Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1538804275FF11F1997892A9CE1D38B0.roa
File: 1538804275FF11F1997892A9CE1D38B0.roa (raw, json)
Hash identifier: iu3XgNexpI6f9Jc04oXwr2P5AZfOG2RGtw7zb14Bi/E=
Subject key identifier: 85:09:26:12:BD:05:E5:39:FD:84:10:E6:9E:16:5A:12:17:7A:EB:5C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D676
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1538804275FF11F1997892A9CE1D38B0.roa
Signing time: Thu 02 Jul 2026 10:16:26 +0000
ROA not before: Thu 02 Jul 2026 10:16:21 +0000
ROA not after: Sat 25 Jul 2026 10:16:21 +0000
asID: 9304
IP address blocks: 154.92.216.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120438 (0x1d676)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 2 10:16:21 2026 GMT
Not After : Jul 25 10:16:21 2026 GMT
Subject: CN=6a463a7a-0bd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b3:1e:50:56:12:ac:5b:f4:2c:7a:53:3c:87:
2e:4a:8a:61:be:83:01:0d:a1:6c:b1:76:62:c5:11:
b8:89:3b:8d:33:4d:d0:0e:2c:80:21:36:e4:f6:39:
86:1a:fa:2e:56:91:1f:72:1c:d6:c5:77:45:47:00:
3e:e8:f2:dc:c5:9e:9a:57:a1:7b:57:76:2f:e5:ba:
47:9e:89:ae:12:7a:29:a0:0f:93:77:ac:43:27:d4:
5e:4b:c7:b6:00:57:ab:81:02:56:1b:31:4a:03:df:
5f:b8:dc:59:a5:af:30:e3:b3:80:e3:79:06:d2:52:
78:27:8f:c7:f7:e4:46:1a:31:41:de:50:e1:c8:54:
e6:65:a4:9c:fe:5d:54:4a:70:47:be:1a:b0:87:62:
eb:99:1b:b3:cf:1e:de:47:43:0f:c2:9c:25:50:25:
64:9d:85:64:a9:29:07:51:5f:95:6a:b6:26:cd:54:
0d:1f:29:46:fb:bd:18:aa:df:63:8a:4e:c9:bf:c9:
0a:65:4e:a0:0d:77:d6:42:2d:d8:4a:2e:33:f9:ab:
77:d3:90:42:97:ab:5d:24:07:64:81:45:4b:1d:23:
c1:be:7f:56:42:ca:a7:9a:71:b1:b6:fe:4e:72:eb:
89:15:cd:3c:51:e0:54:1f:ad:2c:8b:04:31:83:dd:
a5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:09:26:12:BD:05:E5:39:FD:84:10:E6:9E:16:5A:12:17:7A:EB:5C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1538804275FF11F1997892A9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.216.0/21
Signature Algorithm: sha256WithRSAEncryption
ac:85:da:39:67:74:42:b6:9c:c3:be:e1:17:0e:0c:c1:f7:6d:
ab:a1:ef:17:6b:b8:2b:01:0f:1e:82:2b:28:c8:94:bb:a9:f1:
d3:b3:c6:c9:f7:09:14:43:93:e2:21:4c:f1:78:92:24:bf:15:
59:a6:a3:f6:ef:7b:96:97:ea:53:df:72:75:ba:24:62:12:5b:
06:68:5b:10:b5:ec:24:8d:9c:08:20:45:fa:e5:4e:44:8b:52:
02:59:f4:69:f7:8c:81:f6:8d:e1:73:21:11:8d:8f:5e:23:d9:
ce:c8:f0:8f:c8:28:8f:70:f0:ba:e2:17:65:d0:87:87:f8:13:
1f:a6:30:e4:a6:9b:d1:ed:46:bb:fb:c3:fd:a0:05:51:d3:22:
0e:ff:f4:cd:0c:43:cc:47:9e:2c:41:3e:92:ea:b5:76:dc:cc:
12:31:09:4f:93:14:3f:a7:54:bf:84:a0:b0:e6:ca:fc:d1:db:
89:8a:ee:48:e5:b7:ed:19:c4:df:91:3e:a4:08:f4:5a:7c:4d:
12:09:c4:cb:0a:73:ec:29:52:a5:41:17:83:dc:df:0f:5d:34:
21:99:7f:22:c4:1e:78:08:84:17:c2:17:43:4a:b3:c7:55:02:
d7:cc:05:02:e3:e0:0b:6b:2e:ef:1c:0d:54:35:18:7c:9e:51:
07:dc:31:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:50 2026 by rpki-client