Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/109F7C0C7C4411F1B2BE58FECE1D38B0.roa
File: 109F7C0C7C4411F1B2BE58FECE1D38B0.roa (raw, json)
Hash identifier: W9jaaBeMdkolRc88VBV6CC1KXNn5v2oru6ZljgR6KBY=
Subject key identifier: EA:A4:81:A7:FD:2F:08:C6:B5:09:CC:C6:02:FC:64:2B:E4:F9:39:98
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D7EF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/109F7C0C7C4411F1B2BE58FECE1D38B0.roa
Signing time: Fri 10 Jul 2026 09:45:21 +0000
ROA not before: Fri 10 Jul 2026 09:45:15 +0000
ROA not after: Tue 18 Aug 2026 09:45:15 +0000
asID: 8796
IP address blocks: 154.193.192.0/18 maxlen: 24
154.193.192.0/20 maxlen: 24
154.193.208.0/21 maxlen: 24
154.193.216.0/21 maxlen: 24
154.193.224.0/20 maxlen: 24
154.193.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 12:38:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120815 (0x1d7ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 10 09:45:15 2026 GMT
Not After : Aug 18 09:45:15 2026 GMT
Subject: CN=6a50bf31-a25a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:e0:c1:7c:d9:17:f8:8c:d5:68:a2:db:3c:2b:
cc:ea:a2:17:04:e2:d8:17:ff:3b:c3:95:d0:e1:5e:
fd:92:25:d4:59:18:dc:39:03:7b:9e:3b:50:28:4e:
3f:17:76:74:e2:8d:fa:b3:60:86:87:4a:0c:b8:21:
65:4f:0f:b9:e7:a5:40:c0:91:e5:1b:1f:4d:1a:bb:
df:38:27:90:17:7d:6f:9a:f3:75:38:41:c8:04:76:
25:49:72:0d:38:09:53:62:a7:df:7d:e6:ce:bf:e4:
93:93:75:a6:de:a5:42:6e:41:de:48:ff:f9:a4:a9:
44:f0:8b:cc:de:58:34:6f:eb:96:c2:bb:f2:bd:f9:
65:64:ce:91:20:37:58:86:94:c4:fd:d1:92:2a:ed:
b7:e7:6a:eb:4d:33:a7:dc:f8:78:45:f1:3d:c9:e1:
7f:de:11:9f:12:87:c3:8b:1a:80:ec:68:ce:2d:a3:
25:e9:b3:20:a8:5c:50:e8:5d:b2:41:74:d0:ee:44:
3f:0c:48:60:53:42:55:61:0e:dc:de:02:d0:ce:ef:
88:00:0b:36:0f:47:79:61:c2:a6:9a:de:bd:92:8e:
b6:dd:56:98:83:da:63:d5:dc:bf:f0:b7:35:fb:35:
ae:9b:00:f0:8d:8e:85:d6:44:a5:83:36:68:87:4c:
4e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A4:81:A7:FD:2F:08:C6:B5:09:CC:C6:02:FC:64:2B:E4:F9:39:98
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/109F7C0C7C4411F1B2BE58FECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.192.0/18
Signature Algorithm: sha256WithRSAEncryption
76:9a:cc:f4:84:2f:ce:02:95:6e:38:71:94:f1:23:a9:a5:1a:
41:f8:61:b4:7b:7e:fb:26:34:1d:63:97:61:c0:c3:7d:e6:45:
39:ac:ad:59:4f:b1:98:89:bf:6d:41:1f:51:da:1e:ca:63:0c:
20:1f:4a:de:64:e7:5a:96:e2:5a:27:7b:5e:53:f7:85:b2:9a:
8b:f3:b0:1c:76:01:b0:cc:80:53:d4:b3:79:5b:10:6c:f5:a1:
76:96:8c:73:71:67:48:07:b2:62:76:ad:84:82:3b:45:9b:7f:
25:41:6a:38:03:e6:30:af:53:5b:12:8c:81:22:a9:ec:a5:4a:
66:2f:98:2d:a7:c4:31:1d:df:06:61:e3:b0:03:a7:c0:57:2e:
29:5d:b2:ce:bb:54:45:23:08:7e:b3:5a:a7:fd:d4:4c:6c:f8:
c7:e0:d6:90:d8:88:4d:5b:9e:46:dc:4a:cf:8c:f3:88:86:99:
73:d6:56:59:6e:4f:6e:68:29:04:d6:9b:c0:e8:62:38:b3:50:
cf:14:3c:d5:ee:d0:cc:13:b9:f8:d2:c1:a8:c5:e0:f8:a9:47:
81:a0:01:ad:46:4a:e5:19:2f:12:ef:7e:dd:ee:97:04:34:cf:
e3:fc:c2:3d:23:1a:49:a4:06:1e:9b:35:c5:ee:90:ab:16:e6:
64:08:62:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:06:29 2026 by rpki-client