f8:0b:
11:1a:b7:3d:df:6b:30:ad:77:d3:2c:50:f0:af:80:
84:2b:c5:c4:68:1a:6f:3f:32:be:53:e1:76:7c:3b:
fb:42:65:e0:da:9f:b3:48:23:1a:ed:64:2e:ef:b8:
ce:9d:7f:5d:62:b4:b1:99:71:fa:df:10:e6:8c:75:
b2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:CE:03:EC:6E:3B:FE:07:DD:89:9D:5D:DD:C2:F5:95:99:09:82:05
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/09E5BB088E4911F1B1789DA3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.136.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:a9:d7:26:52:01:4a:3f:51:44:79:8a:43:63:52:dc:a8:24:
22:11:3b:f4:58:75:71:1d:1e:f1:ed:f5:3f:c6:36:9a:e7:24:
1b:8d:0b:c0:2f:29:0c:5f:d2:23:c7:15:2e:59:de:0d:9a:2c:
51:f4:54:42:69:62:73:d2:44:63:3e:84:32:3c:6f:41:80:a5:
ae:e8:39:9a:13:4b:14:a1:30:e5:3f:d2:d5:2c:61:28:af:8d:
4a:e9:35:af:45:bf:c0:f2:89:3c:b8:46:29:5f:2e:0c:e7:26:
6e:17:2b:38:cc:60:37:f2:1a:20:f9:24:b3:0a:1f:30:d8:3c:
4b:a8:6e:57:24:e5:88:12:bb:af:77:3c:7e:4f:1e:08:76:a1:
36:53:dd:c9:94:5c:1e:1d:8c:a2:56:f4:4a:32:49:99:9a:75:
10:85:3e:b4:dc:4c:29:04:ad:c8:dc:58:61:44:06:76:e6:a7:
5b:9a:13:7d:a9:48:a8:fc:e4:c3:26:55:3f:49:78:43:64:c4:
c3:aa:5b:4f:2d:d1:26:47:4c:f1:70:75:10:c1:cb:0b:fa:53:
9f:a5:f0:27:f5:f2:91:7b:6a:73:54:78:8c:ab:7c:b5:0f:27:
75:d8:46:99:d0:f1:e3:37:03:af:93:24:0a:78:5b:02:ef:b8:
b6:5b:e6:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:07:57 2026 by rpki-client