Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90FFC5CC720411F19810D8F7CE1D38B0.roa
File: 90FFC5CC720411F19810D8F7CE1D38B0.roa (raw, json)
Hash identifier: YezSX0YdIB7J992hFrvtr+PZT9+8qhW/L5RLbrcoABg=
Subject key identifier: 12:AC:C6:C0:FF:53:32:B1:78:CB:8A:90:8B:18:69:92:EA:12:9E:8A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D58A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90FFC5CC720411F19810D8F7CE1D38B0.roa
Signing time: Sat 27 Jun 2026 08:45:37 +0000
ROA not before: Sat 27 Jun 2026 08:45:32 +0000
ROA not after: Thu 30 Jul 2026 08:45:32 +0000
asID: 9304
IP address blocks: 154.211.24.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 11:51:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120202 (0x1d58a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 27 08:45:32 2026 GMT
Not After : Jul 30 08:45:32 2026 GMT
Subject: CN=6a3f8db0-9444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a8:b5:59:c2:c3:bf:80:c6:79:dd:c8:13:96:
54:3a:65:a7:eb:4c:57:6d:84:ac:5f:2c:75:87:f2:
1b:e6:4b:b5:19:32:28:15:35:6d:d1:49:00:ce:b4:
32:49:b5:c1:b0:e4:c8:4d:41:8b:44:83:3b:af:c2:
64:f8:2c:af:74:89:94:67:64:8c:6f:41:82:9c:7a:
06:38:be:f5:f0:0f:93:6b:95:20:72:9b:a9:1c:73:
ae:93:67:c9:ee:05:4e:9b:2d:c6:6b:98:93:de:c5:
51:c7:24:03:b8:47:22:a6:1a:28:9e:68:28:ef:a8:
cf:f7:f7:e0:5a:6b:c5:8d:16:24:da:69:53:2a:4f:
ff:9a:a1:8d:94:08:5e:39:fc:11:fb:38:dc:24:e1:
df:f0:49:c5:71:46:7c:81:3a:6f:03:a3:5c:63:e3:
93:c5:ae:6c:9f:d6:26:a7:ba:0b:3c:8d:84:ea:66:
8f:6a:49:7c:77:12:27:8e:8c:a8:17:e4:29:0b:86:
8c:12:6e:7e:f9:ea:18:41:88:82:bd:90:2d:59:11:
95:0c:8c:79:ec:d2:10:26:23:48:2c:03:93:c3:d0:
14:ac:f9:20:09:c3:8d:23:1b:95:e4:6c:56:e0:83:
e9:d5:b5:02:d3:13:4a:4a:00:8f:43:10:8d:42:87:
c2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:AC:C6:C0:FF:53:32:B1:78:CB:8A:90:8B:18:69:92:EA:12:9E:8A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/90FFC5CC720411F19810D8F7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.24.0/21
Signature Algorithm: sha256WithRSAEncryption
6b:f8:bb:99:41:a3:f7:9c:21:8a:84:f3:77:76:cc:c6:8d:25:
29:b0:a1:50:1b:a8:28:6e:43:09:f6:7d:ca:83:2c:59:24:77:
61:24:e2:37:bc:93:9e:0d:ca:1f:9b:c6:fc:23:4f:22:f2:43:
e2:24:76:60:e2:c9:7b:dc:4a:0b:cd:28:1e:11:94:68:c7:2c:
c4:62:33:21:b7:df:e9:fe:a7:41:ba:8d:38:83:42:7f:23:09:
12:11:c0:47:36:92:37:0d:3a:1f:e8:61:5f:49:9f:e1:57:b9:
24:4b:20:26:2d:2a:5c:2d:9d:d7:c5:a5:24:07:74:55:33:ce:
d8:a1:af:d7:b5:71:54:8d:9d:2f:4a:81:50:a6:32:7c:83:29:
e9:3f:f5:f6:85:29:74:a5:ee:10:3f:cb:d9:9f:63:27:52:46:
e2:91:c7:dd:81:db:3a:9e:30:e0:a7:27:7d:8f:d6:1b:ad:c3:
11:c7:33:12:a4:c5:e7:62:e9:6e:4e:01:09:47:ca:b5:28:e2:
b0:b6:a2:87:84:c9:d9:e3:91:8c:ca:20:63:18:32:a9:8f:d9:
2f:03:91:b7:21:83:fc:2d:9a:56:8b:68:ad:b7:7f:44:53:97:
39:ad:3d:88:3a:4e:fa:dc:66:cf:b4:2b:cb:e2:0e:2c:f4:50:
69:10:f3:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:45:50 2026 by rpki-client