Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53E51A3675EA11F19C4CACAECE1D38B0.roa
File: 53E51A3675EA11F19C4CACAECE1D38B0.roa (raw, json)
Hash identifier: 3s5D+IeUY0F6IoIzz5J6VKiVXTM7X/E6DUwEkaHHdsQ=
Subject key identifier: 47:46:C6:54:B9:8F:9E:7D:4E:9B:5A:63:1B:4E:45:85:5A:94:03:5C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D66E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53E51A3675EA11F19C4CACAECE1D38B0.roa
Signing time: Thu 02 Jul 2026 07:47:52 +0000
ROA not before: Thu 02 Jul 2026 07:47:47 +0000
ROA not after: Thu 13 Aug 2026 07:47:47 +0000
asID: 211826
IP address blocks: 154.197.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 11 Jul 2026 11:54:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120430 (0x1d66e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 2 07:47:47 2026 GMT
Not After : Aug 13 07:47:47 2026 GMT
Subject: CN=6a4617a8-bceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:28:14:9b:90:8e:4e:7b:a3:ce:55:8c:f4:19:
c5:cc:e6:06:b1:65:80:11:39:5e:93:11:10:a1:27:
df:de:b8:ff:dc:d8:99:44:e9:09:bc:39:cf:30:69:
c2:e2:ac:37:15:64:1f:a1:83:24:f5:df:9d:61:26:
32:30:e0:d5:83:01:60:6a:48:26:3e:83:e0:81:44:
d7:aa:0b:9b:34:6f:bd:1d:44:bf:57:b8:67:a3:ef:
83:11:27:3d:9f:f4:b4:b8:0d:1b:62:c3:24:5c:a1:
9a:cb:ec:fa:20:0b:8c:ef:0a:4b:6c:1c:58:9b:72:
f4:25:93:cb:d2:89:50:17:3e:31:38:99:4f:45:a2:
e2:6e:c6:b3:8e:ed:a1:21:b2:b5:7a:38:6f:7f:e7:
09:f5:9b:fc:6b:b1:ad:9a:42:3e:f3:4a:12:46:b3:
dc:77:b2:b9:72:07:85:fb:07:3d:7d:b3:62:37:7a:
e6:1d:45:f2:ce:b1:18:19:fd:f8:09:09:88:f9:93:
c1:6c:66:3b:7d:e7:51:db:59:2b:a8:66:72:5a:04:
75:ee:81:1d:3e:07:43:81:be:46:1c:6f:83:a9:14:
48:93:29:04:10:e7:c4:53:a4:f2:5e:19:f8:32:1d:
42:43:da:ef:5d:45:99:c4:ec:a2:ab:0e:e3:76:d4:
bb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:46:C6:54:B9:8F:9E:7D:4E:9B:5A:63:1B:4E:45:85:5A:94:03:5C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/53E51A3675EA11F19C4CACAECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.110.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:e9:53:e7:b7:46:12:2b:aa:ef:dd:33:04:40:94:4b:b0:9e:
9c:df:84:3a:e6:83:dc:5b:b5:75:41:1e:d1:76:bd:fc:ae:b6:
49:98:cc:33:5d:36:d7:36:55:b8:50:59:fc:51:02:96:03:4c:
54:59:6f:0f:dd:e2:ac:5c:1d:c2:dd:92:84:88:3d:3b:63:0c:
af:5c:ab:8f:54:ab:8b:57:bf:71:41:22:70:b1:8c:f5:c9:61:
58:12:3d:40:73:63:49:96:2a:9e:64:b3:2a:93:fd:bc:6e:45:
a1:bf:e4:ec:2f:c2:bd:1f:19:24:5e:65:6b:f7:98:5f:88:83:
cf:14:10:be:46:f0:d4:3f:d0:c8:0b:d1:21:c4:3c:3d:63:31:
74:27:a3:15:45:58:6d:8b:5d:07:1f:19:21:ab:4f:d0:92:c2:
cd:0b:94:db:17:df:3c:40:ee:71:8f:18:7c:97:b5:cd:e0:2b:
8a:80:8d:1b:b3:2d:f1:0c:49:2f:9d:a6:a8:07:57:07:1b:65:
a1:a5:dd:18:c5:94:73:2d:95:92:ce:73:42:c9:9f:93:07:76:
da:2f:56:d1:1d:bc:49:e0:db:38:31:13:4f:8c:06:5b:42:06:
1c:2f:b8:72:35:c0:70:e9:74:62:87:c9:a7:59:8c:9b:7e:80:
38:12:b6:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 16:53:11 2026 by rpki-client