Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/678655D67DA211F1BA14EAD0CE1D38B0.roa
File: 678655D67DA211F1BA14EAD0CE1D38B0.roa (raw, json)
Hash identifier: eJHaC2R5C0brHEIUd8d9ATMDwsERIkBUdO8f3R72kuM=
Subject key identifier: B6:1B:E6:5B:C7:74:85:70:B8:3A:10:E9:FF:B0:62:86:50:06:4D:B5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D87F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/678655D67DA211F1BA14EAD0CE1D38B0.roa
Signing time: Sun 12 Jul 2026 03:33:10 +0000
ROA not before: Sun 12 Jul 2026 03:33:05 +0000
ROA not after: Tue 21 Jul 2026 03:33:05 +0000
asID: 152179
IP address blocks: 154.91.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Jul 2026 03:33:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120959 (0x1d87f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 12 03:33:05 2026 GMT
Not After : Jul 21 03:33:05 2026 GMT
Subject: CN=6a530af6-ace4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:af:f1:76:ef:c9:45:95:77:a7:3d:8c:20:24:
7d:7b:00:29:08:21:74:93:c6:f2:b9:11:1b:7a:5b:
39:98:0f:cc:86:2c:67:48:3f:d8:ee:d9:35:42:0e:
69:63:83:20:a6:57:52:2f:28:ee:b5:21:09:04:5e:
76:64:ae:75:3f:e3:41:91:4d:9d:60:92:a9:1f:2d:
81:a6:7d:f8:12:b4:54:97:68:c6:1f:d2:62:9e:83:
e9:80:00:28:99:b0:d4:93:c0:ce:27:91:5f:d2:47:
4e:d3:12:62:e6:e6:ed:ef:c1:8e:e4:0e:7e:6b:60:
33:14:2f:57:79:0c:28:6b:59:a7:d0:29:a4:ba:c6:
aa:bb:c3:bb:f3:32:38:ad:b4:49:cb:61:aa:ec:4e:
69:aa:93:8b:33:ea:8c:4f:49:97:d1:4a:33:55:07:
31:ee:93:e2:c8:27:09:42:4d:ae:a6:13:0a:cb:17:
d1:26:85:1b:b2:df:9f:99:c8:bd:44:a7:f3:ae:90:
96:06:8a:77:30:08:f2:ca:f7:a2:d1:3e:25:66:fd:
b9:dc:54:8a:34:1c:14:a7:df:f1:9b:f0:24:95:e8:
14:69:81:2c:1c:3f:68:05:1e:74:ba:ce:d0:8a:6b:
7c:73:71:a7:a8:21:80:77:80:fd:b7:c1:65:1f:3b:
b8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:1B:E6:5B:C7:74:85:70:B8:3A:10:E9:FF:B0:62:86:50:06:4D:B5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/678655D67DA211F1BA14EAD0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.201.0/24
Signature Algorithm: sha256WithRSAEncryption
ba:5c:4a:dd:10:9d:5a:8f:a9:9d:b8:f7:b7:86:57:17:e4:b4:
56:7f:dc:13:d3:0c:0a:75:58:ca:9a:43:ed:15:7a:f5:c0:b0:
61:b5:a2:8d:25:b8:7c:66:e7:12:42:58:07:db:55:b2:de:d4:
c4:99:fd:b3:c1:6c:2c:bb:cf:a2:ae:94:d0:1e:28:c0:8c:fa:
29:93:39:e3:b1:45:d5:df:a4:d7:0e:73:9d:36:4b:29:16:56:
a4:9c:db:00:1b:4c:3c:f8:e2:62:4d:17:c2:ca:4b:f0:a8:40:
32:d3:39:77:bc:74:6e:56:e0:3b:68:36:75:67:7a:81:98:1e:
cb:f6:c1:3c:0b:ca:34:1f:4e:f5:e2:c7:96:dc:fd:e0:6c:39:
9a:e5:72:23:58:51:88:87:60:5b:e2:6a:a2:e3:f9:94:e7:05:
02:47:ef:04:a3:9a:ab:d4:54:14:63:c7:09:ae:5f:c3:25:db:
52:b4:fb:c6:c4:c6:53:99:26:62:f8:9f:3f:83:b5:6d:13:3b:
08:a8:52:8c:58:43:81:30:45:f8:8b:25:24:c5:54:79:ce:ff:
53:7e:38:30:9a:f2:c9:4e:05:db:d2:05:6d:3a:b2:12:78:29:
8a:65:71:79:75:f1:a2:4d:53:c6:ab:40:45:12:49:89:44:69:
b7:61:a8:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:27:46 2026 by rpki-client