Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0EB41992955E11F1BCD9F40ACF1D38B0.roa
File: 0EB41992955E11F1BCD9F40ACF1D38B0.roa (raw, json)
Hash identifier: vDN+DljZPW4PscuCf+xQoWqlXkViiVSErgoq8KeyvQ8=
Subject key identifier: 24:12:1A:73:9B:0A:43:69:3C:C9:89:DC:21:B1:55:AF:2A:08:1D:97
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DE1D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0EB41992955E11F1BCD9F40ACF1D38B0.roa
Signing time: Tue 11 Aug 2026 08:24:23 +0000
ROA not before: Tue 11 Aug 2026 08:24:19 +0000
ROA not after: Thu 20 Aug 2026 08:24:19 +0000
asID: 54801
IP address blocks: 154.86.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 17 Aug 2026 00:08:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122397 (0x1de1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 11 08:24:19 2026 GMT
Not After : Aug 20 08:24:19 2026 GMT
Subject: CN=6a7adc37-fd3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:66:b0:1c:13:82:9d:05:f1:35:74:2b:3a:f9:
ce:2b:b2:19:c0:95:f1:c2:54:ba:46:fe:33:b6:41:
c1:b9:c7:80:6d:02:53:51:cb:c4:3c:fe:44:26:ae:
c6:1d:69:81:5b:14:b3:dd:a7:c5:d3:4f:4d:7d:23:
f1:ae:d6:f9:f6:da:4d:12:8b:93:a5:ae:a6:45:e8:
be:c0:bd:e0:f5:47:92:09:ba:70:34:cf:18:ea:82:
de:89:32:ba:6e:c1:cc:af:4f:00:05:13:1c:24:f6:
07:f7:7b:ff:e0:21:d3:02:57:ab:29:4f:ee:8e:b3:
5d:ff:96:be:15:1d:aa:9b:48:31:88:e0:6e:d6:70:
02:2c:ae:cf:d6:ba:15:df:32:58:d0:7d:e2:a2:8f:
3c:6c:9e:60:c4:25:3a:9b:62:35:b4:1f:ab:87:2e:
bf:9a:33:d2:4f:11:6a:79:0b:cb:da:23:de:b6:7a:
b0:31:c6:ed:8e:72:99:a8:21:33:4d:cc:b6:93:0e:
bd:fb:c9:38:51:05:2a:3b:b9:2e:79:1a:ca:cb:50:
96:f9:a3:54:05:c9:a8:d3:d7:e7:6e:ae:09:0c:99:
5c:16:c2:4d:02:b1:8d:f9:22:26:eb:7a:e7:1e:34:
88:f6:25:61:83:5b:4b:91:99:00:2f:b7:76:11:d7:
cb:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:12:1A:73:9B:0A:43:69:3C:C9:89:DC:21:B1:55:AF:2A:08:1D:97
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0EB41992955E11F1BCD9F40ACF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.0.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:27:1b:ee:03:f3:57:ca:be:be:3a:87:b4:a3:69:97:e8:39:
d5:92:34:70:2f:f1:da:8b:84:3d:88:fc:90:c6:7d:dd:89:cc:
d7:60:70:07:4c:a2:39:15:15:cf:aa:a9:68:ff:68:c7:c9:57:
ed:4c:df:5e:88:8a:6c:69:63:58:db:99:61:de:ca:86:f8:ac:
dc:f0:e5:26:da:ee:af:16:5c:35:ab:74:4f:b2:db:9a:0d:ae:
d2:b5:bf:8f:3e:04:4c:3c:13:c0:4d:6c:36:6a:ad:c9:a7:ad:
4b:a3:93:00:68:45:e4:c8:a7:7b:6c:61:f1:51:fb:16:cb:51:
9a:f7:60:eb:bd:db:21:c3:b3:72:4e:d0:9f:f5:d1:1f:ee:85:
36:12:79:35:53:ea:9e:ef:09:e6:4a:b5:ed:0a:10:c4:f5:1d:
39:04:3f:8b:1b:48:70:0a:63:6d:50:b3:e9:24:8f:30:fd:34:
85:4a:c7:4a:2c:14:2d:e5:b7:1b:a4:bf:da:d2:78:29:5f:a9:
ee:fb:a0:ae:37:1a:74:28:cc:60:b3:b4:f1:86:dd:e9:c3:55:
6d:66:0b:ef:bb:52:3d:8d:c4:07:36:b1:99:7d:e1:7e:59:d6:
51:6e:d3:7f:63:89:07:80:bb:95:a3:e0:a5:91:3a:f8:64:10:
35:03:4f:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:42:33 2026 by rpki-client