Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/927CC8D07FC611F18B8C0FCCCE1D38B0.roa
File: 927CC8D07FC611F18B8C0FCCCE1D38B0.roa (raw, json)
Hash identifier: k/7XNN7XKcbx5u42QUCIPmm1hx7+w1Fj5vRPyQJ4YmY=
Subject key identifier: 13:3A:75:15:27:89:D1:DF:76:F5:75:3C:81:F5:69:77:92:70:EB:D2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D8FE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/927CC8D07FC611F18B8C0FCCCE1D38B0.roa
Signing time: Tue 14 Jul 2026 20:57:07 +0000
ROA not before: Tue 14 Jul 2026 20:57:02 +0000
ROA not after: Sun 23 Aug 2026 20:57:02 +0000
asID: 215224
IP address blocks: 154.83.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Jul 2026 17:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121086 (0x1d8fe)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 14 20:57:02 2026 GMT
Not After : Aug 23 20:57:02 2026 GMT
Subject: CN=6a56a2a2-c976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5e:6e:8f:31:bb:00:04:85:25:c2:41:59:79:
fe:e6:8b:a4:4c:af:70:7d:40:0c:71:0a:43:76:e9:
a7:c6:09:43:c8:2f:68:c0:f7:c8:23:13:0a:d9:0f:
5f:ac:f8:8c:91:08:0b:63:4d:bf:be:c8:7c:5b:43:
a7:1e:5f:0b:d1:03:9a:49:f0:47:91:78:8b:fd:36:
9f:9f:c6:16:6e:09:86:f8:97:c4:0d:08:ab:64:94:
20:77:c0:4f:30:a7:d2:2c:df:cd:0e:de:1e:e1:95:
77:62:42:0f:11:f0:56:87:7e:12:b0:9b:28:13:3a:
c7:2a:da:b5:b9:c3:97:0d:94:ad:74:03:63:b9:0e:
ca:a3:74:7d:c1:bd:9a:c8:5a:6d:ba:38:5f:cb:63:
03:17:2f:d5:06:a4:63:ec:80:f8:4f:22:93:71:c9:
73:28:54:37:3f:7f:52:0d:11:dd:67:cc:13:8c:4a:
d2:e4:35:9e:9b:87:85:a2:96:b6:f3:30:88:33:d8:
e1:17:c9:13:98:00:b9:8c:ba:54:38:97:49:14:6f:
ff:b4:bb:8b:ad:e5:57:11:51:b0:82:1f:a7:3c:42:
6f:6b:36:d4:21:7d:26:0d:3b:3e:4a:01:a4:a7:34:
87:fd:fb:e0:05:dc:04:5c:b3:19:9b:ac:ce:62:a9:
54:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:3A:75:15:27:89:D1:DF:76:F5:75:3C:81:F5:69:77:92:70:EB:D2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/927CC8D07FC611F18B8C0FCCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.134.0/24
Signature Algorithm: sha256WithRSAEncryption
23:17:ab:17:33:17:97:61:d0:57:80:7a:45:c9:2a:ee:fa:b0:
c1:97:dc:bb:a4:15:1b:19:38:85:55:b2:62:4f:d2:67:f7:e4:
1c:cd:33:dc:1d:89:c9:2e:11:46:62:c5:de:49:9c:3d:c7:fa:
e1:27:77:fe:72:9e:14:c4:84:a8:bd:f3:42:7e:0d:90:4f:fa:
7a:80:f9:79:a4:98:df:01:80:29:22:e7:1e:65:a7:66:6a:80:
13:3b:0f:f6:11:6f:0b:69:b7:c7:6c:37:0b:98:0e:fd:25:f1:
c6:8f:11:64:d0:93:ee:07:c8:7f:b1:24:22:d2:e0:98:15:1d:
0f:44:d4:81:ca:a8:9c:34:ca:bf:ce:6c:4c:25:c2:24:c3:59:
ea:73:30:83:fd:f1:82:7b:fb:d0:e8:28:85:d6:70:7d:1a:84:
9c:a7:75:ab:d4:c1:dd:36:d1:b4:61:07:6f:ca:ef:97:28:2b:
8f:54:39:70:94:3f:c7:ea:39:1e:53:a7:dc:00:01:5d:2e:43:
34:e0:a7:7a:cf:dc:15:36:49:bb:d2:65:e6:f8:21:6f:88:3a:
5f:23:ce:a7:8b:d4:77:5a:31:aa:2e:c9:65:ad:fb:af:21:28:
9f:54:6f:a6:07:4a:01:ec:e3:13:c6:6b:5f:03:6d:c1:78:c8:
77:2b:3f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:34:54 2026 by rpki-client