Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D40EA2C7D9411F18C738EEBCE1D38B0.roa
File: 0D40EA2C7D9411F18C738EEBCE1D38B0.roa (raw, json)
Hash identifier: XJv13LbYGKtKRyuWfvYpE2SA2CfyaHXxyziVqsEnfVg=
Subject key identifier: ED:79:36:C7:47:B9:4E:67:35:A5:02:BB:29:20:FE:94:B2:7A:8A:6E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D86B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D40EA2C7D9411F18C738EEBCE1D38B0.roa
Signing time: Sun 12 Jul 2026 01:50:26 +0000
ROA not before: Sun 12 Jul 2026 01:50:20 +0000
ROA not after: Tue 10 Jul 2029 01:50:20 +0000
asID: 17561
IP address blocks: 154.214.4.0/24 maxlen: 24
154.214.5.0/24 maxlen: 24
154.214.6.0/24 maxlen: 24
154.214.7.0/24 maxlen: 24
154.214.8.0/24 maxlen: 24
154.214.9.0/24 maxlen: 24
154.214.10.0/24 maxlen: 24
154.214.11.0/24 maxlen: 24
154.214.12.0/24 maxlen: 24
154.214.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120939 (0x1d86b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 12 01:50:20 2026 GMT
Not After : Jul 10 01:50:20 2029 GMT
Subject: CN=6a52f2e2-4aa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8c:72:a3:87:08:b5:db:9f:92:c2:79:fd:18:
30:ac:d2:3f:23:e3:c6:02:8d:66:26:37:33:fc:31:
fa:04:84:61:93:4c:af:4b:ef:aa:86:50:c4:c4:62:
06:19:d1:34:c2:6a:27:f6:1f:8f:41:46:8a:81:cf:
7a:32:32:0e:b1:ea:7d:f4:3a:5a:3e:d5:21:bd:a5:
31:3d:49:1c:20:12:c2:c0:72:32:9f:4d:5b:1e:8a:
5b:6b:30:43:e1:b8:9e:aa:77:e5:fd:03:34:97:9e:
d1:82:ea:aa:b7:5b:7a:7f:54:9d:e1:a9:e9:22:9a:
82:5e:d6:fd:b2:3a:af:37:c2:ff:34:d8:4e:86:aa:
fa:e9:37:73:62:e2:01:27:72:89:c5:16:58:1f:17:
b5:a8:02:e1:1a:98:ec:05:de:07:0e:a1:9a:c1:df:
a9:8c:9e:58:53:23:f5:3f:c6:1b:03:09:39:4d:cb:
79:c3:f7:cf:e5:67:62:5e:5b:f3:c2:71:78:d0:96:
d8:df:0e:8f:2c:40:fe:79:7d:b3:e1:63:7c:96:22:
77:a9:c3:9d:ab:f2:54:5c:cf:de:97:b2:4d:79:4a:
73:3f:f4:34:83:bf:8f:3f:a2:98:0f:ac:d9:c5:29:
1a:7a:95:2a:92:41:77:a5:12:72:38:0e:5b:45:3e:
53:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:79:36:C7:47:B9:4E:67:35:A5:02:BB:29:20:FE:94:B2:7A:8A:6E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D40EA2C7D9411F18C738EEBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.4.0-154.214.13.255
Signature Algorithm: sha256WithRSAEncryption
4a:00:ab:45:b9:64:b3:73:4d:db:ee:d2:81:05:74:7b:cc:e9:
eb:6a:e7:8c:68:4e:36:79:ff:1b:5b:78:7b:82:40:73:f3:48:
59:44:c6:1c:3a:a9:63:8b:fe:e8:66:06:50:46:0a:e3:20:a9:
74:65:9b:ae:00:b6:43:75:81:3e:e9:0e:6b:86:2b:03:e5:13:
3d:01:a7:20:89:ec:9b:fa:45:ce:0a:2a:bd:73:46:71:88:7a:
38:1c:4f:d5:a3:e2:d1:44:89:38:66:47:74:a3:9f:80:e9:26:
8c:5a:dd:8b:86:be:5c:38:99:ca:15:56:8f:00:54:96:f5:d7:
ae:93:45:aa:cf:c3:26:fe:81:18:80:4f:d0:5c:3d:84:20:e2:
61:24:ae:d3:a5:d1:37:ff:1d:69:08:e4:32:af:71:ed:19:9d:
64:e4:33:fd:37:b9:fe:2b:5d:d6:60:de:6b:8c:f7:a8:17:ed:
7f:23:4c:5c:fb:3d:96:55:a9:7a:4a:67:20:94:be:3a:60:73:
c0:a7:c6:e4:66:23:fe:01:6a:e7:fd:8f:03:ad:dd:86:e6:b2:
3b:20:38:93:26:e9:f5:fb:c1:b9:49:05:dd:c1:2b:86:6b:f4:
ea:9c:34:25:ba:79:06:df:a1:42:15:fa:67:ce:3c:b0:35:89:
db:dc:88:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:20 2026 by rpki-client