Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78F5073A757E11F1AD3F120FCF1D38B0.roa
File: 78F5073A757E11F1AD3F120FCF1D38B0.roa (raw, json)
Hash identifier: +0sjINQ67q4npMuDizBIALPSJ4XgfmjAwbn0h5tJIA8=
Subject key identifier: AA:E8:10:D6:0F:B3:F4:4D:E8:CE:1A:9F:61:92:69:F8:35:56:68:B9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D65C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78F5073A757E11F1AD3F120FCF1D38B0.roa
Signing time: Wed 01 Jul 2026 18:55:48 +0000
ROA not before: Wed 01 Jul 2026 18:55:42 +0000
ROA not after: Fri 14 Aug 2026 18:55:42 +0000
asID: 21859
IP address blocks: 154.194.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 10 Jul 2026 00:07:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120412 (0x1d65c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 1 18:55:42 2026 GMT
Not After : Aug 14 18:55:42 2026 GMT
Subject: CN=6a4562b4-7b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:58:11:5a:51:91:2b:0a:26:a7:f3:b8:3e:8b:
35:3c:66:4b:92:67:29:c3:d3:47:ba:fd:3a:8f:f7:
ad:c8:2b:43:7b:8b:db:f2:96:76:3c:da:ad:6d:a2:
3e:06:57:fc:4d:8e:ad:06:e4:55:6a:5e:65:17:d8:
2c:7f:b5:4e:90:1d:82:31:78:e3:25:82:f3:5e:13:
e1:a0:b8:4a:80:c0:6e:00:0f:5e:38:9a:11:a0:f4:
49:ac:f9:f9:1d:05:6f:7d:4e:67:f8:73:46:cd:8b:
c3:5f:0e:2c:ec:3c:42:8a:ba:c3:db:82:b6:13:49:
46:17:42:dc:34:25:d4:3f:86:d7:b8:62:4d:46:7a:
2f:8c:2f:5e:e7:e0:04:8e:62:3c:c2:89:50:d6:4e:
76:3c:75:3c:71:f2:5c:11:0e:0f:c2:cc:40:b4:64:
f0:a1:ae:e7:48:9e:de:9c:06:97:9f:52:bb:b2:a4:
a6:6f:7a:cb:ce:57:f4:ed:97:8d:15:c8:b0:6b:41:
45:25:cc:15:8e:55:36:ab:7a:10:4c:e0:91:a3:b8:
cd:ef:62:c4:ac:fc:9d:73:c4:fe:c8:8c:8a:ab:fb:
4c:be:fa:8f:24:c9:d9:7e:99:99:25:6a:c1:0a:88:
92:8d:41:69:1a:85:21:3d:91:41:43:a3:9c:f2:d9:
2e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E8:10:D6:0F:B3:F4:4D:E8:CE:1A:9F:61:92:69:F8:35:56:68:B9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/78F5073A757E11F1AD3F120FCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.56.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:c5:ea:1d:7c:3b:84:4a:f7:b7:62:e9:73:e8:dc:9a:2e:9a:
e7:17:fa:60:e5:27:b4:12:be:ca:98:17:69:1b:23:b0:84:c8:
62:63:d8:3f:5d:83:e7:51:31:ea:be:2a:bf:21:6b:00:25:b0:
4e:05:ff:28:1e:91:06:18:9b:f2:af:43:b5:1e:70:af:9d:e0:
06:2c:14:6d:ff:23:8c:4f:79:d7:a5:50:67:a7:c1:e6:40:b1:
73:89:93:36:44:7a:e2:21:05:4b:51:bb:44:12:58:3f:64:c3:
ad:d0:48:8c:df:b0:eb:2f:bf:32:96:df:f7:66:22:82:59:b5:
ed:58:c1:42:19:a4:df:da:99:d4:88:6f:e3:2c:ff:cf:01:0a:
0e:25:93:d2:df:17:17:32:48:34:f3:1a:8c:9b:e0:81:6c:a2:
b8:97:a8:11:f2:2f:27:ae:79:86:32:bd:a8:e2:64:31:db:3e:
67:43:4a:e6:44:22:c1:a4:99:ca:01:40:3f:13:52:2f:11:00:
8c:6e:88:e6:7c:9d:7a:6f:00:cf:dd:15:3e:fe:61:2a:1c:3e:
f5:11:5d:5f:1e:9c:8f:75:eb:7c:5b:7d:c5:3d:6b:12:1d:f1:
69:fa:48:2c:9f:9e:0e:0e:00:79:c7:d4:de:08:0c:e0:7a:cd:
cb:b7:95:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 15:51:37 2026 by rpki-client