Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8FF812968D8F11F18B0261B7CE1D38B0.roa
File: 8FF812968D8F11F18B0261B7CE1D38B0.roa (raw, json)
Hash identifier: 36AfnV3dMQ2Xe8YjIqFf2JvM5lVM9AW9f9ucGTBgsiU=
Subject key identifier: 7F:8E:BA:21:91:25:44:71:B4:4D:8E:18:D7:9A:67:6B:91:9E:C4:F2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DC32
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8FF812968D8F11F18B0261B7CE1D38B0.roa
Signing time: Sat 01 Aug 2026 09:58:36 +0000
ROA not before: Sat 01 Aug 2026 09:58:32 +0000
ROA not after: Mon 07 Sep 2026 09:58:32 +0000
asID: 272092
IP address blocks: 154.83.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121906 (0x1dc32)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 1 09:58:32 2026 GMT
Not After : Sep 7 09:58:32 2026 GMT
Subject: CN=6a6dc34c-2de0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1b:63:c0:01:37:68:5c:fe:65:95:13:92:35:
18:2b:ec:f0:80:71:d0:12:2f:13:a8:c7:53:ca:b2:
8d:da:f5:1d:10:43:7a:a5:3b:77:4e:1e:b8:7b:e3:
c0:1a:76:e0:11:09:c8:39:b9:0f:de:dc:ae:ed:e2:
6a:b1:c2:76:ca:7d:8b:91:cd:d6:e1:0c:46:2b:16:
d7:6e:df:36:b1:08:7d:b0:c2:43:bc:76:90:44:90:
93:ee:52:68:89:de:21:93:d6:69:37:c6:5a:25:ba:
9e:92:5b:a2:6d:0a:d6:b1:09:8f:7f:17:94:d4:f3:
fa:a0:1d:4f:64:ca:17:8b:82:70:b1:5d:2a:d0:dc:
fd:dd:07:d8:7d:6b:03:de:1d:1d:10:d0:77:e8:92:
e6:83:56:4d:50:9a:0b:86:f3:00:0a:c6:4b:1c:0a:
99:e0:23:2b:b0:b3:fd:c6:14:45:8f:a3:da:1d:88:
08:56:02:a7:33:bf:f8:1d:2c:dd:87:3b:6f:9f:30:
90:77:8a:96:6a:4d:3b:67:09:c0:b3:20:23:55:37:
75:9d:65:54:0c:77:9a:07:45:a3:f7:62:64:f2:ef:
60:76:6c:8e:45:ac:8a:48:af:0a:24:c6:33:a5:29:
af:99:94:bb:f2:6e:6e:a6:9d:fa:aa:c7:8e:be:26:
84:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:8E:BA:21:91:25:44:71:B4:4D:8E:18:D7:9A:67:6B:91:9E:C4:F2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8FF812968D8F11F18B0261B7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.29.0/24
Signature Algorithm: sha256WithRSAEncryption
57:f5:f9:2a:53:43:16:0b:4c:7f:44:60:66:66:eb:55:7a:0b:
65:98:4b:4b:be:7e:f6:f5:9a:ee:62:73:f6:16:05:3a:71:8a:
38:3b:6f:ae:aa:af:6f:ad:6b:bd:ad:d8:0d:28:f8:34:9d:e2:
1d:6e:7e:cd:ef:38:31:78:56:20:ea:da:0b:ea:1e:2a:db:28:
8c:78:e9:8c:a3:85:7c:7c:d5:b2:40:a8:0e:dc:62:5c:e4:10:
17:31:27:96:cf:cb:d0:86:83:39:09:90:0e:45:1e:28:36:b7:
2c:cb:52:67:4a:73:93:90:92:7c:a1:4f:2f:fc:77:61:39:8d:
60:3d:82:71:1d:c1:1a:f4:f1:64:b7:de:d5:ae:49:93:14:9e:
13:c2:05:eb:4e:6b:8f:3e:ee:8f:44:01:31:f4:8d:a4:26:47:
c6:23:d3:c8:41:ce:24:00:cc:ae:1c:ea:c4:eb:9d:5f:90:64:
56:10:3d:0c:28:ef:3d:6c:65:03:57:b9:de:43:fb:9e:22:e4:
63:10:21:fb:f3:cf:71:fa:51:c4:05:79:95:c1:7e:86:ef:64:
ab:98:49:0f:91:68:26:13:6a:6f:58:c0:b2:43:3a:ae:20:50:
73:3e:67:97:0b:dc:d1:1f:56:25:16:dc:97:e1:74:b7:02:1b:
5f:4a:57:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:06:21 2026 by rpki-client