Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8BD7D2968FD811F18A925E1ACF1D38B0.roa
File: 8BD7D2968FD811F18A925E1ACF1D38B0.roa (raw, json)
Hash identifier: er/9gpqqKfuEgEdFW5zlACpYAasisrs9B5erVt/FeMw=
Subject key identifier: 36:07:5C:9D:C2:26:C4:EC:47:7B:D4:A5:E2:C9:21:0F:55:9A:1B:8F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DC99
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8BD7D2968FD811F18A925E1ACF1D38B0.roa
Signing time: Tue 04 Aug 2026 07:46:05 +0000
ROA not before: Tue 04 Aug 2026 07:46:01 +0000
ROA not after: Fri 14 Aug 2026 07:46:01 +0000
asID: 137962
IP address blocks: 154.209.0.0/24 maxlen: 24
154.209.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122009 (0x1dc99)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 4 07:46:01 2026 GMT
Not After : Aug 14 07:46:01 2026 GMT
Subject: CN=6a7198bd-c50c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d3:bc:b3:8e:17:8d:dc:fb:d8:cf:b9:30:63:
6f:53:0d:72:f0:cc:33:7f:8f:94:45:92:91:68:97:
8f:90:7d:20:37:4c:5f:fc:6b:7a:d2:06:ff:6d:86:
e1:1f:95:18:eb:90:b5:f2:0b:1a:bd:a5:ca:1b:99:
77:1d:93:c5:02:57:10:f2:2b:e1:a5:37:81:18:8d:
3c:61:63:3e:21:ac:b7:af:1f:1b:55:da:90:df:1f:
aa:c3:7b:2a:cf:19:28:15:41:df:86:50:72:29:3a:
b4:bf:9f:df:4e:80:1f:bd:49:b2:fc:bf:8f:a4:37:
c6:04:fa:21:92:ef:27:52:12:43:a7:ce:e9:e8:e5:
fd:ff:9c:76:f2:37:0a:23:04:d5:2c:22:ef:12:f1:
f6:6f:71:c1:a8:31:44:43:cd:b3:f1:f2:87:34:0b:
bd:6f:0a:48:52:08:d0:53:61:53:23:f0:14:61:b5:
43:f6:58:fb:7e:10:6f:e2:a2:04:8c:16:93:34:23:
69:d1:f2:f5:d5:0f:84:49:ac:9a:3f:30:9a:e7:11:
56:08:2c:4e:cb:13:4d:de:21:10:9e:38:54:0a:63:
35:e7:9c:05:df:b7:e1:62:5c:2d:f7:5a:e7:a6:dc:
21:c0:f5:42:9c:3e:5b:d3:b5:41:55:d6:81:c6:89:
ae:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:07:5C:9D:C2:26:C4:EC:47:7B:D4:A5:E2:C9:21:0F:55:9A:1B:8F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8BD7D2968FD811F18A925E1ACF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.0.0/23
Signature Algorithm: sha256WithRSAEncryption
38:26:8d:fd:82:90:5b:89:9f:4e:87:3a:73:17:24:ad:97:6d:
ef:22:24:92:94:a1:92:c3:11:04:e0:a2:2f:70:4b:af:28:d5:
38:62:71:e2:8d:0d:c9:aa:ce:f4:f1:13:d9:68:cb:31:ec:e6:
c4:d7:ba:e6:3f:f4:86:2c:29:e5:44:ef:34:57:e7:99:9d:0a:
8f:e3:e9:2a:49:ce:6d:85:eb:8c:96:65:b3:59:b1:de:8d:de:
29:89:a8:58:8e:7e:05:43:a7:52:b3:e9:3b:30:22:b2:96:d5:
df:84:11:62:99:28:e5:7b:20:0d:6b:79:d7:fc:56:df:f9:cb:
e4:1b:39:89:14:8a:1a:34:54:56:b1:76:d3:a5:fc:c5:b0:28:
4a:12:35:9e:aa:7f:7f:cf:56:47:08:d8:5b:85:c5:1d:22:6c:
44:29:e0:53:90:8f:41:17:65:75:19:81:be:48:94:db:2d:0a:
72:7a:85:42:52:8e:80:87:79:32:f5:6e:75:10:6a:9d:b3:7a:
01:4b:dd:45:62:79:c8:40:ab:2a:9f:ce:3a:e0:05:29:24:4b:
dc:3f:7c:11:2c:8d:7c:6b:bf:37:47:a8:41:7d:a2:58:8b:5b:
e2:75:a8:05:cf:df:4f:23:df:2d:92:9c:86:a3:03:7b:c3:9d:
8d:3b:e1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:07:01 2026 by rpki-client