Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/732D1A667D9111F18CE70DDDCE1D38B0.roa
File: 732D1A667D9111F18CE70DDDCE1D38B0.roa (raw, json)
Hash identifier: ToJLGkv3HfEgcCsQNuC4T4pvut5D5fRCRRwEO5UADr8=
Subject key identifier: 59:60:65:13:D9:A8:E4:78:3D:72:47:53:21:03:55:94:F7:CF:05:6D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D865
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/732D1A667D9111F18CE70DDDCE1D38B0.roa
Signing time: Sun 12 Jul 2026 01:31:48 +0000
ROA not before: Sun 12 Jul 2026 01:31:44 +0000
ROA not after: Tue 10 Jul 2029 01:31:44 +0000
asID: 17561
IP address blocks: 154.202.34.0/24 maxlen: 24
154.202.35.0/24 maxlen: 24
154.202.36.0/24 maxlen: 24
154.202.37.0/24 maxlen: 24
154.202.38.0/24 maxlen: 24
154.202.39.0/24 maxlen: 24
154.202.40.0/24 maxlen: 24
154.202.41.0/24 maxlen: 24
154.202.42.0/24 maxlen: 24
154.202.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120933 (0x1d865)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 12 01:31:44 2026 GMT
Not After : Jul 10 01:31:44 2029 GMT
Subject: CN=6a52ee84-4838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b4:8f:d8:9e:2b:dd:b7:c1:5e:39:43:9b:55:
57:44:f2:2e:9d:5c:d5:e5:14:15:96:d3:a2:5e:7c:
bd:83:4c:83:11:b2:28:f9:1c:11:02:86:67:a3:59:
34:fa:ff:4f:90:af:82:ca:fd:ac:da:7c:04:42:e0:
35:28:0d:41:1c:64:43:7a:f2:5f:dc:ce:1e:67:f6:
bc:d1:1c:03:58:c6:9d:33:54:fd:ae:36:e8:51:2e:
a5:b6:3e:29:51:22:29:55:75:31:04:be:b8:85:56:
24:0f:8f:a8:3d:c6:77:9d:7d:ce:c9:68:eb:b0:e3:
20:b1:8c:a3:7a:e4:9b:33:36:e4:9a:2d:3b:ba:35:
d5:28:09:48:57:2b:93:6a:8f:ac:52:cc:98:79:f3:
fc:cd:85:2e:09:fa:05:91:20:97:0c:1e:52:fb:10:
49:67:1e:76:1a:22:22:0e:b2:4a:73:43:6a:d1:47:
30:d9:a6:78:e7:20:74:db:40:b9:83:a8:69:94:f6:
17:0e:34:be:f9:69:9f:e0:97:13:57:6a:78:44:00:
37:68:5f:83:ca:8b:0a:17:cc:f1:f3:c2:c2:bf:92:
a4:24:ca:72:0b:65:cb:24:98:a9:1f:3b:81:59:93:
d8:13:78:b1:2a:e0:8e:73:06:7f:bc:b3:f9:0d:ca:
c7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:60:65:13:D9:A8:E4:78:3D:72:47:53:21:03:55:94:F7:CF:05:6D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/732D1A667D9111F18CE70DDDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.34.0-154.202.43.255
Signature Algorithm: sha256WithRSAEncryption
05:49:10:c1:b4:15:6e:fe:ea:5d:bb:b5:58:f0:d2:2c:c2:7e:
a7:80:bb:f7:5f:ed:92:ce:cf:61:b8:72:44:21:0a:fd:e0:96:
62:d5:40:10:09:fd:d0:b9:48:33:98:b0:b5:6e:16:41:a9:34:
e6:c0:3f:b8:d2:80:30:f1:ec:45:ef:a3:7a:46:ce:d3:35:16:
25:7e:08:5e:4d:ba:58:34:82:4b:2c:ae:b4:30:4f:82:e9:2c:
c9:2d:cb:e8:7b:24:06:d3:ed:3b:0c:43:41:04:cd:33:bc:17:
e0:87:a9:aa:f0:8c:a0:09:ba:45:15:70:94:46:99:d7:55:77:
9b:f5:4e:f4:f9:67:4b:64:67:41:f5:0a:0b:95:88:16:d1:c9:
af:a8:31:0b:6d:07:c5:92:ce:3f:8b:cb:bd:f0:2d:f4:ae:22:
c4:66:05:ac:a4:45:60:b5:0a:54:6a:04:7f:12:1b:de:f1:55:
31:fe:52:48:6b:2d:87:26:71:70:db:86:ce:0d:4d:41:8c:3e:
30:51:0c:ce:09:39:af:8e:82:86:a0:34:b5:86:4f:6d:b6:c3:
6f:8a:76:52:15:d9:4a:ae:5e:c8:a9:69:c8:50:0c:c3:40:fd:
2f:0f:75:31:07:34:b3:58:d8:9c:82:cb:0e:5b:71:85:c4:3e:
61:d4:cb:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:31 2026 by rpki-client