Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1EF094B6720E11F180212DB2CE1D38B0.roa
File: 1EF094B6720E11F180212DB2CE1D38B0.roa (raw, json)
Hash identifier: +PUQZ2Zibb1SXfbqiOeQfHGXVvG9c85QUKo/LoW+07U=
Subject key identifier: 9C:11:DD:81:7B:E4:5A:C8:A5:EA:87:C0:39:7B:E0:BE:70:D5:7E:8B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D590
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1EF094B6720E11F180212DB2CE1D38B0.roa
Signing time: Sat 27 Jun 2026 09:54:00 +0000
ROA not before: Sat 27 Jun 2026 09:53:56 +0000
ROA not after: Tue 04 Aug 2026 09:53:56 +0000
asID: 213169
IP address blocks: 154.94.48.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120208 (0x1d590)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 27 09:53:56 2026 GMT
Not After : Aug 4 09:53:56 2026 GMT
Subject: CN=6a3f9db8-a9fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:54:d4:8a:5f:dc:fb:73:a3:31:b4:04:62:8b:
b7:48:70:9a:a1:15:66:fb:60:ec:4b:99:08:f9:ee:
8a:80:27:b2:e8:cb:7d:26:87:a7:b7:57:6e:50:bd:
41:a3:7c:1d:2b:3a:5f:2a:58:fa:3c:27:61:dc:81:
7e:9a:ed:ed:09:49:0b:ef:f2:2a:96:7c:e2:0f:98:
fc:53:f3:3b:fd:a2:b1:bc:8c:c4:06:41:90:9b:24:
55:91:a4:75:2f:59:1c:bb:47:e0:56:69:5a:37:be:
53:32:ea:34:16:c6:69:26:91:a2:f7:55:6b:a4:1f:
32:08:0c:72:31:0b:54:20:49:c0:71:f2:e3:f9:e5:
c7:ad:07:85:6f:6a:92:d4:e2:db:d2:d4:f8:89:77:
f8:10:82:db:69:1b:60:a4:13:bc:cf:33:68:36:d9:
74:a8:b7:fa:0d:dd:67:ac:82:2e:21:c7:4c:80:78:
af:10:32:cb:11:a8:bc:55:c6:f5:54:3a:2f:9e:7e:
df:db:c1:17:48:c0:e9:62:25:bb:4e:8e:89:d3:f9:
6a:5d:4c:1c:af:a3:f3:98:de:87:ea:d3:80:cd:c6:
e2:11:59:27:01:ac:19:73:4d:81:23:f6:02:a5:6c:
4d:d2:7a:ae:a5:dc:36:11:b1:d4:12:c2:58:7a:32:
94:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:11:DD:81:7B:E4:5A:C8:A5:EA:87:C0:39:7B:E0:BE:70:D5:7E:8B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1EF094B6720E11F180212DB2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.48.0/23
Signature Algorithm: sha256WithRSAEncryption
d1:55:5e:88:b1:ec:0d:42:9c:bb:e9:be:8f:5c:17:fc:29:70:
a5:d8:4c:2d:3a:b8:a7:10:ab:1b:b7:88:f0:e6:50:a1:67:c7:
3a:ac:b8:bf:a9:61:8f:ba:ad:31:21:e6:28:7a:d4:50:c7:51:
12:90:77:15:2a:eb:68:1a:16:b8:fd:19:75:e2:74:b9:ba:3b:
c5:7b:4d:d3:d4:07:5f:23:a4:64:cf:12:ee:8b:ea:3a:3b:41:
5c:07:c4:50:27:89:f3:60:9c:08:0e:57:41:23:69:71:ac:b6:
42:98:88:7e:1e:4f:85:ca:65:49:37:ff:14:3c:07:93:3c:dc:
dc:18:6b:5b:96:26:59:37:a7:09:da:b5:f1:7f:ce:e5:06:32:
d7:78:45:6d:65:bb:35:4b:4c:6e:48:8a:ea:e7:d4:7c:e2:aa:
e2:90:53:93:80:da:04:d3:bc:98:b1:80:4e:61:79:4b:dc:96:
98:ee:3a:04:93:27:d8:90:2e:ac:7e:2f:aa:e5:00:d8:fe:8c:
4e:e3:e5:1f:cf:6b:55:87:b1:a6:d3:6c:13:fc:c3:56:94:ef:
0f:37:8e:26:7e:df:51:87:eb:eb:43:78:5d:71:00:64:1c:2a:
ca:78:99:e9:ee:45:48:60:49:c9:6a:23:b8:3c:e7:e5:90:d9:
1d:2b:19:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 21:08:27 2026 by rpki-client