Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22DDE7667C2E11F18C799CFCCE1D38B0.roa
File: 22DDE7667C2E11F18C799CFCCE1D38B0.roa (raw, json)
Hash identifier: VEiux6hC9Sg05mDvzugwKUKuOhOYC/+El9FbWS+9vhE=
Subject key identifier: 74:3C:63:56:52:4B:7F:71:43:4D:0A:C3:6F:F7:4A:79:F9:C1:EE:46
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D7D9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22DDE7667C2E11F18C799CFCCE1D38B0.roa
Signing time: Fri 10 Jul 2026 07:08:22 +0000
ROA not before: Fri 10 Jul 2026 07:08:18 +0000
ROA not after: Sun 16 Aug 2026 07:08:18 +0000
asID: 25198
IP address blocks: 154.193.129.0/24 maxlen: 24
154.198.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Jul 2026 17:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120793 (0x1d7d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 10 07:08:18 2026 GMT
Not After : Aug 16 07:08:18 2026 GMT
Subject: CN=6a509a66-d651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:01:5e:ef:b4:48:b7:04:88:7d:40:5c:ee:9e:
b1:5e:79:04:5e:52:09:b3:43:a2:99:8d:4d:b7:ce:
3a:f7:1c:98:87:9c:fa:83:45:ea:26:d9:2c:14:4f:
56:8f:87:a1:de:a4:3b:83:a5:7c:0c:d4:d3:af:b6:
05:03:d5:6b:21:e4:d0:fe:35:3d:12:85:3c:29:fe:
b1:5e:6a:af:f3:0e:a7:9d:27:40:0d:c8:d5:43:76:
ce:f2:09:3b:a7:9f:27:ee:63:b4:57:59:d7:5b:46:
c1:f4:e4:e7:5a:58:82:77:cb:6d:04:cf:80:78:04:
16:13:b4:05:e1:13:b1:57:80:1e:8b:7f:f4:7b:12:
f9:75:d4:a1:de:ba:9c:3f:bd:ea:ef:f3:3a:57:9e:
82:b0:b2:0e:41:dd:95:66:37:89:5c:22:e5:10:a1:
1c:54:55:e8:79:f4:6e:8c:82:b5:be:3c:bf:77:6d:
4e:62:95:b4:8c:3a:ef:4d:55:c4:50:5a:e5:5c:60:
a9:3c:10:11:bb:ae:ba:95:9f:d0:ad:76:ce:15:bd:
a7:7a:7f:17:04:1c:74:42:5c:24:17:3d:1c:85:35:
6e:19:9b:f4:90:4f:ad:a4:f8:c5:cb:83:c6:a4:58:
94:c9:d6:52:1a:6e:f5:58:10:e6:d4:06:4d:65:47:
71:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:3C:63:56:52:4B:7F:71:43:4D:0A:C3:6F:F7:4A:79:F9:C1:EE:46
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22DDE7667C2E11F18C799CFCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.129.0/24
154.198.10.0/24
Signature Algorithm: sha256WithRSAEncryption
c3:c1:dd:1b:df:9d:7d:b9:85:75:aa:b3:59:ab:a3:9d:f7:7b:
a9:83:51:59:42:cf:9f:ce:10:fa:7f:a4:51:97:18:b7:5a:24:
ba:9d:3b:fc:12:db:e7:86:b5:be:c6:4e:d0:38:97:80:2c:03:
47:ff:03:0d:54:94:7f:1f:24:28:01:ee:e6:fc:77:6f:75:f0:
5e:7a:25:73:ec:7b:b5:c0:6a:3e:41:37:df:fb:c9:bf:3c:36:
1f:8d:5a:30:55:4f:79:ec:42:be:f1:de:7c:c8:3f:2a:8a:c3:
91:a6:87:7c:d4:14:dd:03:65:d9:ad:ea:90:30:5e:7b:3d:5d:
49:d7:58:82:8f:af:45:6b:54:70:9f:ab:54:a3:09:5c:6a:bd:
16:98:1e:30:c2:25:13:fe:b6:37:17:ba:4f:bd:4e:1e:1c:c4:
1b:c4:8b:fe:b1:bd:1e:65:6e:41:4b:34:ff:86:e7:5f:80:20:
d7:d9:c0:99:bf:41:58:23:0f:9d:8a:35:36:c1:24:9d:83:57:
12:85:f8:9b:35:a8:7e:7f:46:3d:eb:8b:c4:85:a6:0a:4c:b9:
17:b3:09:ec:df:36:ce:f4:a4:a6:7c:08:04:45:7e:ea:fb:aa:
ee:68:7a:79:76:ab:05:3a:43:7b:ad:2d:26:67:63:1c:56:39:
97:13:3a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:37:47 2026 by rpki-client