Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/169D885E757F11F1B2692113CF1D38B0.roa
File: 169D885E757F11F1B2692113CF1D38B0.roa (raw, json)
Hash identifier: LjlCZYcRJXAG8rGtVII2NHtu81vpe3Am5GAQLRxRZAQ=
Subject key identifier: 8B:5F:F6:11:75:EA:1A:F2:BC:98:20:F1:D1:8E:31:D4:5E:4F:BE:2F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D65E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/169D885E757F11F1B2692113CF1D38B0.roa
Signing time: Wed 01 Jul 2026 19:00:13 +0000
ROA not before: Wed 01 Jul 2026 19:00:08 +0000
ROA not after: Tue 01 Sep 2026 19:00:08 +0000
asID: 21859
IP address blocks: 154.197.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 10 Jul 2026 00:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120414 (0x1d65e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 1 19:00:08 2026 GMT
Not After : Sep 1 19:00:08 2026 GMT
Subject: CN=6a4563bd-492f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fd:ab:4a:d4:c0:92:ba:bd:4e:4e:e3:dd:e6:
28:4b:b8:1d:7c:4e:98:b0:7c:36:44:15:6a:39:ca:
f8:23:50:21:ae:11:e5:67:13:ba:0d:e2:3f:39:f4:
9e:45:0f:e7:33:71:d0:d0:28:a5:93:86:3b:71:11:
66:9e:58:0d:c1:8b:66:0f:b8:97:ee:a8:8e:65:25:
18:77:f6:65:f4:3e:e9:77:e2:81:58:46:ac:d5:fa:
2c:91:72:9b:c0:e9:e4:91:55:09:89:63:8a:a5:35:
45:de:21:b2:11:d1:6c:6d:63:ea:09:f9:f8:8e:a2:
63:23:5d:3f:cd:e8:f8:38:4d:bb:70:8b:d9:3d:53:
bf:62:df:04:49:71:6c:36:de:a5:4b:9d:bc:b7:d0:
4b:3b:e8:d1:7b:1d:fb:87:d4:86:5e:99:c5:cd:c2:
20:0a:dd:3d:fd:db:76:73:5f:66:6f:ba:53:2d:42:
39:6f:b9:49:cb:95:5f:1e:4a:38:c0:13:9e:56:df:
73:68:9d:b7:1e:35:b3:93:ff:66:d4:b5:e8:00:2c:
d4:3f:15:45:b0:83:19:cf:1d:52:95:a9:65:24:22:
91:dc:4b:bb:13:45:c0:c8:99:9f:e1:71:0d:d8:71:
2e:9b:2f:f9:4a:69:de:9e:60:76:89:f7:39:c9:c2:
36:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:5F:F6:11:75:EA:1A:F2:BC:98:20:F1:D1:8E:31:D4:5E:4F:BE:2F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/169D885E757F11F1B2692113CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.45.0/24
Signature Algorithm: sha256WithRSAEncryption
42:32:62:32:80:8a:ca:64:f7:68:48:e0:b6:e8:40:91:c2:3e:
de:da:78:6c:3e:14:8a:a0:0c:90:dc:bf:ab:3a:f9:e9:02:79:
29:25:31:34:47:bb:b7:a8:ef:08:06:03:91:e4:9f:c0:61:ac:
1e:eb:62:73:dd:83:4c:62:aa:60:95:be:b4:c1:7b:36:4e:a3:
19:21:83:a6:aa:ac:3f:73:70:b2:b8:5c:71:10:20:64:cd:ab:
7e:95:3a:92:3b:f6:c7:24:ab:b9:5f:d0:f0:aa:8d:68:6e:49:
5a:b1:8b:c0:0b:58:13:82:0d:54:12:05:0d:ee:84:7e:16:d8:
db:72:1c:70:56:bc:bc:a2:b9:a2:4d:ff:2e:ee:19:83:c8:29:
61:3b:18:8e:03:55:4b:d5:24:a7:1c:2f:72:cd:73:49:c5:3d:
ca:88:51:1d:e4:37:90:d3:68:4a:79:cf:43:98:20:0b:d8:df:
d3:be:b7:bf:5e:a9:f8:9d:5b:53:fd:a4:ed:9a:73:66:46:33:
4a:10:f6:56:59:7b:59:23:d2:65:ff:99:00:0d:ad:d7:a2:6f:
f7:77:3a:d5:d8:07:4d:3a:8e:db:fc:41:6d:9c:95:e4:b8:ae:
eb:89:f4:af:ff:7c:8d:1d:41:78:29:cf:1b:28:ba:3c:af:8c:
d0:a2:55:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 15:51:36 2026 by rpki-client