Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/351DD612907D11F18E6184F8CE1D38B0.roa
File: 351DD612907D11F18E6184F8CE1D38B0.roa (raw, json)
Hash identifier: WWuPPqEzYK0gsC7wsaVC37B+y1AwdIHkQKi6xO7FtaE=
Subject key identifier: DC:3C:FD:65:64:DC:F0:35:44:47:80:E1:0C:E8:EE:44:EF:E9:6E:0F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DCA3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/351DD612907D11F18E6184F8CE1D38B0.roa
Signing time: Wed 05 Aug 2026 03:24:46 +0000
ROA not before: Wed 05 Aug 2026 03:24:42 +0000
ROA not after: Wed 12 Aug 2026 03:24:42 +0000
asID: 9294
IP address blocks: 154.88.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122019 (0x1dca3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 5 03:24:42 2026 GMT
Not After : Aug 12 03:24:42 2026 GMT
Subject: CN=6a72acfe-92e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fd:32:f9:2b:37:5b:44:08:73:dc:92:2c:00:
d6:54:a4:8c:66:ce:26:d1:c0:08:e7:07:1f:ae:8c:
de:1b:82:97:40:cc:ca:48:73:37:e4:6e:27:24:c8:
3d:49:67:eb:1b:2e:75:0b:3c:da:14:7b:aa:18:19:
51:3c:a9:65:f3:f5:59:6b:3d:9c:bf:39:da:96:02:
2f:b7:87:55:1c:e8:21:92:be:16:11:54:54:84:df:
f8:19:df:96:c3:bd:84:fb:44:cd:54:c4:9b:cc:6b:
38:a8:fd:59:9f:d7:1e:13:64:b3:b1:94:4c:07:c9:
aa:0c:32:20:0f:5b:2e:d5:09:49:fc:25:7e:39:1c:
77:77:6f:0c:a4:0e:9f:e3:46:c8:b9:15:26:27:fe:
2a:d3:89:bb:da:fc:4a:17:df:ab:51:9e:39:26:e1:
4d:4f:37:35:93:56:20:3d:04:5d:fd:9b:ca:7f:3f:
82:56:eb:ab:03:57:4b:0a:32:0c:cc:5d:db:11:1f:
ac:fc:e7:8d:1b:de:24:66:45:2f:43:07:2b:3a:77:
dc:b1:cc:b3:8c:48:ce:ba:5b:8d:41:b1:63:10:f2:
1a:25:55:54:3f:9a:c2:ea:a6:7a:aa:0c:3a:79:a3:
7a:6a:88:cb:be:e1:a3:cd:f1:c2:8c:14:b2:29:a7:
04:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:3C:FD:65:64:DC:F0:35:44:47:80:E1:0C:E8:EE:44:EF:E9:6E:0F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/351DD612907D11F18E6184F8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.96.0/19
Signature Algorithm: sha256WithRSAEncryption
d1:e5:c8:c4:8e:6e:5d:34:df:1b:88:67:d7:7e:16:96:23:0f:
b0:8d:a3:79:3f:27:11:ae:3e:f0:6f:d8:a8:f8:58:02:07:18:
33:5a:7d:af:18:c7:b8:6a:d8:c4:e0:19:fd:58:b0:c3:b0:9c:
fa:3f:56:29:fd:6c:ab:d0:94:3c:6e:20:fa:9b:df:d6:41:f6:
85:dc:69:90:21:df:e7:7a:f0:28:88:c9:7f:0a:f7:2b:1f:8e:
03:12:9d:66:2d:39:98:15:5a:82:04:c0:cf:5e:73:87:e5:4e:
8c:d6:c5:f7:f2:bb:9a:3e:c7:27:28:bd:7d:ee:02:f2:1c:71:
2d:dc:b6:75:e3:f1:4f:07:a2:74:9d:34:7e:7f:2c:d0:48:07:
b4:4d:5c:0d:33:7d:e3:7b:78:c2:6d:ad:4f:ac:f9:cd:2e:d0:
e1:42:f6:73:73:37:71:42:67:5b:8c:71:41:d3:33:fa:94:ee:
73:f5:eb:b7:12:0e:12:86:20:46:12:f0:3b:8f:36:74:0d:dd:
00:33:1e:0a:ef:f5:a7:fa:db:d1:1a:3c:d8:00:b0:21:f2:31:
10:10:8e:b5:df:38:94:0f:1d:85:5f:89:24:ac:55:b4:52:65:
75:0d:54:3e:ba:a2:58:68:cc:9c:3a:6c:01:44:8e:f3:5a:b9:
ae:6f:cc:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:11:55 2026 by rpki-client