Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/440DD3168E4D11F1884D2CBDCE1D38B0.roa
File: 440DD3168E4D11F1884D2CBDCE1D38B0.roa (raw, json)
Hash identifier: Im8VtH1lF78Np5jyRI0AQj2H1dj4oCHMzxDdJQPbwcI=
Subject key identifier: 95:F1:81:7D:8A:F0:E6:74:23:9B:A6:8D:C3:A9:10:C4:55:87:10:F3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DC4D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/440DD3168E4D11F1884D2CBDCE1D38B0.roa
Signing time: Sun 02 Aug 2026 08:36:33 +0000
ROA not before: Sun 02 Aug 2026 08:36:29 +0000
ROA not after: Wed 16 Sep 2026 08:36:29 +0000
asID: 40779
IP address blocks: 154.222.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121933 (0x1dc4d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 2 08:36:29 2026 GMT
Not After : Sep 16 08:36:29 2026 GMT
Subject: CN=6a6f0191-3f79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:6b:89:4f:2b:0c:f7:a3:d6:8d:d6:7d:c4:1c:
51:c8:46:9c:bd:5e:4a:ff:4b:01:bd:56:75:c8:c1:
60:4f:5f:3f:1f:54:8f:04:28:cc:14:a8:b2:a4:12:
5d:d5:0c:6f:2d:55:68:3d:8c:69:a1:20:8b:70:bc:
71:d6:4b:bf:e8:57:8d:a3:3a:1a:e8:52:8d:f0:b7:
61:ca:bb:de:50:ff:c4:9b:9b:3c:11:9b:ac:8c:6d:
a3:4f:8a:77:30:84:0e:50:7e:06:52:77:bb:25:4a:
c9:3f:d5:82:0f:c6:3a:92:42:99:50:32:6b:6a:c6:
71:34:70:04:bc:57:c2:f9:73:49:be:3f:40:56:a6:
70:d2:da:2a:b9:28:d7:09:f5:d7:d6:33:6a:f7:30:
59:71:cb:4c:18:09:27:24:fd:64:a6:09:e3:c6:06:
1b:39:b3:99:1c:7c:14:7b:01:5e:a0:fb:80:e4:e7:
d7:75:63:80:22:b9:d6:47:c1:53:f1:72:2b:b8:eb:
41:a3:2e:30:fa:56:1c:02:13:13:45:34:7b:5d:40:
c6:a1:bf:50:e5:10:b9:9e:02:45:d6:e9:af:e8:d9:
4b:71:46:e4:53:35:9e:58:c5:72:bd:0f:d0:d9:d1:
9d:49:a4:a5:74:de:0f:bf:4d:e2:08:7f:27:da:cc:
c7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F1:81:7D:8A:F0:E6:74:23:9B:A6:8D:C3:A9:10:C4:55:87:10:F3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/440DD3168E4D11F1884D2CBDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.16.0/20
Signature Algorithm: sha256WithRSAEncryption
b8:b2:68:7c:04:13:2a:1f:16:b0:63:1f:c0:7b:a9:18:7c:67:
d0:87:a0:df:6f:dd:64:bc:93:d7:80:c9:b7:3d:b3:92:e2:cd:
1b:6f:e5:93:35:b1:0b:24:f4:4e:c9:80:e7:32:73:37:c5:a9:
8f:16:7f:d5:5e:df:d3:b9:83:b0:41:1d:1a:f3:34:85:47:d3:
35:98:03:3f:67:cb:f4:5b:a0:d2:fc:92:21:9e:f0:62:10:4a:
16:95:66:8c:1c:8d:0f:4e:82:06:2b:b6:8c:dc:f0:5c:af:42:
b7:6b:00:ff:80:18:65:87:9b:2c:98:59:ca:4a:21:33:a7:03:
c8:37:57:8e:7a:45:f2:13:63:f9:e2:f2:af:18:36:64:67:49:
d2:19:8d:a8:b2:b5:cd:a7:a8:36:24:a0:aa:2b:39:88:17:cc:
c0:b2:9e:19:dd:67:98:d4:a6:46:c4:6a:e4:de:ef:5b:b5:32:
5f:58:80:25:3b:9a:53:82:74:eb:de:18:87:52:b1:7c:9c:94:
71:06:cb:5f:fa:fc:b4:de:7b:5d:0e:7d:0a:02:12:49:33:1e:
a1:f0:9d:48:44:c7:16:5c:62:2b:51:a8:97:70:40:49:00:8d:
41:fc:a6:2b:da:35:9a:51:99:3a:cb:5c:1b:be:c5:5d:65:be:
64:73:4e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:08:11 2026 by rpki-client