Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/696E262275FE11F1A76223A7CE1D38B0.roa
File: 696E262275FE11F1A76223A7CE1D38B0.roa (raw, json)
Hash identifier: BWpo9ocoIjYWzq7CZSAHs//5hN5xItbsZzkTw1P+NUI=
Subject key identifier: 5A:8D:5E:22:4C:3D:51:EA:99:7C:69:CD:33:07:BB:DB:9F:69:F0:7D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D674
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/696E262275FE11F1A76223A7CE1D38B0.roa
Signing time: Thu 02 Jul 2026 10:11:38 +0000
ROA not before: Thu 02 Jul 2026 10:11:33 +0000
ROA not after: Sat 25 Jul 2026 10:11:33 +0000
asID: 9304
IP address blocks: 154.211.24.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120436 (0x1d674)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 2 10:11:33 2026 GMT
Not After : Jul 25 10:11:33 2026 GMT
Subject: CN=6a46395a-835c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:38:94:0b:91:86:35:f3:84:bc:61:bb:7b:07:
ca:06:af:5f:a4:c0:12:d6:fe:97:bb:68:6b:f2:44:
7b:97:77:76:f7:cc:36:e9:ee:46:c1:fb:bd:33:a8:
dc:02:9b:2b:21:6c:3a:06:85:d4:bd:f3:05:40:73:
83:23:22:cb:a9:6b:0a:a3:2e:a4:47:4e:55:ee:ea:
95:63:f1:3b:45:16:4f:90:5a:74:39:ac:58:1b:4a:
d4:04:86:37:98:f3:51:bd:26:77:13:9f:c9:71:df:
7c:11:72:cd:4e:77:a7:15:e1:88:c8:dd:ba:6d:a0:
6e:66:0e:f6:65:88:10:0b:ec:0d:67:69:28:9f:69:
90:33:30:62:f4:1e:b3:ca:59:4c:ca:d7:cf:e3:ab:
93:8a:45:95:4b:59:46:01:97:7f:fb:b5:6e:ba:b1:
7c:4a:e0:25:16:ba:40:1d:31:d4:25:a7:06:4a:8b:
2d:5c:1c:5b:63:e8:29:fd:1a:1e:b0:4b:70:00:c9:
b3:dd:06:c3:2d:7c:22:1a:08:53:36:76:23:85:61:
00:b7:ee:c5:68:41:5f:e1:b0:6e:fe:02:42:33:64:
5f:69:41:b9:37:50:6f:bc:2f:7b:18:cd:7b:63:39:
52:0f:71:49:4e:d8:79:13:c3:68:a5:3d:d9:57:5c:
93:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:8D:5E:22:4C:3D:51:EA:99:7C:69:CD:33:07:BB:DB:9F:69:F0:7D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/696E262275FE11F1A76223A7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.24.0/21
Signature Algorithm: sha256WithRSAEncryption
b8:f8:3b:03:33:cc:6a:3b:87:8a:40:c7:b6:51:2b:45:4c:a8:
c1:f8:46:31:70:85:bc:93:c3:58:7b:61:ec:4d:af:27:1b:d4:
ce:b6:66:0e:13:56:7b:bd:2c:b7:4b:94:f6:9a:00:b9:ca:06:
62:c6:e1:09:d2:98:9e:60:b4:c0:ef:7e:5d:83:9d:3b:96:e9:
96:49:42:a1:e3:5d:8b:9b:7a:73:0d:09:de:45:25:12:92:58:
f5:e8:6e:4a:a4:e7:41:e9:d8:13:0b:02:5c:c1:9d:2f:a8:23:
f4:fd:e7:d9:65:bf:1f:12:3b:ee:ad:6d:70:85:3d:84:3f:2f:
4e:37:17:a1:0c:8c:98:5f:5c:f9:c5:99:59:9a:72:e4:0c:33:
14:7a:47:41:71:d2:98:b9:58:69:05:58:1a:07:a8:07:b4:b7:
eb:3a:f3:77:0f:72:eb:53:ac:e9:63:ed:67:2f:0c:dc:72:73:
fc:e6:d2:22:03:6f:79:69:9d:c6:5c:39:a6:67:54:cd:6b:19:
df:8e:e9:fd:3a:48:a7:a9:9e:a4:d8:a9:c7:af:af:d7:44:72:
b8:55:22:74:61:69:4f:db:89:22:13:dc:b5:a0:06:8d:08:ea:
1b:fa:a0:ca:c3:82:17:6e:d0:6d:c9:2c:ff:33:5a:f5:12:08:
99:59:85:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:16 2026 by rpki-client