Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A0A0C4A923511F1A25903EBCE1D38B0.roa
File: 3A0A0C4A923511F1A25903EBCE1D38B0.roa (raw, json)
Hash identifier: YbOyHQv9teyk6qoa/6mYaAOYn4fVmIxKTvpuXn2F5R0=
Subject key identifier: 98:58:6C:94:FC:1F:B8:44:51:04:41:C7:AD:82:7A:DA:00:58:4F:72
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DD40
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A0A0C4A923511F1A25903EBCE1D38B0.roa
Signing time: Fri 07 Aug 2026 07:54:33 +0000
ROA not before: Fri 07 Aug 2026 07:54:29 +0000
ROA not after: Sun 13 Sep 2026 07:54:29 +0000
asID: 10753
IP address blocks: 154.203.0.0/23 maxlen: 24
154.203.204.0/23 maxlen: 24
154.203.244.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122176 (0x1dd40)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 7 07:54:29 2026 GMT
Not After : Sep 13 07:54:29 2026 GMT
Subject: CN=6a758f39-a577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:94:b9:8e:c8:db:ad:89:2e:32:1c:fc:5e:42:
67:c4:f3:85:ed:7e:dc:80:ed:11:91:0b:3e:e7:62:
76:85:65:28:1c:d4:88:6a:d2:56:81:6c:a3:3f:7a:
c1:d1:1f:55:1e:e6:15:77:ed:b3:f6:cc:08:3e:21:
7a:04:c2:00:fa:6c:75:64:f2:3c:1b:c6:53:ea:c3:
ea:93:7d:49:6e:fb:5f:82:4e:cc:4b:79:db:03:d2:
bb:30:f5:4d:8f:6c:01:c7:5e:59:20:e3:02:c9:db:
e6:07:aa:d7:00:70:bb:e4:e7:2d:1d:48:f8:e6:37:
36:c0:c9:fe:d0:d3:3a:3d:66:32:cb:8d:1e:85:5b:
b7:c8:0c:59:30:96:0f:d3:00:7b:93:c5:3c:79:a8:
11:fb:b7:b9:b4:d0:d0:aa:ff:bc:f4:59:2d:23:d7:
1d:a1:e5:14:d9:80:92:6a:6a:f4:7e:d3:92:b2:99:
ac:ff:e7:c9:73:82:bb:76:0c:ea:36:a9:04:f3:a6:
4d:8a:b1:09:9d:d9:fb:30:2f:1a:02:ca:65:f8:e3:
56:1f:1d:db:72:c6:d1:8f:d4:30:65:fb:be:08:33:
6d:d7:a2:88:18:52:4a:68:ec:87:82:45:d9:b8:c8:
e2:24:7a:9e:b9:25:d1:c7:a7:91:56:59:e7:e6:20:
97:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:58:6C:94:FC:1F:B8:44:51:04:41:C7:AD:82:7A:DA:00:58:4F:72
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3A0A0C4A923511F1A25903EBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.0.0/23
154.203.204.0/23
154.203.244.0/23
Signature Algorithm: sha256WithRSAEncryption
74:6f:e8:b3:be:9c:81:80:74:2c:04:f6:0e:d4:ce:c7:45:97:
ea:58:1d:34:4f:8d:a5:f6:d3:6a:c9:79:6f:78:51:a6:d2:95:
77:38:d9:d2:9c:6d:f7:f9:f0:65:ab:5d:25:f6:97:26:ba:b5:
c5:d1:12:d9:56:32:b6:c5:23:18:90:42:ce:6a:a0:13:4e:92:
ed:82:83:2e:e2:3a:93:44:c9:b8:46:22:18:f9:99:43:d6:64:
c8:48:58:3b:77:6e:87:4a:78:cb:d8:93:2d:a5:ee:75:e2:4c:
4e:fc:74:7b:23:f7:26:b1:b7:5d:6e:c0:39:1c:23:07:7c:2a:
e3:8c:b3:84:7c:bb:38:a8:64:79:46:35:b0:8f:a3:72:c4:9d:
01:8e:e9:87:eb:50:c4:4c:1b:d6:8f:d8:c9:ed:40:f2:a0:9a:
c7:bc:c9:29:16:0e:6e:cb:cc:92:a5:72:98:db:6a:51:ac:dd:
f2:2d:3b:7f:f9:a4:c8:18:59:90:86:44:9b:99:b5:a7:dc:a3:
03:ea:ab:21:39:15:cd:bf:d1:06:97:15:3c:0b:c6:16:08:7b:
3b:41:45:b7:d4:8c:74:16:05:79:9f:cb:c4:2d:6d:32:04:71:
c4:c7:1c:36:8e:56:15:c2:e2:d0:67:a9:8e:1c:67:d4:d3:12:
73:24:67:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:08:46 2026 by rpki-client