Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91560FAA92EC11F1A990ECC7CE1D38B0.roa
File: 91560FAA92EC11F1A990ECC7CE1D38B0.roa (raw, json)
Hash identifier: Emxg14JSTAIYa2mInA4C0UUiYClXGU05S86krVT65+U=
Subject key identifier: 6C:92:CA:8A:9E:71:F3:38:C7:65:15:47:CB:48:EC:11:D5:35:1A:3E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DD86
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91560FAA92EC11F1A990ECC7CE1D38B0.roa
Signing time: Sat 08 Aug 2026 05:46:58 +0000
ROA not before: Sat 08 Aug 2026 05:46:54 +0000
ROA not after: Sun 06 Sep 2026 05:46:54 +0000
asID: 142240
IP address blocks: 154.197.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 11 Aug 2026 00:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122246 (0x1dd86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 8 05:46:54 2026 GMT
Not After : Sep 6 05:46:54 2026 GMT
Subject: CN=6a76c2d1-d3e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1d:45:45:64:1c:e6:85:59:05:f1:ca:42:b2:
50:f3:5b:2e:6f:05:3b:75:af:f2:54:1c:f2:fa:d8:
65:fa:dc:2d:5b:aa:99:33:13:db:bb:ac:f8:d3:a3:
54:ee:8c:ff:26:e4:8a:00:7a:ba:18:2d:4b:7f:fd:
71:f6:30:c3:8b:a2:ea:07:ae:fc:a7:10:68:a4:8e:
e0:13:8d:b0:ee:03:ee:91:6c:17:13:71:4b:67:ee:
88:57:66:b5:91:1c:a4:69:f8:d2:73:6b:b9:27:41:
ab:59:90:4e:44:b4:20:be:22:8f:80:4e:58:b9:b4:
42:4e:7d:82:c8:5e:97:a8:11:23:73:8a:89:99:90:
67:08:93:5d:35:d4:2e:d1:04:e6:14:78:a8:44:66:
10:f1:f0:29:bf:1b:75:3f:d9:2e:25:94:1f:02:46:
30:cb:7c:0e:9a:47:c3:51:5e:a9:8d:a8:a6:5c:9b:
d1:bc:a4:b3:1a:47:57:54:7f:13:e2:5d:18:c9:87:
f3:df:6c:b0:bc:b4:d3:61:51:87:fb:54:be:df:cd:
ce:2d:ab:93:f6:df:b9:63:fe:73:f2:dd:86:7a:e6:
48:23:9d:5b:d5:30:b5:ff:bd:90:aa:ac:5d:08:b6:
18:ea:81:a8:34:01:c9:81:3b:70:a6:c9:ee:9d:de:
00:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:92:CA:8A:9E:71:F3:38:C7:65:15:47:CB:48:EC:11:D5:35:1A:3E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/91560FAA92EC11F1A990ECC7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.24.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:a9:7e:d3:81:a8:ec:70:e9:3a:ba:31:3a:2b:5f:95:45:9b:
74:ff:1b:9a:e9:4b:eb:d8:ed:73:58:b2:91:d2:cc:e7:99:cb:
3b:6c:ea:f7:3f:36:46:36:34:26:4e:8d:e2:53:2e:0a:80:da:
f0:25:14:a6:70:16:13:65:6b:84:2c:95:fb:bc:39:63:8b:a4:
79:19:49:4d:7c:ac:58:2b:cf:8b:40:da:0a:20:61:f3:de:82:
91:7c:c3:73:01:22:db:d4:45:7b:e0:e0:63:c9:d7:24:ff:61:
ed:65:05:39:20:a6:ee:ef:a9:df:46:63:45:3c:a5:79:77:44:
f0:ea:3a:15:b0:78:55:b3:e7:f6:5c:07:07:5c:80:db:81:6f:
20:d4:45:9e:07:db:66:fd:cc:ff:f5:e3:88:99:4c:68:49:ba:
e8:73:1a:b9:61:69:8c:4c:b2:6a:e3:ee:80:67:4c:f0:70:0f:
ca:ee:a0:81:d3:95:3e:ee:46:46:03:d4:07:e9:6e:4f:95:c8:
62:29:23:51:2a:e1:e3:aa:5c:75:0b:7a:95:96:56:ca:53:99:
86:ac:62:ee:20:bf:fe:3a:3c:55:10:22:32:c3:23:4c:f8:29:
21:31:43:51:f1:91:2b:58:4c:5b:9b:bc:e7:ea:1e:b9:02:c6:
d1:09:8a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 9 15:17:23 2026 by rpki-client