Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42CB0AE28B3111F18BF4AEC1CE1D38B0.roa
File: 42CB0AE28B3111F18BF4AEC1CE1D38B0.roa (raw, json)
Hash identifier: BRMUciA2CdVkA4rg6zTlAxyGO1GlvpXtBd8RC9pTlQg=
Subject key identifier: 09:F0:D6:F3:9B:F6:53:68:E9:AF:27:21:E1:C5:E2:86:4B:BB:A1:27
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DBD5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42CB0AE28B3111F18BF4AEC1CE1D38B0.roa
Signing time: Wed 29 Jul 2026 09:38:32 +0000
ROA not before: Wed 29 Jul 2026 09:38:28 +0000
ROA not after: Sat 03 Oct 2026 09:38:28 +0000
asID: 209242
IP address blocks: 154.206.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 09 Aug 2026 00:07:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121813 (0x1dbd5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 29 09:38:28 2026 GMT
Not After : Oct 3 09:38:28 2026 GMT
Subject: CN=6a69ca18-ac27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:2f:10:fc:7d:0a:2d:e0:ea:26:f1:fc:81:b3:
6b:e9:37:3e:39:cc:14:dc:d4:5b:93:18:3c:95:f5:
a6:51:3e:30:06:b5:93:95:97:bc:67:76:ad:dd:43:
43:c1:12:87:5d:94:96:4f:75:a1:24:f5:ad:8e:4b:
2e:a6:9f:9a:c5:6d:9e:7e:56:dd:5e:92:69:98:14:
c7:e9:3e:1a:7b:66:83:f9:c7:d0:4c:35:87:57:a2:
20:aa:f9:3d:5f:e8:9f:db:4b:83:43:67:fe:8c:b4:
fb:df:8e:9c:51:b5:75:4c:05:95:f3:ce:97:29:ac:
97:de:3d:27:85:d1:20:57:98:2b:7f:bc:c3:6b:dc:
33:f9:fd:e8:c9:42:2e:ec:6f:2a:ce:41:6e:3d:df:
cf:35:1e:68:e1:c8:f9:39:2f:6c:26:55:22:ab:79:
d7:71:4e:bd:98:95:00:a6:a7:f4:a7:a2:42:23:c6:
3c:fd:2a:1a:b2:8f:55:da:4d:0a:74:e7:0a:07:9b:
3f:bd:7a:e9:70:ed:a5:56:4e:24:80:05:3d:0d:6b:
b7:5d:9d:2c:33:81:99:c8:0e:df:6a:02:90:96:ec:
be:34:40:9f:32:56:24:ad:b4:7b:a1:c3:d2:4f:11:
80:33:cd:46:f8:20:86:dd:5d:a7:89:15:44:f1:92:
2d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F0:D6:F3:9B:F6:53:68:E9:AF:27:21:E1:C5:E2:86:4B:BB:A1:27
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/42CB0AE28B3111F18BF4AEC1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.12.0/24
Signature Algorithm: sha256WithRSAEncryption
19:a0:29:5c:b8:3a:17:d5:5c:e4:9c:18:38:20:2b:c5:31:b1:
9b:2c:51:aa:60:d9:f2:33:8e:64:80:f1:0a:3a:91:2f:50:ed:
38:29:c3:04:ee:72:99:94:f5:56:68:e4:1a:41:ab:f3:72:43:
a5:db:49:a6:53:ec:34:f8:9e:30:e9:90:c3:86:62:87:e5:d9:
ab:7e:99:de:62:03:a1:47:76:c2:28:b7:b6:84:ed:a9:3b:25:
01:f9:11:ff:df:7d:d5:c7:e4:0b:de:15:a4:02:e2:bd:dc:43:
b7:2e:49:e5:d1:97:d2:de:28:f2:5c:80:0f:76:b5:f9:60:41:
a1:f4:37:68:00:5f:44:c5:80:a8:3a:ad:f5:31:db:e5:57:17:
97:7e:da:26:51:12:89:40:ad:5c:be:4e:07:3b:12:cb:de:e3:
1f:d5:46:fc:94:27:90:e1:83:73:07:dc:6e:ef:f7:61:3d:a5:
47:95:13:cb:d0:5e:20:d8:d7:b3:c1:9d:a1:a7:09:bf:70:02:
ea:c3:66:ff:b7:98:7b:31:d5:a0:52:4c:06:86:83:fa:99:20:
3e:b4:7a:55:f9:37:73:14:a0:9a:3a:37:47:4f:1d:c1:21:dd:
7e:f4:29:b3:a9:3c:8a:62:eb:92:f7:61:45:bb:15:42:a3:a7:
af:3c:d4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 00:45:56 2026 by rpki-client