Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8FF330F4923B11F1A8ABC710CF1D38B0.roa
File: 8FF330F4923B11F1A8ABC710CF1D38B0.roa (raw, json)
Hash identifier: 5NNZMez/Iwt2+TjoqYizzbnJ07tvNQVWXPFeqCXjSzA=
Subject key identifier: 57:03:B8:FC:59:D3:BD:35:38:5A:37:55:93:D4:20:4C:DC:0B:7A:03
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DD52
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8FF330F4923B11F1A8ABC710CF1D38B0.roa
Signing time: Fri 07 Aug 2026 08:39:54 +0000
ROA not before: Fri 07 Aug 2026 08:39:51 +0000
ROA not after: Thu 22 Apr 2027 08:39:51 +0000
asID: 137443
IP address blocks: 154.205.6.0/23 maxlen: 24
154.205.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122194 (0x1dd52)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 7 08:39:51 2026 GMT
Not After : Apr 22 08:39:51 2027 GMT
Subject: CN=6a7599da-c191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:58:0b:21:f4:8c:3b:37:8f:4b:d1:d3:c0:04:
c6:ae:f3:91:56:a3:6a:66:76:73:55:de:15:24:3a:
56:7d:64:9a:7e:ab:0c:15:82:8a:d7:54:4e:65:1d:
fe:0a:be:c3:e8:6b:25:b2:89:ac:ec:64:02:88:38:
01:7f:c2:eb:ad:26:47:af:8f:34:bb:31:8e:91:0d:
4a:0d:fb:c5:6a:02:5a:98:90:25:72:4e:7a:ca:e2:
1d:22:d0:6d:c8:4d:5e:27:e2:fa:a7:a7:63:b8:8f:
32:05:68:14:10:11:b7:c2:54:64:da:b0:1c:fb:ca:
2c:00:85:9f:ce:cb:9b:51:e2:3d:5a:63:c9:c1:b5:
3e:28:84:94:11:b8:45:82:9c:0a:34:03:d6:a2:c1:
0d:27:4b:de:4f:5b:f3:1c:45:ae:ed:fb:58:de:12:
e9:a0:7b:c2:19:a4:6d:1a:30:ac:b9:ef:08:da:60:
c5:0d:46:5d:34:b1:08:49:97:6c:30:90:0c:ed:8e:
3b:ef:c1:9a:77:d6:3b:3a:7c:62:19:09:85:5c:67:
c1:e0:9a:5e:58:be:89:42:27:8f:64:de:5a:a9:25:
15:7c:9e:a1:75:1b:cb:24:4f:3d:d3:d3:03:be:f2:
a5:9c:63:4c:3b:c9:70:60:1c:a7:f9:ce:9c:a4:ae:
45:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:03:B8:FC:59:D3:BD:35:38:5A:37:55:93:D4:20:4C:DC:0B:7A:03
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8FF330F4923B11F1A8ABC710CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.6.0-154.205.11.255
Signature Algorithm: sha256WithRSAEncryption
b5:47:43:1d:0e:3a:26:5e:a5:f4:14:eb:dd:9b:d0:3e:7a:da:
81:0a:94:09:f3:2f:c1:bd:d9:93:62:30:7c:e3:8f:8a:4c:4a:
47:ac:5d:34:92:f1:1d:23:58:63:99:af:d4:11:74:1f:09:a5:
6b:7c:3f:e5:d7:83:06:12:63:9a:e4:46:38:96:3a:15:ba:a1:
9b:3d:2b:1d:92:b2:48:6d:21:29:ed:c4:13:02:95:62:6b:a3:
f9:a8:4c:95:44:82:25:f3:7c:20:9e:32:c4:cc:bb:6c:8a:96:
4c:9d:a2:95:4b:3a:27:78:6e:8e:e0:6f:04:8b:19:99:d1:54:
6d:0a:d4:5e:a3:67:80:a8:5d:28:9a:10:d2:7c:b5:e0:35:8b:
ec:19:a1:e5:be:ca:1c:44:25:91:52:ec:96:3e:4a:81:ec:a7:
dd:2c:67:a4:89:99:49:5c:a9:cf:05:88:21:96:98:64:9a:1c:
7c:de:9b:ee:ae:02:5c:f9:24:0c:b7:4c:2f:3e:3b:a2:43:24:
87:7a:8d:af:26:f9:31:d7:d6:05:8d:e1:fc:83:cd:df:52:30:
a0:d7:e4:14:bc:6f:cf:3a:1a:4d:b7:b9:de:78:d4:68:a9:ed:
c5:25:3c:a7:83:34:32:12:79:f8:9f:fc:12:52:cf:7b:91:0a:
5f:6a:d2:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:06:21 2026 by rpki-client