Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C174B6C802111F1A5F9E702CF1D38B0.roa
File: 4C174B6C802111F1A5F9E702CF1D38B0.roa (raw, json)
Hash identifier: ffZS8BnteePoOKB9vWiLZBCuH7SqpzMicTWjxpJC8tM=
Subject key identifier: C2:63:1A:5C:74:44:3D:52:F6:BF:35:63:1B:A6:00:9B:80:61:DE:63
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D907
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C174B6C802111F1A5F9E702CF1D38B0.roa
Signing time: Wed 15 Jul 2026 07:46:33 +0000
ROA not before: Wed 15 Jul 2026 07:46:29 +0000
ROA not after: Thu 22 Jul 2027 07:46:29 +0000
asID: 45996
IP address blocks: 154.205.2.0/24 maxlen: 24
154.205.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121095 (0x1d907)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 15 07:46:29 2026 GMT
Not After : Jul 22 07:46:29 2027 GMT
Subject: CN=6a573ad9-3eff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8b:6a:a6:d8:ee:5a:8d:4a:0b:56:82:8e:20:
a0:6e:65:b7:46:ec:3f:ac:f5:22:b1:3e:81:ac:81:
57:71:69:46:a0:92:b8:b0:e8:f2:47:23:63:89:8b:
3a:1f:7f:94:cb:e2:d3:64:08:7e:ef:3b:12:58:65:
a4:40:64:3c:ff:3a:30:ef:6b:65:6f:51:e1:86:5b:
c8:52:f7:0f:3d:41:d8:b7:79:23:e5:5b:fa:ac:04:
ae:16:38:04:ac:a5:ee:16:32:63:64:ce:97:a5:da:
09:ba:3f:ba:e5:d6:62:44:a6:58:d3:03:05:8b:f3:
2c:3c:f7:c7:8d:cb:36:d3:98:e7:34:84:ef:2a:69:
28:fc:1a:12:2b:96:b7:33:85:de:f7:20:d9:4a:48:
48:57:f3:fb:64:d8:a5:c4:73:3c:c0:70:1f:24:c7:
5c:b1:c7:90:8f:02:f2:7b:26:e4:62:cd:9a:0c:bb:
70:0f:5b:a3:eb:af:05:f7:87:f6:3e:f1:ae:1b:dc:
04:34:6c:0a:8b:22:61:a3:33:9b:8e:cc:03:03:d4:
00:09:01:92:b1:88:4d:de:e2:4b:84:1b:39:c3:2e:
86:65:92:e8:67:c9:d9:fd:86:a1:0b:94:04:35:04:
4c:cc:38:16:e8:8a:22:0d:a9:55:d7:95:98:37:b7:
fd:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:63:1A:5C:74:44:3D:52:F6:BF:35:63:1B:A6:00:9B:80:61:DE:63
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4C174B6C802111F1A5F9E702CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.2.0/23
Signature Algorithm: sha256WithRSAEncryption
d7:dd:fb:05:38:4d:9e:6b:dc:a8:e9:aa:54:ae:06:07:c4:e4:
eb:bb:d9:8f:d6:38:74:5d:0e:50:19:fe:35:9b:9b:63:ea:38:
1d:1d:3f:bf:a1:88:fe:19:1d:99:dd:c9:f3:8a:ce:98:ef:3b:
0d:9e:e1:f3:53:78:05:42:6f:27:92:f6:b9:d9:d7:38:cd:ae:
eb:27:97:9c:be:ef:76:0d:b5:f2:c4:15:89:86:7c:b0:af:ba:
eb:d6:6e:60:cf:94:2b:78:6b:b2:c9:47:21:13:de:88:0c:cf:
c9:59:c0:af:8b:61:f2:0d:78:3d:08:41:e8:d1:3b:4e:7a:9d:
30:8b:31:20:84:1d:94:eb:8d:12:7a:4a:89:64:70:50:ea:6f:
10:ee:0a:27:3f:1c:11:cb:6b:4d:1b:ae:c5:1c:ea:60:1e:e9:
88:cd:8e:19:8a:03:1b:e6:0b:1e:9d:f9:56:ce:a2:a4:4b:5d:
c8:db:9f:87:7a:09:80:ea:ff:0b:ce:66:23:fb:2e:e4:f9:c7:
5d:94:1b:c6:a9:1c:d8:4f:a7:57:29:0a:1d:67:bb:10:c5:7c:
7e:78:57:8d:4a:86:31:ef:b5:32:ed:29:5c:39:82:4b:b2:32:
d4:83:9b:b5:6a:ba:a5:04:6e:14:dc:f1:f1:3b:e7:33:b6:62:
6a:18:ff:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:22 2026 by rpki-client