Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B32D312770411F1A3CA53D5CE1D38B0.roa
File: 0B32D312770411F1A3CA53D5CE1D38B0.roa (raw, json)
Hash identifier: YHkqpxgr4Wietk1kV03wFC6/vfauIK03Snot+MfQAk4=
Subject key identifier: 8F:25:8A:4A:95:DA:10:70:B4:3A:38:C8:4E:12:03:E7:44:C4:45:54
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D6DE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B32D312770411F1A3CA53D5CE1D38B0.roa
Signing time: Fri 03 Jul 2026 17:24:28 +0000
ROA not before: Fri 03 Jul 2026 17:24:23 +0000
ROA not after: Mon 10 Aug 2026 17:24:23 +0000
asID: 154177
IP address blocks: 154.223.16.0/24 maxlen: 24
154.223.17.0/24 maxlen: 24
154.223.18.0/23 maxlen: 24
154.223.20.0/24 maxlen: 24
154.223.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 11:51:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120542 (0x1d6de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 3 17:24:23 2026 GMT
Not After : Aug 10 17:24:23 2026 GMT
Subject: CN=6a47f04c-596e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:60:45:37:c8:35:9b:37:3c:3e:bb:35:35:34:
4c:ce:76:6c:18:17:30:5f:64:93:88:d5:ae:71:2e:
e6:50:dd:42:ee:b8:2f:bf:82:83:a2:9b:67:d2:2d:
16:09:55:ad:ac:05:f1:6d:59:8d:dc:1a:f3:e8:d6:
ce:b6:ff:d8:09:14:f6:c5:da:4a:11:e8:5e:60:c9:
ce:f1:77:c1:1b:23:9f:48:e6:12:16:2c:41:d1:31:
8e:97:b3:8d:6f:03:14:aa:8c:bb:30:a6:90:74:cb:
2e:55:61:cc:c3:f6:1d:80:02:12:23:64:cd:4a:f1:
ee:e0:95:52:fe:f9:2f:a2:d0:eb:c6:a6:6d:72:ab:
7c:a8:37:6d:b1:c4:b2:1a:7f:6f:48:8a:99:e8:c6:
8b:e0:1f:2d:ef:96:f8:3e:62:d6:00:0e:b9:ad:25:
9c:7a:59:bd:17:6d:b5:05:4b:90:3a:5f:26:1e:fa:
c0:04:77:75:6e:ff:16:94:c2:19:ca:25:52:b5:23:
32:ba:41:b4:0a:19:9a:74:31:e5:40:0e:ef:ae:83:
ab:e2:27:5b:45:f4:8a:a4:63:c6:93:e3:fb:be:67:
c7:3c:56:0d:e7:64:8e:3f:5a:bf:ff:82:e6:33:25:
b1:60:9c:1c:a0:cf:6e:e8:52:38:41:75:38:bd:2c:
7c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:25:8A:4A:95:DA:10:70:B4:3A:38:C8:4E:12:03:E7:44:C4:45:54
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0B32D312770411F1A3CA53D5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.16.0-154.223.21.255
Signature Algorithm: sha256WithRSAEncryption
b9:e1:84:06:5e:22:1b:77:d7:52:45:80:38:3f:e3:c2:84:c9:
0a:44:1b:f4:fb:5f:75:cf:10:a3:b3:73:d6:c2:a8:6f:a3:f7:
93:d8:13:0b:b5:9a:7f:72:76:8c:4f:45:8c:95:d6:1f:ac:44:
df:d5:71:0b:07:e5:2d:46:c0:87:b4:d6:c2:f1:17:bf:a1:85:
84:20:ee:4a:58:74:df:cf:3d:3a:f4:03:db:d4:df:97:8a:47:
94:85:fc:fd:ad:de:88:20:ef:3f:78:68:16:c8:d2:da:d5:44:
85:10:0c:fa:c3:41:64:6a:29:c1:8c:0c:77:6d:95:83:8e:9b:
b6:fc:72:90:3b:e8:e5:cc:24:01:a6:26:f7:67:de:cd:f0:48:
0d:93:af:df:29:43:ca:13:a6:ac:28:3c:bf:ab:c4:10:9b:94:
b5:2f:9d:4d:8a:a2:27:d2:d6:34:94:6d:72:c5:82:4f:75:03:
ca:7b:02:f0:a2:0e:55:2c:ab:af:23:84:1b:b6:21:9b:f5:7f:
a1:6a:e8:03:d2:19:52:b1:5d:05:c7:6d:62:d4:b7:20:d2:79:
68:72:f0:79:19:70:31:27:58:3a:1f:16:94:1a:99:3b:29:cc:
d7:8b:42:95:e5:15:fd:57:16:8f:af:f1:04:8f:9f:21:bd:b0:
d1:41:87:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:46:10 2026 by rpki-client