Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83CCC95679CD11F1B82136CECE1D38B0.roa
File: 83CCC95679CD11F1B82136CECE1D38B0.roa (raw, json)
Hash identifier: TjIZdYHdE+td+t1DKNcrv3Q5jDGYkP6qbm3UVJVNDX8=
Subject key identifier: B4:B9:E2:B8:74:C2:D0:BE:4D:C7:96:31:E4:35:B8:AF:E8:05:40:66
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D753
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83CCC95679CD11F1B82136CECE1D38B0.roa
Signing time: Tue 07 Jul 2026 06:31:42 +0000
ROA not before: Tue 07 Jul 2026 06:31:36 +0000
ROA not after: Wed 14 Jul 2027 06:31:36 +0000
asID: 137996
IP address blocks: 154.209.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 11:51:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120659 (0x1d753)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 7 06:31:36 2026 GMT
Not After : Jul 14 06:31:36 2027 GMT
Subject: CN=6a4c9d4d-7969
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9d:bd:9b:56:c1:3d:8d:a4:04:c1:1b:49:0d:
12:5f:90:4d:63:4f:31:1e:7c:d6:23:6d:75:aa:62:
05:c0:c2:ab:51:d8:45:c5:ff:e4:d9:9a:30:38:c2:
24:d7:f5:6f:6e:ff:28:e5:37:88:9e:92:23:a5:18:
52:d9:90:dd:95:c2:c1:ec:3a:fb:a1:92:e2:0e:81:
dd:73:72:7e:ce:0f:ee:bb:75:e2:6c:d6:eb:27:49:
46:5e:8d:3f:2b:70:a0:39:a0:8a:bd:f6:4b:b2:ce:
a1:a8:1c:68:96:50:1a:8e:4d:b4:c0:57:58:8c:fe:
89:51:98:61:10:70:4b:92:8e:15:b9:5d:3b:a3:d9:
d5:37:27:0b:26:50:83:36:94:f8:9e:9d:d3:0a:1d:
f0:15:39:fe:7b:1b:ea:a7:fd:4b:65:0b:db:4b:de:
47:7b:b5:f6:fa:92:37:fb:6f:76:ce:4f:6b:5f:fd:
ee:56:1a:71:fd:e2:ff:c7:78:6b:61:c9:c5:c3:26:
fb:45:42:d4:53:a5:fd:95:08:e9:6e:7a:a1:7e:ac:
15:7d:00:b6:4b:12:ce:f0:df:10:ea:dd:7e:f1:ff:
27:0d:94:ff:26:64:a4:fa:c7:76:53:06:2b:b2:68:
da:20:83:0a:d7:03:08:b9:1d:7f:a1:3c:97:a0:4b:
bf:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B9:E2:B8:74:C2:D0:BE:4D:C7:96:31:E4:35:B8:AF:E8:05:40:66
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83CCC95679CD11F1B82136CECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.3.0/24
Signature Algorithm: sha256WithRSAEncryption
12:e9:38:a7:ce:b4:4e:7c:c7:8d:38:44:f4:fb:d5:3c:98:01:
8b:de:04:53:58:f2:d9:e7:67:30:d0:1a:bf:99:72:a0:8a:19:
d9:0d:07:b7:0f:f7:bc:e8:e8:b6:d4:77:ef:f7:ea:1a:6e:77:
f8:4b:9f:09:ca:59:86:32:75:ad:34:ac:a0:47:03:b7:e4:d2:
6a:98:e3:88:d5:b6:a0:ac:8c:0a:36:dc:9a:d1:4e:88:ac:43:
f5:3f:18:f3:ed:08:0d:04:ad:f8:2d:ee:1b:db:00:06:45:ac:
fd:c6:7f:85:8d:a6:20:b2:52:9e:96:26:f9:19:00:2d:3b:70:
40:dc:02:6b:c7:90:ab:df:64:cf:2d:3f:93:0b:29:8b:fc:0c:
9a:77:44:ee:aa:42:f2:73:ab:54:49:67:2d:4f:52:5d:d3:16:
df:e2:f9:b0:de:1c:8d:42:17:47:1d:70:e3:2d:64:76:16:9b:
65:aa:a4:da:38:b2:04:96:f3:f4:28:79:4a:10:78:db:2b:1c:
b2:26:23:84:fe:87:7b:ce:fa:10:cd:b6:70:9d:9f:16:2a:e6:
31:93:ca:eb:59:4e:b3:fb:23:00:f5:79:3c:95:16:b2:b7:27:
fd:07:43:ce:73:3d:16:d6:94:d7:0d:2c:69:28:ee:c6:5a:18:
45:86:78:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:45:46 2026 by rpki-client