Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/579F5C7E8C6311F19CB0D4FFCE1D38B0.roa
File: 579F5C7E8C6311F19CB0D4FFCE1D38B0.roa (raw, json)
Hash identifier: ZIbeg4+lJbyL+GxLS2pBtxcuSotAvQCDPM+UZtF3sc4=
Subject key identifier: 8B:D4:87:77:14:B6:3B:D4:7D:22:8E:2D:21:A8:1C:D0:E6:E0:AC:20
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DBF6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/579F5C7E8C6311F19CB0D4FFCE1D38B0.roa
Signing time: Thu 30 Jul 2026 22:09:33 +0000
ROA not before: Thu 30 Jul 2026 22:09:28 +0000
ROA not after: Sun 09 Aug 2026 22:09:28 +0000
asID: 44559
IP address blocks: 154.209.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 09 Aug 2026 22:09:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121846 (0x1dbf6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 30 22:09:28 2026 GMT
Not After : Aug 9 22:09:28 2026 GMT
Subject: CN=6a6bcb9d-6ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:02:e5:04:40:59:e8:a4:4e:ed:c6:89:40:91:
5a:0e:78:73:cf:8c:72:76:11:9f:a0:04:3b:4d:98:
20:3d:ad:e6:b7:27:96:1a:b6:08:0c:0d:1d:a9:b8:
fc:aa:c4:ba:2c:0e:b8:d6:6b:3e:4e:b9:2d:6c:1c:
b1:48:bc:1d:50:07:70:8b:b0:4f:a4:89:c9:ed:9d:
48:4b:d0:b9:2e:a2:06:98:d5:7e:ef:77:93:bd:e7:
c5:a5:a1:44:10:76:a6:a2:0c:14:08:81:32:fa:42:
f5:e6:30:23:b6:24:2f:f7:f1:e1:dd:24:80:4a:ee:
9d:57:13:87:45:f0:23:9a:72:35:31:f9:02:ba:3a:
25:8b:70:55:fa:64:29:ab:55:c5:63:60:41:ad:db:
fb:4c:dd:45:42:d3:fa:91:bf:44:63:59:0f:1c:3f:
ab:ea:4f:2a:9c:57:f2:9b:32:b0:5d:4f:4d:54:47:
7a:7e:ec:7f:9c:8a:00:ef:aa:ca:51:d6:8f:ab:95:
32:f2:51:5e:96:f2:41:95:10:cd:11:a9:84:d7:6c:
47:ac:91:3b:44:f0:e1:8b:52:48:df:5d:3c:99:08:
1b:0a:57:25:e4:27:4d:4b:48:34:e8:14:b1:ea:9a:
ef:f2:57:8b:35:d6:60:b8:c1:ef:ea:98:78:9a:ac:
4f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D4:87:77:14:B6:3B:D4:7D:22:8E:2D:21:A8:1C:D0:E6:E0:AC:20
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/579F5C7E8C6311F19CB0D4FFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.204.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:28:82:a3:32:20:3d:4a:04:25:f3:9e:94:9e:5f:3e:da:d4:
5c:33:4d:d4:69:ad:14:b6:b5:58:a9:94:02:fd:24:7e:95:d7:
0d:ec:b0:70:6a:60:ba:3c:fc:0a:70:32:7d:2d:4b:d1:53:98:
4f:b4:07:ce:d7:6d:ab:9a:a4:c9:20:42:3b:bb:46:90:cb:11:
27:36:b3:d5:52:16:52:b1:99:eb:9a:c7:5c:04:87:84:cc:e7:
63:93:ad:be:26:8d:cd:fb:72:73:8e:bc:a3:80:f4:2f:a3:5a:
1b:9e:12:ef:6c:a1:af:7d:eb:02:28:27:6e:70:16:d3:44:91:
8a:e9:46:4b:6a:d4:dc:c6:cb:fe:19:83:46:f7:57:7f:7f:b1:
4d:a5:5c:93:ee:bc:00:f5:10:ba:a5:e4:ea:d0:69:67:b5:19:
95:63:50:de:61:a0:c6:dc:8e:3e:a6:84:72:5a:9e:fb:7a:8c:
dc:f1:3f:4e:e3:72:52:f5:4c:f1:31:ad:c1:9a:97:fa:f7:4a:
74:96:89:b0:1a:36:b0:90:65:38:6b:ff:29:0a:b4:09:cd:f7:
8b:52:00:7a:11:e7:81:83:2f:2c:9c:64:0b:a9:1e:bd:2f:08:
3e:13:ba:37:bc:3b:ff:47:48:70:cd:53:34:2a:6c:76:ba:44:
fd:47:a8:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:07:31 2026 by rpki-client