Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/135C5F08745D11F1834768C1CE1D38B0.roa
File: 135C5F08745D11F1834768C1CE1D38B0.roa (raw, json)
Hash identifier: 3/9mMil2hZIcXI8w1YeNg/GlJqxsK2Xa6GIkZZFqXK8=
Subject key identifier: B3:C7:5B:42:7D:FD:DC:75:B7:6A:6C:C9:7E:57:DF:A1:CA:09:FF:70
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D62D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/135C5F08745D11F1834768C1CE1D38B0.roa
Signing time: Tue 30 Jun 2026 08:24:13 +0000
ROA not before: Tue 30 Jun 2026 08:24:09 +0000
ROA not after: Sun 02 Aug 2026 08:24:09 +0000
asID: 197646
IP address blocks: 154.83.212.0/24 maxlen: 24
154.83.213.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120365 (0x1d62d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 30 08:24:09 2026 GMT
Not After : Aug 2 08:24:09 2026 GMT
Subject: CN=6a437d2d-0395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8e:74:ed:2d:2c:c6:d4:9f:5c:d4:2d:3b:91:
51:d0:05:b3:46:6d:c7:cd:a8:83:39:9b:5c:2f:c4:
10:ac:0e:89:41:19:48:c7:6d:d1:4a:71:bc:a5:78:
cb:d8:09:b5:21:e3:7e:9f:19:97:4f:2e:b5:bb:73:
61:11:46:64:9b:8e:3a:47:ca:c0:74:6b:ec:82:2b:
71:d4:e9:73:af:ce:9c:1d:90:58:19:44:fc:ca:fb:
eb:7e:9c:75:42:35:ce:39:22:2a:5d:1b:8d:b4:e8:
1c:3c:c5:6b:0c:66:0a:29:45:08:a7:ae:2c:a8:f5:
c4:cb:98:2f:2a:96:9b:91:ee:4d:a6:2b:eb:83:05:
86:a5:47:eb:d1:fa:bc:a3:46:cc:98:c7:ec:ed:3a:
2e:db:13:60:7e:0f:bb:bd:7c:0e:29:21:cd:00:5b:
5e:40:66:79:2f:79:2c:d3:1f:08:9f:49:18:28:07:
ac:0f:24:7d:33:7d:5e:77:11:32:fc:ab:7e:2a:52:
d9:9f:42:f7:27:d3:99:83:7c:84:e7:49:35:ef:bb:
70:47:84:9e:03:b6:e5:fc:84:cd:34:35:dd:ff:a4:
cf:4b:1e:c8:cf:49:06:8c:d0:f6:67:30:20:41:2a:
ca:09:47:11:26:6f:04:b4:e2:01:78:15:5d:7f:83:
c7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:C7:5B:42:7D:FD:DC:75:B7:6A:6C:C9:7E:57:DF:A1:CA:09:FF:70
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/135C5F08745D11F1834768C1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.212.0/23
Signature Algorithm: sha256WithRSAEncryption
b1:d1:b5:bc:10:ac:bf:f9:0f:05:06:48:22:58:d3:8d:ac:19:
33:3c:1b:79:4d:51:a2:a2:ff:69:a4:97:66:fc:08:c5:ef:23:
d5:66:ae:8f:3c:6e:35:aa:ec:66:bf:f9:a2:ce:d5:11:91:7e:
75:ab:4c:e4:57:1a:3f:8b:c4:dd:5e:c9:49:dc:c6:f3:79:d6:
af:9c:b7:fa:58:89:8e:db:03:55:ce:a7:da:5a:d0:10:e7:03:
9f:60:6b:61:20:da:84:e3:ac:a2:95:0c:26:df:8a:50:5f:28:
76:bc:99:b2:1f:c9:01:44:37:1c:23:87:c7:e5:3c:65:8e:06:
fb:a3:dc:0e:e6:6c:5e:6d:ed:54:8b:02:bc:94:ac:b9:d1:6b:
81:12:43:a3:67:c0:ef:a0:9b:ac:2c:45:de:67:91:a7:95:5d:
95:40:42:00:1b:8e:49:08:b4:31:a6:80:98:a3:49:c8:fe:d3:
4a:2d:c8:e7:b9:fc:f7:df:58:0b:11:ac:c8:d1:52:dd:72:2e:
69:a3:88:70:35:e7:7a:66:c9:26:ec:42:22:71:6c:fe:e1:bb:
3c:d0:13:0c:29:61:02:1d:ef:fe:47:69:05:3c:08:a8:20:40:
8d:2a:ac:19:ec:af:7b:c1:ea:54:f5:0e:9b:d7:d2:1c:71:84:
a6:f1:0a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:50:50 2026 by rpki-client