Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D9F37E48C0511F198DDE4CECE1D38B0.roa
File: 8D9F37E48C0511F198DDE4CECE1D38B0.roa (raw, json)
Hash identifier: 3kgGXy2vlYlQT3TU8rQwqHeaymi4Kq96QZERhvoW92Y=
Subject key identifier: 6C:04:D1:E8:E0:65:CF:8D:9B:16:30:03:70:A7:26:32:B4:6D:3D:12
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DBE6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D9F37E48C0511F198DDE4CECE1D38B0.roa
Signing time: Thu 30 Jul 2026 10:58:11 +0000
ROA not before: Thu 30 Jul 2026 10:58:07 +0000
ROA not after: Sun 04 Oct 2026 10:58:07 +0000
asID: 131267
IP address blocks: 154.222.6.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121830 (0x1dbe6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 30 10:58:07 2026 GMT
Not After : Oct 4 10:58:07 2026 GMT
Subject: CN=6a6b2e43-3b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d6:a5:8c:61:71:6a:a5:ea:50:9c:ed:b0:71:
b2:8e:15:fd:82:b6:7f:76:40:5a:77:02:ad:0c:2c:
c7:06:76:d7:ca:f5:32:d4:dd:04:f5:50:1e:b3:35:
bb:d6:44:0e:23:79:e9:b7:88:5a:9b:9a:17:53:22:
89:48:35:3e:76:ff:77:dd:2e:4f:ff:d1:13:0c:f0:
9d:da:b3:e6:5c:8f:c4:2e:a2:07:96:15:09:81:0a:
1d:7b:8e:5e:85:1e:47:4c:af:af:9f:df:9f:5f:f8:
ba:c2:a1:46:8e:87:ef:bd:a9:4a:71:04:32:d2:b6:
21:a6:c0:5d:de:1f:b6:06:08:47:3a:5f:19:4a:4f:
45:33:fa:eb:42:dc:07:95:44:f5:7c:83:fe:ce:c4:
7e:86:7e:38:ee:c5:fa:40:27:48:c7:bd:7e:71:d7:
a6:0b:7e:a5:95:41:1f:95:89:43:51:07:f2:a2:ac:
f2:5b:47:c3:18:5e:49:ba:d1:55:c1:35:fd:5a:0e:
8f:ea:26:c3:35:b9:91:ba:0f:09:fa:9d:b0:fb:b9:
fc:8d:8e:bb:56:85:43:ea:2c:90:84:3d:8a:42:40:
86:42:0e:8e:9c:83:69:4d:ec:6d:a4:c9:37:93:03:
46:9e:35:0c:f6:34:89:5e:4e:44:e4:b2:42:be:ac:
a9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:04:D1:E8:E0:65:CF:8D:9B:16:30:03:70:A7:26:32:B4:6D:3D:12
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8D9F37E48C0511F198DDE4CECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.6.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:b0:50:dc:95:e6:f1:40:0a:30:b0:c2:da:54:42:68:10:82:
af:bf:f5:95:9a:d1:26:cb:c0:6d:4f:cb:d2:64:ff:04:5c:f1:
a1:c7:35:cd:11:4b:84:e8:af:ea:b7:aa:6e:e0:a7:ab:e7:69:
1b:e0:11:8e:ed:9b:7d:b9:98:13:00:d2:8a:24:a3:65:e9:0c:
f4:bb:06:5e:0b:62:eb:fb:9e:87:9e:94:43:36:f2:18:4b:c5:
5c:d4:f4:db:75:40:0b:8f:92:cf:86:96:5a:ee:a2:5c:e6:f2:
19:f3:3d:ea:26:17:45:dc:18:59:cf:60:eb:cb:94:01:68:49:
0a:1f:6b:95:3e:96:88:20:eb:c7:f5:e8:1b:da:5e:13:0c:01:
40:bb:fa:e4:ba:b0:5e:36:59:c2:c1:d1:e7:90:e7:62:e7:23:
2c:18:72:38:ce:87:2b:64:5a:3a:f0:b4:69:56:da:02:5e:c5:
5e:cc:7e:b0:18:cd:63:cb:60:f8:4b:f5:6e:49:98:27:1b:dc:
18:41:49:3a:47:19:79:fd:9d:aa:10:64:4b:13:19:e2:3d:46:
2a:52:5b:01:a1:24:1d:2b:00:01:a3:1c:d3:8b:24:bd:90:a9:
9d:d6:46:ae:74:97:2a:4a:a3:87:c6:37:95:b9:81:d9:73:e3:
15:db:7b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:08:10 2026 by rpki-client