Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F7892847E0D11F1A76A80D6CE1D38B0.roa
File: 1F7892847E0D11F1A76A80D6CE1D38B0.roa (raw, json)
Hash identifier: jECvKn0Pm7YKCYuKb9fUExvENqqoz1P3n7TaduIERWM=
Subject key identifier: F1:71:F9:C6:1F:86:A2:B6:C3:F1:52:0C:69:E1:67:43:63:49:95:CF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D8A3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F7892847E0D11F1A76A80D6CE1D38B0.roa
Signing time: Sun 12 Jul 2026 16:17:06 +0000
ROA not before: Sun 12 Jul 2026 16:17:01 +0000
ROA not after: Tue 10 Jul 2029 16:17:01 +0000
asID: 17561
IP address blocks: 154.212.1.0/24 maxlen: 24
154.212.2.0/24 maxlen: 24
154.212.3.0/24 maxlen: 24
154.212.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 11:51:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120995 (0x1d8a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 12 16:17:01 2026 GMT
Not After : Jul 10 16:17:01 2029 GMT
Subject: CN=6a53be01-47fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4b:41:9e:44:ec:55:c1:12:73:9a:b5:7a:60:
ee:d0:89:4b:60:ad:7a:b0:47:12:3a:b9:87:b5:62:
d2:1f:5c:ad:ef:e8:8c:29:91:48:e2:34:2c:6b:07:
0d:c1:11:89:02:86:17:e0:a6:09:1b:b3:6c:e1:0c:
53:12:fd:f8:9d:2f:b4:5a:bf:9f:ff:99:48:df:e4:
a2:76:72:c8:7d:78:1d:d9:26:82:36:5e:43:a1:a9:
40:b4:e7:82:93:d2:97:04:4c:a1:e5:de:e0:a2:7d:
c7:0a:b1:0d:f9:75:f7:be:22:b2:00:19:68:9c:55:
21:10:59:03:0f:a0:d1:98:ba:2b:65:18:8e:1d:93:
ea:89:86:85:c5:b9:5a:0c:cc:d4:6d:57:bb:2f:ac:
dd:4b:88:2f:0e:32:1f:d9:f2:71:d9:83:02:3d:33:
f1:db:30:59:69:15:15:70:c9:5d:6e:c8:44:f4:d7:
64:6c:f6:aa:cf:64:f9:03:64:02:3f:1c:90:74:45:
1b:80:ca:32:f4:1d:61:82:c1:66:ff:cd:9d:24:2a:
40:eb:60:74:5b:b6:f8:e6:01:da:a8:80:76:c9:8e:
59:b8:55:9c:7c:ce:d4:e7:97:fa:79:9f:75:02:e5:
ba:81:87:a9:08:7b:a3:ad:ed:8b:02:ea:52:3b:25:
8c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:71:F9:C6:1F:86:A2:B6:C3:F1:52:0C:69:E1:67:43:63:49:95:CF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1F7892847E0D11F1A76A80D6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.212.1.0-154.212.4.255
Signature Algorithm: sha256WithRSAEncryption
3c:c0:86:5d:fb:b6:fa:27:5a:53:fc:48:df:a2:52:6d:e9:56:
f1:f5:af:23:0f:6d:f6:14:d7:19:1f:14:52:c3:3b:37:75:0d:
6e:a1:c9:ef:aa:ce:fd:43:1f:ce:dd:48:57:4c:72:6f:af:24:
46:3c:cd:00:cf:e0:41:75:f8:0c:50:89:b3:7b:97:d9:68:fe:
60:8d:76:87:80:ac:fe:4e:39:95:c8:b0:cc:b5:8c:33:da:8e:
e8:7f:0b:1d:f6:68:5b:75:94:12:02:f5:2b:6d:69:6c:0a:10:
74:63:1b:49:3e:85:e2:90:ff:a2:79:76:13:b8:5b:bc:da:24:
98:5b:f6:36:0e:fa:fd:3d:6a:db:59:8c:2e:8e:0e:c5:d4:d4:
7a:53:40:d4:dd:a9:46:e9:b6:c0:fa:d3:85:86:0f:23:aa:bd:
df:76:6e:e2:59:d6:3f:d4:e2:9e:80:03:0c:00:f4:19:9f:41:
74:29:b4:4f:ec:7e:a6:77:d5:82:a6:d9:c2:a6:45:8b:d7:3a:
f1:e0:4a:fe:84:f1:04:08:f2:1a:f3:12:f8:ac:06:86:98:24:
5f:9c:02:ce:32:6b:b8:86:b1:72:a8:61:4d:ba:f7:0b:34:f3:
c6:88:c4:36:b0:89:87:9e:c1:e4:08:c2:7e:d6:fa:5e:eb:62:
36:2f:5a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:46:19 2026 by rpki-client