Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/638A27FA922911F1A1A981A4CE1D38B0.roa
File: 638A27FA922911F1A1A981A4CE1D38B0.roa (raw, json)
Hash identifier: CSTq8jt2YLU/7rOfHpSJ0P8ohj5a1JHwtnrYY8i+kik=
Subject key identifier: 73:26:F2:DC:BC:24:D7:1C:1F:6D:06:C6:E1:47:5C:B4:BC:27:BD:FF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DD1B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/638A27FA922911F1A1A981A4CE1D38B0.roa
Signing time: Fri 07 Aug 2026 06:29:49 +0000
ROA not before: Fri 07 Aug 2026 06:29:45 +0000
ROA not after: Mon 06 Aug 2029 06:29:45 +0000
asID: 17561
IP address blocks: 154.214.2.0/24 maxlen: 24
154.214.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122139 (0x1dd1b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 7 06:29:45 2026 GMT
Not After : Aug 6 06:29:45 2029 GMT
Subject: CN=6a757b5d-5cde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:35:ae:03:ed:16:17:fc:61:ea:d3:6b:c3:8a:
16:d0:29:e2:4b:0f:9b:31:04:b8:e1:c7:60:30:11:
bd:8e:77:08:91:8f:94:ca:32:19:2d:7f:1d:d0:c4:
31:fd:90:f0:7e:25:8b:78:1b:c7:1e:72:e7:76:3b:
a1:13:41:c6:98:2c:b3:a6:e9:e2:01:9a:ff:d5:5a:
56:97:0b:c5:8d:39:33:30:63:02:19:3c:1f:cd:36:
86:4c:f5:0e:1c:5b:ea:2d:a2:1a:5f:91:e2:27:99:
52:fb:00:33:bf:56:1b:ff:a7:e9:14:ba:70:a0:dd:
3a:4d:8a:c2:0f:b9:39:c1:60:a8:a2:d1:62:0c:d2:
8a:af:b1:a9:74:61:0a:22:b9:c4:25:63:46:b3:77:
f9:cf:a3:5b:5a:9e:27:3e:00:a8:67:aa:73:65:bb:
e4:b6:00:02:6d:79:36:91:b2:15:43:e0:03:c1:82:
bf:8c:32:75:d8:b7:74:a7:9a:ff:ce:39:4c:7a:19:
2b:96:35:6e:48:e8:bb:30:88:c8:a1:19:4e:a4:da:
e6:f3:cf:90:f7:1a:bd:ce:af:92:6b:d2:9f:17:16:
f8:c2:43:09:13:31:83:34:43:28:b4:4d:b2:9b:d4:
cc:0a:02:93:1f:ca:38:9d:f5:91:80:2e:53:27:ce:
36:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:26:F2:DC:BC:24:D7:1C:1F:6D:06:C6:E1:47:5C:B4:BC:27:BD:FF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/638A27FA922911F1A1A981A4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.214.2.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:5d:51:23:ee:ee:2e:0d:eb:e0:2d:da:0f:1e:fd:5f:9c:43:
48:a4:97:71:5d:2e:a8:e5:e6:88:03:00:7a:fe:2b:49:a7:e9:
fa:8c:25:46:8b:2e:92:01:01:db:38:25:28:86:1f:d7:33:ec:
23:f0:53:55:e2:2f:01:2d:1a:a0:9d:37:4c:5a:32:13:81:b2:
7c:3f:95:0c:96:a3:69:23:71:80:b0:45:47:16:73:1e:2c:36:
59:64:52:59:19:94:68:96:b1:9c:18:0f:1a:78:28:38:b7:28:
fd:3c:5e:e8:a6:e3:e6:e8:2f:fc:de:4d:d3:88:a4:ac:ac:a7:
16:40:cc:68:ac:5d:05:b4:b7:72:74:17:14:06:ab:13:dc:af:
cb:bb:07:88:59:d2:92:6c:c3:db:fb:a4:7a:76:3b:86:5a:e3:
39:bd:21:67:e1:d4:c3:6b:7a:04:62:fc:5b:ab:9b:dc:bd:8d:
f6:9c:c0:d9:3d:ee:38:0e:d6:aa:59:2e:63:d9:06:2f:ab:85:
89:6d:42:17:c5:48:fd:05:a6:08:d8:9c:f9:2e:80:da:7b:df:
60:d2:09:5c:9b:ca:c5:30:b3:b6:f0:a5:d1:ea:8f:7d:e3:3a:
ec:c1:10:ee:92:20:77:e0:04:c4:e8:13:fe:a8:72:fe:e0:97:
f2:1f:a9:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:08:48 2026 by rpki-client