Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CBDD0B28E5D11F19A93261ACF1D38B0.roa
File: 1CBDD0B28E5D11F19A93261ACF1D38B0.roa (raw, json)
Hash identifier: ypXhP6eP2s+1gIf+YtLlj2At+hdCrZozMqqKT4Jn82Q=
Subject key identifier: 0A:C8:5D:4A:BC:0D:61:31:03:0F:DF:56:E7:F3:51:9B:B7:BB:C4:9E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DC51
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CBDD0B28E5D11F19A93261ACF1D38B0.roa
Signing time: Sun 02 Aug 2026 10:29:59 +0000
ROA not before: Sun 02 Aug 2026 10:29:55 +0000
ROA not after: Wed 12 Aug 2026 10:29:55 +0000
asID: 147176
IP address blocks: 154.212.139.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121937 (0x1dc51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 2 10:29:55 2026 GMT
Not After : Aug 12 10:29:55 2026 GMT
Subject: CN=6a6f1c27-8e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:17:c7:ff:a7:bf:9d:7b:c1:18:4b:78:fc:53:
9f:72:f8:6c:9f:a9:e5:9b:f5:63:d8:01:50:e5:c8:
82:9c:8a:9a:59:83:a1:39:10:57:66:d6:fb:e9:cb:
5e:26:0c:ec:b8:a3:37:05:79:84:5b:36:3d:e9:38:
b1:73:99:aa:79:2d:18:17:4b:08:1c:7b:e2:67:37:
d3:d3:9f:d4:89:be:87:b2:2e:c4:81:c7:84:85:84:
9d:2c:39:fd:78:33:9b:b6:44:2c:80:1a:99:28:5f:
16:cf:b2:4c:56:1f:c7:a4:39:64:b1:35:09:ee:6c:
fa:68:d6:e9:3d:5e:1a:42:4d:34:ba:03:ed:35:6e:
83:9e:25:90:e8:39:4b:d7:58:81:8e:9e:89:81:88:
dc:5f:fa:3f:e7:12:24:55:1d:6d:a7:c3:b8:71:31:
82:28:f2:bb:15:5b:22:f0:f1:59:ec:9d:c4:a2:7e:
38:82:ce:80:04:99:73:53:f4:28:aa:16:95:59:c7:
05:b3:25:18:9c:f8:dc:ca:3d:fa:07:ea:d8:b3:e1:
48:88:ae:a8:49:40:23:ad:08:a6:b5:4f:ee:85:04:
18:2e:fb:8b:d9:e1:48:b1:7a:5a:ae:4b:40:57:1c:
f1:dd:98:ff:96:3e:51:fa:86:5b:c1:d6:07:9c:24:
19:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C8:5D:4A:BC:0D:61:31:03:0F:DF:56:E7:F3:51:9B:B7:BB:C4:9E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1CBDD0B28E5D11F19A93261ACF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.139.0/24
Signature Algorithm: sha256WithRSAEncryption
30:08:55:a3:99:b8:47:73:4f:ec:b0:09:7e:05:a5:9c:b9:cc:
88:88:2a:a9:81:02:63:7b:bc:e2:b7:c9:fe:ac:3c:25:02:50:
32:69:ec:5d:61:73:61:5a:a0:ba:d9:37:fc:12:97:73:23:a6:
f0:b3:74:ee:12:a9:95:ad:b4:71:6d:ca:50:1c:90:82:83:a8:
62:f9:0a:44:c5:ea:1b:8e:78:87:a7:c0:2c:3b:a4:8c:ae:47:
54:2d:7b:e4:6e:d8:48:71:4a:da:6f:a2:dc:10:58:3c:c4:24:
e6:ae:1c:94:7b:6a:a8:11:c2:c7:0b:f0:ac:39:e7:64:64:42:
d0:6e:d0:97:aa:b5:55:71:34:bd:eb:07:f1:fd:1f:3a:62:64:
ae:c9:71:2c:a8:d2:d0:73:be:a6:32:2a:be:73:6c:2b:d2:42:
0a:2c:21:15:2a:fc:44:9f:63:bf:6b:96:0e:87:02:6e:0d:54:
e5:77:bf:16:0e:57:d0:ec:cb:60:4b:e3:25:f9:98:9f:0a:7a:
45:47:cb:ce:41:af:65:24:e4:c7:f3:0d:eb:0f:e4:f0:bd:10:
6a:7e:7e:95:6f:f0:05:c0:36:e0:9f:3a:00:10:32:3c:3b:53:
ac:c8:bf:63:e0:19:dd:e2:60:b8:90:64:cc:80:e9:be:08:2a:
5e:58:8f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:08:18 2026 by rpki-client