Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45215EDE8F6111F1A22D2EBCCE1D38B0.roa
File: 45215EDE8F6111F1A22D2EBCCE1D38B0.roa (raw, json)
Hash identifier: 1Svjue5rwHEkjFL8fjNxxLEkL0hOx+ZkNCX4g+fInug=
Subject key identifier: 7C:ED:82:18:47:B8:F3:DB:B7:7B:39:D2:2A:61:AC:40:F0:78:1F:29
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DC8A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45215EDE8F6111F1A22D2EBCCE1D38B0.roa
Signing time: Mon 03 Aug 2026 17:32:16 +0000
ROA not before: Mon 03 Aug 2026 17:32:12 +0000
ROA not after: Sat 14 Nov 2026 17:32:12 +0000
asID: 211826
IP address blocks: 154.197.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121994 (0x1dc8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 3 17:32:12 2026 GMT
Not After : Nov 14 17:32:12 2026 GMT
Subject: CN=6a70d0a0-5489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f2:22:db:ac:98:e7:da:65:f8:4d:68:d2:ab:
54:f8:bd:aa:74:85:27:df:41:5d:ee:af:e1:46:4a:
ad:79:ec:53:88:81:27:93:68:e8:63:56:8b:d3:0a:
dd:f8:43:32:29:6a:ad:32:4e:c2:b3:9f:88:2b:87:
00:6c:9f:0f:ab:23:87:bb:83:0c:f3:9a:2d:47:69:
54:ce:b7:ed:84:bd:de:2a:95:3c:8a:76:c1:99:62:
9a:68:89:72:fe:a1:66:f3:b8:87:c6:de:36:c9:44:
38:7d:b7:b1:41:f7:f4:0c:08:82:39:7f:a5:0c:13:
91:81:d7:11:b0:e5:2e:45:a3:03:50:71:15:6f:d5:
00:06:03:d2:da:62:65:a7:0f:54:69:ec:e8:db:98:
d4:b1:5e:de:32:c0:a9:a7:9f:d4:8c:53:dc:7b:a8:
1d:35:46:72:81:82:21:a8:e0:db:5c:a1:11:9d:4c:
26:f0:9c:c6:46:e4:8c:34:c7:f3:aa:93:c6:d1:b2:
e3:88:3d:37:2d:7d:65:d9:05:c3:c7:33:9a:09:7e:
69:ab:50:a3:4d:57:bc:dc:75:bb:24:dd:8f:d3:f9:
95:88:f7:c9:86:de:6f:dd:df:25:16:c0:55:c3:6f:
d7:f4:1f:3c:2f:12:17:b0:22:f6:74:a5:d3:57:cc:
5f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:ED:82:18:47:B8:F3:DB:B7:7B:39:D2:2A:61:AC:40:F0:78:1F:29
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/45215EDE8F6111F1A22D2EBCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.91.0/24
Signature Algorithm: sha256WithRSAEncryption
89:8c:12:0f:01:11:c6:c1:e8:73:47:17:3f:1a:07:c7:04:ff:
6a:70:2a:f6:44:cd:80:47:84:74:db:0f:65:29:64:c2:49:2e:
95:b7:4c:d6:2f:5a:0b:c0:64:e7:1e:44:1c:4f:90:dc:ed:a2:
73:fe:42:a4:26:72:ce:2f:62:8e:f2:f1:48:81:a0:f5:58:87:
59:42:05:35:07:f8:47:af:e0:fb:46:62:1f:4d:68:e8:05:6c:
c3:42:05:89:83:ea:eb:e3:f2:b5:ac:8e:af:53:7b:a2:86:d2:
aa:f6:08:a4:d1:e9:49:10:0a:df:35:a7:61:c2:45:ca:bb:5b:
d7:67:fb:bc:89:98:f4:cb:90:af:bd:e5:59:8b:26:70:99:f4:
6a:1d:cb:e9:82:fb:8a:48:6d:7d:2a:cd:7f:82:11:0e:35:31:
df:22:54:f3:ed:15:bc:9b:ef:73:65:3c:4b:5a:0b:a7:6f:9e:
5a:2c:5b:8a:d9:a2:8b:47:b9:d8:b7:96:1b:ee:6c:39:d0:9c:
9b:fa:c1:58:d6:61:fe:06:7f:91:cf:57:5a:8b:87:7c:19:70:
91:de:68:e5:27:db:b1:d9:73:ec:32:b7:4b:29:57:cd:f0:f3:
72:ef:2e:a0:45:c4:d4:9f:b0:dc:11:f8:7d:1d:7b:4b:39:74:
e4:6b:e4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:07:30 2026 by rpki-client