Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2116619E81B311F1B3950FDBCE1D38B0.roa
File: 2116619E81B311F1B3950FDBCE1D38B0.roa (raw, json)
Hash identifier: plV/yY9LRMGWI6ycOi1AOLhAYo9gYBS+QGVT1vg1ONs=
Subject key identifier: CB:AF:AD:28:EE:5E:1A:A0:71:72:A6:C6:E8:17:6B:BB:C1:FD:A1:F7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D947
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2116619E81B311F1B3950FDBCE1D38B0.roa
Signing time: Fri 17 Jul 2026 07:42:58 +0000
ROA not before: Fri 17 Jul 2026 07:42:54 +0000
ROA not after: Mon 24 Aug 2026 07:42:54 +0000
asID: 40065
IP address blocks: 154.89.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 12:38:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121159 (0x1d947)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 17 07:42:54 2026 GMT
Not After : Aug 24 07:42:54 2026 GMT
Subject: CN=6a59dd02-7eb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e3:53:3f:f2:ef:34:38:18:ca:36:6b:4b:79:
7a:ed:56:a3:97:42:0d:f7:31:e9:f1:b0:83:29:e0:
24:fa:17:c4:a0:c0:00:ec:31:88:95:10:c1:00:37:
f8:e2:af:74:ee:87:4f:7f:ad:9a:e5:bb:b5:5c:ab:
70:78:75:46:16:9c:ec:24:62:ab:c0:f7:df:d9:c2:
35:dc:38:7d:05:9f:96:1a:86:19:88:79:9f:68:47:
c0:d6:b0:85:d8:35:d4:3b:e4:72:2a:88:06:a2:3d:
9e:3f:5e:98:9c:24:07:e1:ad:0f:5c:64:26:fe:21:
09:87:0e:ae:a1:2e:a1:15:e4:eb:3e:b4:be:0e:03:
52:99:f2:be:f1:a3:13:a9:51:07:03:5a:f1:7b:b1:
5d:b6:0f:7f:cd:77:f7:c2:a7:40:9d:53:10:d4:d6:
fa:82:41:eb:18:3f:3c:a2:01:3a:87:7f:2c:6c:40:
eb:36:eb:b3:31:78:fe:62:38:31:9a:43:74:aa:e1:
b8:e5:1a:7f:fe:29:ef:e2:c7:1b:c3:c3:cb:6f:d0:
69:17:8f:91:08:63:91:94:02:ca:ed:5c:45:64:21:
09:6a:49:34:60:c3:cb:be:70:27:db:24:08:08:ad:
ee:7a:92:a6:d2:0e:0e:0a:2a:0d:34:57:3c:0e:ca:
58:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:AF:AD:28:EE:5E:1A:A0:71:72:A6:C6:E8:17:6B:BB:C1:FD:A1:F7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2116619E81B311F1B3950FDBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.160.0/19
Signature Algorithm: sha256WithRSAEncryption
b1:c0:a2:eb:22:ab:a2:2f:b5:4b:94:27:8e:02:60:65:71:6c:
87:21:8a:d5:e9:8b:76:db:6e:84:08:0b:fa:b6:77:69:54:ec:
b5:32:ed:eb:82:0c:4c:4e:18:79:9c:ec:9d:36:21:66:18:2d:
59:ea:9a:37:cc:36:5c:d0:07:26:c5:39:08:a6:36:54:1a:07:
2a:28:51:8a:a2:a0:73:f4:1e:49:71:c2:44:0f:4b:52:25:81:
a6:b4:e1:6b:f0:fd:8c:4d:11:e8:21:13:f8:cf:92:dd:74:3f:
79:0d:11:d6:14:95:97:33:cf:58:2f:4b:d4:d2:20:98:ac:e4:
52:85:b9:f7:60:32:c3:34:c0:3b:14:c9:1a:66:4f:5f:f7:f8:
98:30:b6:da:31:31:06:d3:92:b6:2f:0c:0b:6f:11:d3:bf:21:
5f:2e:ba:4b:28:60:38:76:21:2c:8c:7f:04:85:c1:6c:3d:e3:
ee:bb:f2:68:c5:9b:af:d3:dd:c3:44:e8:d1:3e:83:3b:ca:ef:
ce:0a:5e:3f:6d:41:9f:ea:a7:37:aa:8e:4f:62:68:14:54:e4:
e0:76:67:b4:89:da:a0:1c:3d:14:45:d4:86:a1:ca:75:60:66:
8f:b8:88:ec:0d:ba:cd:9d:b9:2e:d7:c9:c6:98:ae:a6:20:cf:
2f:04:d3:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:17:13 2026 by rpki-client