Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/99215E68924411F1991472C8CE1D38B0.roa
File: 99215E68924411F1991472C8CE1D38B0.roa (raw, json)
Hash identifier: 00+SkApvWlTxfRNJsSgHldJmU5Iy9g+30jVpR9a6Ci8=
Subject key identifier: 29:1B:D2:D9:1A:48:1D:DE:00:CF:36:F3:A6:1D:BF:AA:08:09:66:56
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DD77
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/99215E68924411F1991472C8CE1D38B0.roa
Signing time: Fri 07 Aug 2026 09:44:35 +0000
ROA not before: Fri 07 Aug 2026 09:44:31 +0000
ROA not after: Thu 22 Apr 2027 09:44:31 +0000
asID: 150706
IP address blocks: 154.91.32.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122231 (0x1dd77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 7 09:44:31 2026 GMT
Not After : Apr 22 09:44:31 2027 GMT
Subject: CN=6a75a903-11b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:63:db:0b:85:9a:6b:2c:10:c3:56:33:52:dc:
a6:92:6e:cd:88:18:e3:3b:9f:fa:a2:46:78:d2:0d:
fe:3d:c2:10:b6:09:f3:0b:f1:55:77:ac:5c:95:bd:
34:a9:02:7e:56:77:91:79:31:64:d0:7e:d0:9a:39:
e2:09:10:c9:e8:cd:0b:2e:bf:99:3d:e7:d5:fd:08:
cc:85:8a:c2:38:4c:09:f7:1a:87:1b:09:50:2a:6b:
b7:5d:0c:0f:5a:5c:90:ff:ae:3b:30:4c:ed:28:2f:
c5:21:f5:ca:84:86:cc:c0:de:e3:38:99:f6:9e:71:
03:3d:fd:b4:20:07:f5:17:42:59:00:27:cc:77:05:
f8:f9:91:ed:32:05:65:74:a5:5c:8b:e1:24:5c:e1:
a4:b4:4b:0f:b7:22:36:5d:69:a7:f4:f2:27:59:41:
e6:87:91:9a:aa:cf:31:c5:db:e2:8a:44:a1:ed:00:
d2:9d:67:f6:9d:e8:44:aa:f2:69:16:7c:2e:8d:b0:
56:96:b1:07:3c:c9:b8:04:83:f4:d9:a9:00:0d:53:
0e:00:1f:0b:72:eb:78:8e:cc:1b:fa:58:23:e7:93:
3f:35:42:38:c3:e2:6d:b8:f7:bc:f6:bb:24:f8:ce:
e4:0d:a3:22:fd:a6:13:f4:95:18:c0:16:c8:b3:29:
b0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:1B:D2:D9:1A:48:1D:DE:00:CF:36:F3:A6:1D:BF:AA:08:09:66:56
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/99215E68924411F1991472C8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.32.0/22
Signature Algorithm: sha256WithRSAEncryption
88:0a:23:ca:85:7d:cf:9d:89:6a:aa:8e:b9:43:4c:f1:e7:80:
4e:6f:d0:e6:d2:cd:e5:fa:69:9d:a8:0f:10:5f:68:00:a3:65:
83:1b:1f:e7:f3:19:50:5f:b1:a9:cf:4e:9b:98:f3:3d:cb:5a:
ac:39:14:92:17:88:e7:c3:12:56:2d:b7:b5:a7:ed:d9:e4:fd:
d9:0b:eb:0c:a5:b5:b0:49:47:a9:cf:da:61:e2:9a:1c:4e:c6:
94:d8:3a:ec:b4:f9:65:61:05:2b:2b:d4:f6:ff:08:7a:f1:e7:
eb:40:9b:1b:58:3c:f9:75:c3:aa:d5:d2:33:a8:b1:e6:6e:c3:
67:08:4a:89:43:bb:2d:18:0f:b5:a6:40:fc:6a:1e:e5:34:da:
47:af:c9:64:01:04:36:7d:6f:72:6e:42:16:de:08:8e:b1:33:
40:57:69:34:28:2a:5a:70:ce:fa:84:92:aa:a0:40:b3:ca:82:
72:a0:94:72:f9:be:04:20:f0:e7:28:d2:f5:71:4a:12:53:66:
e5:3e:d5:c5:48:61:c3:67:e4:96:ca:02:2c:b5:84:f6:62:2e:
d8:83:98:9e:cc:2a:95:3e:2f:32:54:0b:d2:6a:f5:3e:df:51:
f0:41:4e:18:04:0d:ee:01:cb:73:d0:63:89:f6:41:dd:18:e5:
4c:6a:4c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:08:46 2026 by rpki-client