Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/660F466880FE11F1BDE22E09CF1D38B0.roa
File: 660F466880FE11F1BDE22E09CF1D38B0.roa (raw, json)
Hash identifier: vHr8t5Alpg+gyA7Kq1zeguhsa+/qM8oq5iV27Jet50k=
Subject key identifier: CC:65:49:2E:80:E7:C0:5C:92:16:01:B0:4F:EB:6B:7D:6D:8D:A3:E4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D922
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/660F466880FE11F1BDE22E09CF1D38B0.roa
Signing time: Thu 16 Jul 2026 10:09:15 +0000
ROA not before: Thu 16 Jul 2026 10:09:11 +0000
ROA not after: Sat 22 Aug 2026 10:09:11 +0000
asID: 401696
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121122 (0x1d922)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 16 10:09:11 2026 GMT
Not After : Aug 22 10:09:11 2026 GMT
Subject: CN=6a58adcb-ed95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:86:67:50:8b:95:0b:39:64:33:ea:cc:3b:3c:
2e:08:99:02:bf:79:64:42:c0:a5:e3:3a:9d:66:b7:
b0:9a:f2:b3:02:06:ea:d9:a4:93:57:a4:ce:38:ab:
24:78:6e:52:9a:b5:cc:6c:6c:86:12:90:ff:23:b0:
21:56:51:65:97:d3:d3:31:ea:3c:34:40:17:87:4b:
d9:b6:b6:b8:ec:ac:57:6d:ab:75:19:2c:42:cb:f8:
db:12:18:fe:00:e8:92:bc:ab:20:0e:1b:f9:7f:8f:
45:38:c3:2a:64:a8:54:4f:71:6e:20:95:9d:44:bb:
5f:98:3a:b5:d2:36:6e:90:a5:1c:51:83:75:c5:b3:
45:06:fb:7e:9f:93:a9:82:7d:b8:f9:45:17:6d:a7:
f8:5d:9f:51:65:92:3e:76:20:a6:e9:1b:92:64:ee:
5a:3b:2e:27:00:bc:8f:f0:87:d0:9c:7d:12:37:96:
08:21:b7:6d:b8:f5:15:4c:e3:ea:33:50:6d:50:8f:
c4:ad:12:52:fb:da:0f:a8:be:bb:c3:c5:e4:b7:fb:
82:c3:9d:da:2c:15:91:c2:0a:7b:cd:f0:fa:9e:cb:
47:97:43:e2:29:6c:f3:a8:16:77:d9:3f:eb:8f:c6:
cc:fe:6e:50:20:0e:fd:5b:46:9c:0b:94:c7:d5:79:
05:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:65:49:2E:80:E7:C0:5C:92:16:01:B0:4F:EB:6B:7D:6D:8D:A3:E4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/660F466880FE11F1BDE22E09CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
08:0b:49:77:09:9a:c4:ec:28:a3:28:c6:07:54:7a:73:48:04:
d3:31:15:f7:96:e4:53:fb:61:4d:7f:f0:f9:b5:d8:6f:dc:00:
a9:05:24:77:51:d5:5a:c9:72:70:6a:14:ea:93:17:fb:10:9c:
e2:9f:67:c6:b9:35:47:f7:a7:54:90:46:8d:a5:b0:c4:27:2d:
b7:83:4f:1a:83:d0:2f:36:20:f6:42:f8:21:21:6e:f0:30:aa:
1a:70:35:98:e2:58:be:16:66:a3:3d:f9:51:11:3f:12:5e:eb:
fb:f7:5c:2b:33:58:f6:c3:bf:55:ee:1d:c8:eb:66:3c:7c:33:
6b:d4:45:42:e0:0b:31:26:1d:79:3d:30:31:f7:ca:3c:7d:9e:
6e:5a:bf:1c:9d:00:89:6e:17:a2:63:5f:f4:43:93:d1:9c:f6:
43:d5:17:41:f4:0f:c6:8a:83:cd:bc:7e:1d:62:99:04:cf:f9:
fd:0f:c7:2c:6e:0e:a5:4b:00:b7:70:37:69:ce:5f:0e:73:a5:
de:20:18:50:bb:85:6f:56:f2:8f:9a:30:25:ff:a7:b9:d2:9f:
11:35:4d:e7:8b:22:36:47:11:da:75:cc:7f:ef:ec:ad:a8:07:
c7:23:c3:f9:63:71:42:a3:68:b8:2f:66:93:99:a0:3f:83:53:
0f:76:48:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:17 2026 by rpki-client