Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B1C361C8D9211F1BD22A0C7CE1D38B0.roa
File: 5B1C361C8D9211F1BD22A0C7CE1D38B0.roa (raw, json)
Hash identifier: Gbj0hB9jZUBWpEGk4qrNwHZqy/3ZTyUaqZsIn/PxjSU=
Subject key identifier: EA:C9:8E:D2:ED:B3:F7:02:1A:59:67:E0:F9:96:02:53:CF:9B:04:C6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DC36
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B1C361C8D9211F1BD22A0C7CE1D38B0.roa
Signing time: Sat 01 Aug 2026 10:18:36 +0000
ROA not before: Sat 01 Aug 2026 10:18:32 +0000
ROA not after: Sat 12 Sep 2026 10:18:32 +0000
asID: 214941
IP address blocks: 154.193.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121910 (0x1dc36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 1 10:18:32 2026 GMT
Not After : Sep 12 10:18:32 2026 GMT
Subject: CN=6a6dc7fc-7b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:94:d1:1e:ec:54:f1:6a:05:9c:26:89:50:75:
cc:84:e8:2f:c3:aa:be:6e:8a:5d:f5:34:45:da:b7:
6c:07:89:70:d2:39:e9:0e:26:f6:22:f4:ed:bb:68:
0b:2c:b3:6b:98:f1:98:3e:80:87:e3:d7:ba:12:1e:
ed:7e:22:7f:96:57:a5:01:13:b5:52:ee:ad:98:a4:
20:dd:b5:56:0d:70:a2:13:a9:0a:25:52:ed:4a:7a:
9e:07:9f:a0:25:ec:75:71:1a:9e:d4:5a:4c:59:23:
94:86:f3:14:72:c0:01:ef:51:e9:d0:e5:ec:90:85:
5d:df:e5:50:43:c1:05:e5:b4:25:d6:80:7c:bc:4a:
e4:c2:b9:bd:b8:fe:b6:2f:a8:60:fa:d8:49:54:79:
2a:f4:51:76:cc:32:33:c0:43:50:1a:55:44:84:62:
d9:4e:de:80:73:ca:17:62:59:fa:a9:9c:f4:7d:4e:
74:b9:66:2c:57:83:fc:b2:1d:eb:48:94:9f:ce:27:
16:44:4a:9e:9b:32:8b:15:26:7e:b7:53:d4:d6:d8:
36:0f:f5:ea:f0:90:fb:42:d9:99:1f:f3:d7:88:ee:
b0:28:5d:a4:31:4d:21:7a:5c:e4:35:af:18:0a:f0:
9c:99:d9:4e:e0:ff:9b:95:68:21:b1:c6:5b:c0:ee:
cd:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C9:8E:D2:ED:B3:F7:02:1A:59:67:E0:F9:96:02:53:CF:9B:04:C6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5B1C361C8D9211F1BD22A0C7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.0.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:54:33:7c:f1:6d:9b:a4:d9:51:ef:98:df:c6:7a:7d:ed:25:
55:5e:7b:c6:9e:d4:16:e5:99:64:ed:c9:73:36:4c:3a:32:00:
36:4f:b6:44:1b:00:bb:0b:a5:84:95:7c:ac:ff:80:52:3d:fe:
6d:68:26:d2:ce:ce:c5:b9:13:3a:6d:a4:13:6a:0a:e7:85:86:
4d:c7:76:a1:24:0a:4d:00:9a:32:c4:99:60:35:d0:59:87:94:
1a:32:69:e8:58:82:ef:ab:18:87:74:8b:3e:14:8b:b3:55:10:
fe:d8:d8:2b:72:49:ce:e6:26:70:31:18:60:cf:8c:73:03:5b:
59:af:cf:27:60:83:76:d2:77:79:91:90:79:b1:a5:4f:63:43:
21:76:7e:a5:a4:e1:69:c1:67:21:43:59:50:d0:d3:31:02:e9:
15:1d:aa:7b:df:4f:2b:d9:46:c7:b8:67:ac:7e:e3:c6:53:48:
84:77:0e:17:d9:db:0b:a4:bb:da:6a:57:76:85:46:f2:93:08:
a5:04:5e:78:66:1c:00:71:a3:ba:7e:ef:7f:ec:b3:be:eb:b4:
b4:97:37:f6:74:d1:44:f3:6f:dc:d0:5b:b2:ae:0b:4f:fb:57:
27:a0:79:90:e5:72:99:ed:6e:26:94:e7:7b:7d:ba:95:1f:17:
63:f9:51:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:08:16 2026 by rpki-client