Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/916837D07D6F11F18011580DCF1D38B0.roa
File: 916837D07D6F11F18011580DCF1D38B0.roa (raw, json)
Hash identifier: VioSUE+h2Lc8tOcd17ej98Wh+5tbE1yFBVz+VVvhFZg=
Subject key identifier: F4:28:69:B2:2D:29:6F:22:89:30:71:ED:BC:01:08:2A:D4:58:51:08
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D856
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/916837D07D6F11F18011580DCF1D38B0.roa
Signing time: Sat 11 Jul 2026 21:29:16 +0000
ROA not before: Sat 11 Jul 2026 21:29:11 +0000
ROA not after: Tue 10 Jul 2029 21:29:11 +0000
asID: 17561
IP address blocks: 154.198.192.0/24 maxlen: 24
154.198.193.0/24 maxlen: 24
154.198.194.0/24 maxlen: 24
154.198.195.0/24 maxlen: 24
154.198.196.0/24 maxlen: 24
154.198.197.0/24 maxlen: 24
154.212.1.0/24 maxlen: 24
154.212.2.0/24 maxlen: 24
154.212.3.0/24 maxlen: 24
154.212.4.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120918 (0x1d856)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 11 21:29:11 2026 GMT
Not After : Jul 10 21:29:11 2029 GMT
Subject: CN=6a52b5ac-3dd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e7:46:68:5e:d2:8c:8a:3e:6b:89:24:3e:49:
7d:2d:f5:46:d5:b6:92:23:c7:96:93:78:16:86:28:
da:6e:a6:59:04:42:5f:7f:b9:72:80:6e:0a:30:22:
f5:95:2b:fa:73:8c:5b:b6:4a:21:5e:3a:43:30:70:
f2:bf:b0:da:c1:cb:ec:53:5b:31:82:b2:80:3e:b8:
f9:a0:6f:dc:11:5d:b2:7e:33:fd:b7:6a:06:75:d6:
2c:03:4b:41:af:4c:94:f4:a0:a3:8d:08:d0:02:7a:
41:19:d8:2c:48:cd:1e:60:c1:c4:95:6c:c4:c5:77:
3e:a3:5a:c6:64:9a:3e:1a:bb:41:00:dc:2f:58:16:
7e:be:86:15:42:8d:e8:cb:3b:ae:36:39:50:04:21:
8b:2b:c2:dd:63:05:af:fc:e8:61:00:45:f3:39:a0:
58:c8:cc:36:66:ea:7b:a7:d7:de:8c:02:a3:94:d4:
76:ee:2f:1f:20:e6:1d:16:ec:1c:de:ac:56:bf:da:
d8:3a:7e:13:4a:2a:39:b9:21:d1:52:c8:fd:1f:bf:
5e:12:c8:f2:d8:1f:3e:05:9c:51:8e:51:98:ef:71:
df:e5:6a:16:dd:ce:06:99:2b:ef:d4:c6:e4:51:fc:
6e:e8:28:b6:48:7b:17:98:3c:60:60:73:5f:85:4e:
04:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:28:69:B2:2D:29:6F:22:89:30:71:ED:BC:01:08:2A:D4:58:51:08
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/916837D07D6F11F18011580DCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.192.0-154.198.197.255
154.212.1.0-154.212.4.255
Signature Algorithm: sha256WithRSAEncryption
55:c0:0a:d8:49:7b:4b:6e:76:95:22:48:22:2b:a6:b7:3c:05:
71:c6:4a:6b:df:e5:e1:ca:22:df:38:45:3b:f9:60:a8:6b:c8:
7c:b1:61:26:a8:41:cc:95:ef:7a:50:79:dc:f2:bb:70:b2:ba:
28:ff:9f:5c:72:1b:26:ee:71:dc:a5:7c:78:2a:d5:80:ae:a0:
cb:c0:09:e1:27:ea:97:22:91:fa:c9:83:c4:6a:85:16:29:95:
8d:f1:24:60:f9:10:4b:d8:8b:23:dd:b8:4f:d2:4b:18:aa:42:
2b:ef:c3:41:1b:d2:ce:de:1c:c0:ac:93:f0:fb:34:0f:e5:2f:
43:92:d3:a0:d0:c5:d7:96:ac:e5:b4:c3:1d:95:97:f9:35:5b:
17:53:c9:04:4c:96:44:7e:54:b6:58:9e:81:47:c7:a4:7a:09:
be:a2:cb:55:05:9c:3d:a0:4a:1b:44:fd:c7:26:02:37:c8:b3:
31:78:16:90:42:8a:ae:aa:17:5f:d2:ad:9f:eb:09:ac:05:37:
de:19:83:33:20:ca:29:ce:92:d0:75:60:d6:ca:36:f0:69:b4:
f1:49:c7:7e:4a:bd:d0:4d:b7:5d:fa:64:85:9a:8b:80:91:b0:
e4:c8:86:db:0c:9a:0d:03:f6:ee:f4:cf:25:6b:f7:3d:c5:89:
97:64:70:d1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:23 2026 by rpki-client