Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7DB098C0923411F1BD351FE5CE1D38B0.roa
File: 7DB098C0923411F1BD351FE5CE1D38B0.roa (raw, json)
Hash identifier: V/XKgs0m5n0v8n+A6CSaCabwn/lZwf9FACIfIfhzC1M=
Subject key identifier: BC:66:D5:B8:45:F8:A8:3D:90:C0:8D:BA:4D:D2:0D:4E:06:30:D7:FF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DD3E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7DB098C0923411F1BD351FE5CE1D38B0.roa
Signing time: Fri 07 Aug 2026 07:49:17 +0000
ROA not before: Fri 07 Aug 2026 07:49:13 +0000
ROA not after: Sun 13 Sep 2026 07:49:13 +0000
asID: 10753
IP address blocks: 154.92.10.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122174 (0x1dd3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 7 07:49:13 2026 GMT
Not After : Sep 13 07:49:13 2026 GMT
Subject: CN=6a758dfd-7994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:be:4a:dd:71:d2:9e:d8:da:f7:10:1c:64:da:
52:85:53:31:88:75:4a:1d:ba:68:b0:c4:c6:66:16:
af:c7:da:d7:02:91:12:86:d3:6d:5c:7a:d8:1c:79:
b3:3e:e2:11:68:6f:88:94:10:0a:f0:c0:38:07:51:
5c:9d:77:d3:56:80:1d:51:0c:fc:02:be:2d:0d:a2:
77:45:38:22:d3:fe:56:d4:ce:ad:51:ab:aa:96:55:
6a:3b:54:d9:ed:3b:b5:11:9c:a0:74:0a:f3:ce:85:
82:66:9e:8c:85:94:5c:ed:80:bc:f3:de:ea:2f:e6:
35:94:07:63:e1:2b:77:fd:27:af:e1:48:bc:29:32:
7c:ce:4f:3f:ea:1d:0c:2c:ff:6e:c8:17:35:60:0b:
31:64:24:f9:81:b4:b7:fc:6c:d8:2f:f9:b5:43:76:
9c:22:06:10:da:39:a3:30:99:1b:19:12:e5:dd:5b:
3e:76:e5:0b:56:68:a2:9d:cb:c4:78:ad:5c:c1:c5:
2e:df:d2:08:88:01:93:5a:9e:71:88:cb:29:0f:8a:
02:66:2d:32:01:77:cb:f9:d7:6c:0d:cc:f9:a1:f0:
32:01:08:b0:d0:62:52:fc:13:f6:6d:77:1b:9f:0a:
7a:f1:e0:b9:0e:7a:10:f7:b8:a8:76:40:7d:19:cf:
7b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:66:D5:B8:45:F8:A8:3D:90:C0:8D:BA:4D:D2:0D:4E:06:30:D7:FF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7DB098C0923411F1BD351FE5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.10.0/23
Signature Algorithm: sha256WithRSAEncryption
4c:64:da:4b:ca:90:22:92:07:50:b3:6d:74:4c:02:16:1f:82:
fb:21:92:26:87:9d:70:5f:ed:62:7f:dc:ad:db:8a:5b:f1:b4:
94:01:18:00:40:43:7b:7c:27:3d:18:05:d8:59:3c:4a:f9:a2:
3a:ce:27:1d:13:af:80:42:97:61:02:1c:47:0f:e4:40:6c:35:
a9:e6:59:f7:ba:02:58:f7:7b:da:84:bb:4a:07:63:f6:7b:3f:
a1:cf:65:2d:15:2f:8e:ef:be:97:5d:42:d2:a3:eb:0f:62:26:
af:e4:14:11:70:34:cd:30:3b:9b:82:52:30:55:40:dc:a5:d0:
be:6d:57:78:9f:a9:42:4c:c3:0b:67:08:15:fb:ca:18:e4:88:
8c:08:0d:0a:33:43:6c:22:28:8f:ea:92:1a:91:39:ac:00:06:
9d:f6:59:6c:e5:a7:e9:5f:82:18:9a:bc:ff:d9:4a:76:40:44:
ba:99:c6:00:e6:57:5f:19:ca:34:66:61:37:44:66:70:85:88:
d1:51:67:17:d9:15:ff:4a:3e:af:81:82:0d:ca:98:f5:ed:22:
87:ec:b6:ca:15:58:df:bc:b2:74:63:ac:09:b6:9c:1b:df:5d:
f3:8d:20:28:98:66:27:a1:e7:a0:cd:10:0e:53:39:20:be:d5:
be:ff:e2:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:07:40 2026 by rpki-client