Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/38BFDE987F7811F1B5902CFBCE1D38B0.roa
File: 38BFDE987F7811F1B5902CFBCE1D38B0.roa (raw, json)
Hash identifier: n6Fp5YSJV6zTyVXSiMfRHvzP1VdFpruuE7tglK+EQDg=
Subject key identifier: 03:6B:DA:27:E6:E9:7A:4D:33:32:CF:70:B0:6A:61:C3:B1:B9:E5:84
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D8EC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/38BFDE987F7811F1B5902CFBCE1D38B0.roa
Signing time: Tue 14 Jul 2026 11:36:15 +0000
ROA not before: Tue 14 Jul 2026 11:36:11 +0000
ROA not after: Sun 23 Aug 2026 11:36:11 +0000
asID: 215224
IP address blocks: 154.83.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Jul 2026 17:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121068 (0x1d8ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 14 11:36:11 2026 GMT
Not After : Aug 23 11:36:11 2026 GMT
Subject: CN=6a561f2f-d8d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:57:09:c8:8e:b5:ba:35:44:8b:83:ef:f4:82:
c3:71:2d:66:9d:4a:3b:e3:aa:00:9a:27:f4:ab:79:
9e:61:d0:b9:ca:41:a9:30:cd:8b:ed:ca:44:b1:e3:
b4:64:ec:63:e9:22:17:1b:0a:32:d8:a7:42:b3:54:
de:a4:d7:34:7c:43:89:02:c5:14:bb:eb:e6:43:6a:
83:dc:8b:11:be:c3:10:bb:44:ac:d3:87:9c:64:ed:
9f:55:b3:bb:23:9f:00:b5:30:e5:29:5d:c8:c8:f0:
a1:bd:44:e7:45:7a:c2:35:62:e1:d3:df:5f:fc:79:
e9:f0:fd:c9:0e:71:70:87:55:e6:17:ce:72:3a:3d:
8b:00:48:57:da:62:e1:0a:e9:ea:d8:0d:f7:bf:19:
32:7b:1e:ac:5f:34:43:1b:eb:a0:aa:60:9c:f2:07:
da:56:a6:d3:86:e3:df:c9:97:2b:76:06:b0:ab:51:
3b:7d:7f:19:1a:44:7a:b4:49:fa:00:3f:7f:cf:4e:
10:98:ee:89:74:86:cc:0b:f2:ed:bc:96:62:33:c8:
45:f9:4c:9e:88:b3:28:a5:b7:c4:9e:3d:5e:db:16:
26:21:9b:df:fd:03:91:aa:f0:f1:59:c7:e2:ad:78:
69:e8:24:17:44:f0:b2:9c:09:6d:a6:8f:6d:43:89:
f9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:6B:DA:27:E6:E9:7A:4D:33:32:CF:70:B0:6A:61:C3:B1:B9:E5:84
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/38BFDE987F7811F1B5902CFBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.134.0/24
Signature Algorithm: sha256WithRSAEncryption
96:d7:d1:9b:35:b5:6f:d9:39:4d:20:e8:fa:72:92:2d:b7:21:
c2:5d:2a:88:c3:dc:05:e4:ca:b6:fe:a2:10:82:8e:82:69:e5:
50:d2:14:1d:fc:d0:7d:43:37:e3:8d:59:9b:b3:79:ec:1b:b4:
60:22:89:84:de:e9:8c:31:71:16:61:c7:84:6b:8f:a0:46:ea:
7e:e1:ce:81:07:ea:88:1d:4e:ce:34:c7:cc:fb:c6:d9:fd:54:
26:5e:8b:f9:b4:8c:79:4a:aa:6f:25:98:2a:9c:a5:25:9b:dc:
39:28:ea:b1:7a:9e:eb:93:55:5c:3b:e9:6e:a8:9f:19:8a:a3:
bc:50:72:ab:f7:8a:02:8a:50:a0:7d:a6:ce:43:3b:bb:55:9b:
20:3e:b5:61:a7:32:6e:b4:01:3e:44:f3:97:36:a0:94:59:b2:
95:39:83:3a:54:86:d9:03:b1:e1:fa:61:fb:10:59:39:56:b8:
d8:6e:e6:77:5b:0d:16:71:f4:1d:5b:42:e7:55:98:c1:ba:c8:
69:00:51:66:17:6d:ae:97:29:34:4a:44:e8:99:54:7d:2d:9f:
be:88:f8:10:87:d9:07:86:34:38:46:73:83:fe:56:eb:28:ef:
ac:0f:8e:31:1d:9a:fe:11:04:28:2b:02:2a:ef:54:39:d1:30:
33:80:a4:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:35:05 2026 by rpki-client