Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2105E7648C6D11F1A6E767BDCE1D38B0.roa
File: 2105E7648C6D11F1A6E767BDCE1D38B0.roa (raw, json)
Hash identifier: b13q4bgrcUOL/s2s7ND9me6O4nQcGMSpzOI9E70J4oY=
Subject key identifier: 13:37:D7:E2:1F:CC:6C:9A:DF:23:29:65:5B:6B:E5:3F:5B:6C:65:03
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DC00
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2105E7648C6D11F1A6E767BDCE1D38B0.roa
Signing time: Thu 30 Jul 2026 23:19:36 +0000
ROA not before: Thu 30 Jul 2026 23:19:32 +0000
ROA not after: Sun 08 Aug 2027 23:19:32 +0000
asID: 9287
IP address blocks: 154.85.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121856 (0x1dc00)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 30 23:19:32 2026 GMT
Not After : Aug 8 23:19:32 2027 GMT
Subject: CN=6a6bdc08-0a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:6d:3e:1f:40:b8:e7:b9:0b:3f:8f:60:d6:ca:
1b:e0:c0:37:0f:2a:09:1e:67:ac:52:bc:f4:38:8b:
5b:36:e6:89:c6:79:53:4a:10:b8:24:69:e0:86:18:
01:80:0c:61:89:ff:3a:4a:c1:b7:41:b9:8e:0f:25:
40:5d:77:eb:23:5e:ac:f2:31:a4:49:79:2a:bd:65:
99:77:1e:cd:30:39:f2:e5:d7:eb:1d:97:41:5e:7e:
17:8c:f3:ef:5f:09:dd:eb:d4:b7:a8:12:c6:47:e2:
8d:a0:ff:2b:d3:30:52:83:df:0f:2b:26:91:f4:ff:
e5:b6:7c:39:a5:66:e4:b0:11:ff:2f:e0:8c:08:69:
a6:53:28:13:4e:46:1e:6c:fd:94:fc:54:ed:82:88:
29:87:68:a0:07:00:bc:7e:d0:32:73:57:39:e7:85:
d2:3a:ab:20:f5:a3:be:7b:9b:ae:44:ec:a5:8c:b6:
f5:40:59:40:af:5e:5f:34:97:8f:aa:8c:25:93:62:
f9:db:e2:6e:ee:c2:40:33:ab:60:72:5a:bd:ed:a4:
44:8f:69:70:bd:76:77:4a:2d:47:8c:54:4b:2f:5d:
14:32:6d:98:4f:2e:14:ba:65:5c:0b:ca:65:33:44:
0d:bb:82:32:f1:ed:c3:43:ac:1d:d9:03:65:e9:b4:
f7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:37:D7:E2:1F:CC:6C:9A:DF:23:29:65:5B:6B:E5:3F:5B:6C:65:03
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2105E7648C6D11F1A6E767BDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.96.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:3d:67:96:62:93:c4:b6:64:7c:e5:21:ec:ea:2d:a0:35:e0:
c2:5a:7d:ca:90:8e:86:db:07:2e:ae:dd:45:ac:52:59:60:59:
66:64:10:91:9c:0e:e7:b6:a0:50:3d:1a:ba:95:ea:fc:c6:bf:
c8:de:03:ff:81:aa:e6:d7:8d:dc:d7:34:87:06:41:1b:01:78:
2d:4d:5d:f8:8d:d1:0c:80:1f:e7:76:4f:d6:e6:ea:a4:44:4d:
92:3b:f3:b2:9f:ec:70:4e:7b:ee:8d:0c:d6:7a:92:4a:06:38:
a9:a0:2a:6b:73:a0:cd:3a:04:aa:92:27:f0:e8:2f:c5:fc:a1:
4e:1b:83:0a:55:c5:19:bf:bf:ba:09:a0:d2:a6:1a:64:50:a5:
13:89:00:a4:2b:b0:f2:8e:83:f5:92:9a:2d:5d:31:2f:b1:03:
ca:30:06:4a:fa:1f:3c:bb:c6:bd:37:49:2d:4b:b2:1f:b2:0b:
32:db:ce:6d:67:f8:f3:ce:a3:62:36:45:ee:40:89:13:96:9d:
07:ca:80:b6:39:7a:ba:c7:df:ed:73:dd:82:d4:46:37:de:16:
48:50:80:e3:4b:6e:7b:7e:6b:e5:c3:a4:7f:c5:2c:2e:d4:50:
b6:88:74:8a:5c:c5:da:b8:e5:9f:99:c7:e6:39:32:29:69:1f:
f6:8b:3b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:08:46 2026 by rpki-client