Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67A18B7C7F7211F1A5A3D1D6CE1D38B0.roa
File: 67A18B7C7F7211F1A5A3D1D6CE1D38B0.roa (raw, json)
Hash identifier: JBTEdM1jcL8iL1OHRXsppk4ZGoMvBCGvW8LpOA/bvZI=
Subject key identifier: 41:0E:7E:E3:98:AD:BF:D3:D8:12:9A:3C:62:72:54:42:45:61:1F:2A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D8E8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67A18B7C7F7211F1A5A3D1D6CE1D38B0.roa
Signing time: Tue 14 Jul 2026 10:54:37 +0000
ROA not before: Tue 14 Jul 2026 10:54:32 +0000
ROA not after: Fri 21 Aug 2026 10:54:32 +0000
asID: 9304
IP address blocks: 154.203.241.0/24 maxlen: 24
154.203.242.0/24 maxlen: 24
154.208.76.0/22 maxlen: 24
154.208.84.0/22 maxlen: 24
154.212.144.0/23 maxlen: 24
154.212.146.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121064 (0x1d8e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 14 10:54:32 2026 GMT
Not After : Aug 21 10:54:32 2026 GMT
Subject: CN=6a56156d-a6f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e1:c5:ed:24:02:2f:91:ab:fc:88:0e:a3:4a:
f7:b4:00:39:7d:b9:5f:ef:9d:eb:4d:db:9d:c3:59:
ef:06:e3:52:f4:44:f6:1e:bb:f4:8a:60:80:b6:e9:
f1:90:21:c4:a7:d6:9f:b0:d7:71:ab:29:3c:0d:c6:
c2:83:4b:77:80:d8:30:c9:42:4f:1a:03:bd:3f:14:
55:09:30:35:ae:f0:fc:00:7e:53:31:db:c9:0a:2c:
34:db:97:dc:ab:75:69:ff:3b:e0:28:4d:de:b9:d0:
62:21:42:dc:d4:18:07:6d:0a:71:21:91:22:b7:a7:
26:f5:5b:77:fb:a0:59:d1:a6:c2:94:c2:10:ea:e1:
3e:74:50:6c:96:63:82:8b:36:cc:f9:ee:1c:7a:39:
55:fb:92:ef:88:40:ba:0d:8a:cc:4e:3f:69:ed:b8:
98:04:48:ea:b4:53:f7:5d:88:c2:27:9e:b1:3f:12:
af:3e:59:3f:2a:74:7c:a6:0e:2f:ab:fc:bc:04:61:
82:bb:ee:62:6f:cf:e2:94:6b:ca:34:96:da:17:41:
e8:91:80:00:ea:38:8f:95:9c:0a:68:d3:cd:37:39:
b4:7b:73:c6:a5:bc:d2:67:a6:4c:09:0b:3c:2c:b7:
39:f9:4a:48:06:60:66:8f:1b:20:bc:e6:54:95:dd:
70:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:0E:7E:E3:98:AD:BF:D3:D8:12:9A:3C:62:72:54:42:45:61:1F:2A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/67A18B7C7F7211F1A5A3D1D6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.241.0-154.203.242.255
154.208.76.0/22
154.208.84.0/22
154.212.144.0/22
Signature Algorithm: sha256WithRSAEncryption
41:73:2a:af:2b:7f:b4:cf:ea:4b:42:d1:45:ac:9b:6a:a8:5e:
18:59:02:46:52:60:e2:a5:14:28:48:5a:71:8e:40:83:03:dd:
6d:7d:be:e6:20:a0:b5:08:57:06:4e:86:79:7f:4a:38:68:7a:
b7:6d:ea:43:f6:98:c2:d4:f1:53:20:ee:c0:4c:4c:6d:34:ed:
66:65:66:14:e0:bc:90:03:5e:fa:aa:6d:be:96:0b:ff:66:a9:
51:20:a3:65:15:8a:dd:8b:0e:d1:e5:28:4e:9e:b8:01:d8:33:
a3:2a:bc:f6:0b:b9:7a:e7:e9:0f:00:d2:0e:72:46:e5:87:1a:
b5:ba:af:21:2e:70:29:76:2b:63:7c:b2:49:02:9f:8a:6d:24:
0d:bb:b8:08:ed:27:cf:b2:aa:0c:71:bb:18:7d:e3:3c:d4:22:
5a:f5:dc:6e:3c:68:f4:31:7e:21:37:0a:06:e7:d5:72:c9:12:
fa:02:4e:39:c7:e0:1d:53:56:d2:23:36:79:2e:dc:dc:88:bc:
de:ee:9d:92:7e:ce:10:5e:d5:63:ee:64:eb:87:e0:b9:af:7b:
7c:f1:3e:56:6b:c4:cd:11:2d:35:a7:fb:a7:a7:cc:a8:72:f8:
6d:f3:97:21:9f:b9:6e:ae:fe:8a:de:1a:5c:07:96:67:27:cc:
17:c1:10:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:22 2026 by rpki-client