Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4EB28AEC8F0A11F1916E2DBACE1D38B0.roa
File: 4EB28AEC8F0A11F1916E2DBACE1D38B0.roa (raw, json)
Hash identifier: 3U+BnKZHOIe6XGZC0gJ1FUGJsjtGSW0isZohgOFgxuU=
Subject key identifier: EC:DA:27:50:A7:DD:58:E2:11:D7:47:C3:19:A9:DD:9C:50:78:E6:03
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DC5C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4EB28AEC8F0A11F1916E2DBACE1D38B0.roa
Signing time: Mon 03 Aug 2026 07:09:46 +0000
ROA not before: Mon 03 Aug 2026 07:09:42 +0000
ROA not after: Thu 13 Aug 2026 07:09:42 +0000
asID: 20473
IP address blocks: 154.196.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121948 (0x1dc5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 3 07:09:42 2026 GMT
Not After : Aug 13 07:09:42 2026 GMT
Subject: CN=6a703eba-7502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:cf:1b:f7:cc:15:73:0c:06:34:e9:8e:76:1c:
7d:72:d6:ba:24:39:d5:08:ee:09:fa:ee:86:35:7f:
a3:3d:38:e4:8b:16:d6:82:11:0d:9e:35:c2:23:8e:
a2:0e:61:13:5a:d1:da:61:8b:9d:53:88:77:d9:a2:
09:e5:2f:f5:3e:59:9c:fd:8e:69:e4:23:34:98:7f:
ce:76:dd:3e:c1:51:4d:1c:4d:21:85:56:36:e8:eb:
dd:41:98:28:4b:53:57:89:d9:7f:ef:b6:80:b3:5c:
34:fe:0e:4c:b7:43:e4:b4:70:4c:f0:20:d0:0c:be:
04:63:ad:b3:96:e9:c8:a7:85:40:17:bc:61:1f:b2:
e2:e4:23:a0:fa:ac:5c:25:f3:5b:0f:02:14:e3:38:
84:fc:06:43:55:a7:79:a6:73:ee:2b:29:9c:54:e5:
9e:59:35:a8:35:75:d9:e4:fd:20:f5:31:f6:e6:82:
92:20:3d:f3:f6:a6:a3:64:35:da:07:cf:8e:8c:44:
ec:c5:3b:3c:c6:35:83:20:db:0e:b9:0f:6c:e2:34:
e3:10:0d:00:89:0e:f1:9e:d1:8e:df:63:36:b3:36:
de:43:30:8f:7d:a5:de:98:31:cf:00:3f:5a:83:35:
98:c0:e9:50:62:f7:3a:87:19:ec:a9:17:44:1f:a3:
95:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:DA:27:50:A7:DD:58:E2:11:D7:47:C3:19:A9:DD:9C:50:78:E6:03
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4EB28AEC8F0A11F1916E2DBACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.131.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:91:97:78:11:54:d3:fa:7d:d2:84:4d:a6:7b:8e:0e:09:11:
8c:17:af:35:17:9a:77:cc:8e:92:40:e1:f8:91:6c:7a:9f:9d:
e8:d9:8f:1a:80:bf:9f:e1:6f:dc:e0:2f:9a:3b:b9:ca:b5:d9:
d0:c9:3a:f1:27:61:31:6d:0d:0d:79:04:9c:f8:c5:ef:dc:9b:
c6:7c:a9:fa:22:cb:b6:a7:6a:49:38:0a:5a:17:ae:8f:41:f3:
70:ef:e5:d7:e8:0f:5b:2c:83:18:ce:19:17:04:b7:b8:d1:c7:
0e:49:76:60:63:4b:1c:9f:b1:42:fd:4d:86:44:5a:e2:a7:fe:
aa:73:e6:3f:40:d1:1f:c5:d6:f1:f5:a2:f1:35:78:eb:e5:73:
6f:33:b1:49:05:47:7f:ad:7e:d2:81:88:18:9c:70:da:b4:87:
2f:a0:3a:ba:e3:c7:0b:bc:0f:57:ba:b1:6e:5a:3e:ba:b4:9f:
b3:3e:19:e9:1b:2d:4f:b3:3a:ad:95:87:5e:c9:ef:3e:30:08:
0c:4e:16:1b:f2:2b:bc:5f:e1:b0:55:78:a9:08:8a:6e:cf:fd:
5e:a3:43:c9:67:d4:ea:92:92:b2:63:54:c4:49:60:9c:03:01:
8b:c8:68:6f:d2:39:5a:ba:9c:2d:a3:b7:c3:fa:a6:59:ea:68:
38:2b:c9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:05:47 2026 by rpki-client