Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9DEDF28472E711F1BA8226D9CE1D38B0.roa
File: 9DEDF28472E711F1BA8226D9CE1D38B0.roa (raw, json)
Hash identifier: HFAmMOVyuNk/3eKTlnUeNU0ft2/i0MFT+ES4cK27iJ8=
Subject key identifier: BE:DF:54:D7:35:C5:D8:A0:12:19:76:A8:96:ED:69:40:DB:58:26:37
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D5C3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9DEDF28472E711F1BA8226D9CE1D38B0.roa
Signing time: Sun 28 Jun 2026 11:50:54 +0000
ROA not before: Sun 28 Jun 2026 11:50:48 +0000
ROA not after: Thu 30 Jul 2026 11:50:48 +0000
asID: 9304
IP address blocks: 154.211.24.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120259 (0x1d5c3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 28 11:50:48 2026 GMT
Not After : Jul 30 11:50:48 2026 GMT
Subject: CN=6a410a9e-3e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:11:eb:09:83:0b:cc:45:be:35:fd:de:b2:74:
62:20:1a:c1:2f:5c:4d:01:e4:88:10:7a:ce:dc:33:
6a:f5:68:83:0b:f0:98:ad:68:cc:d9:f4:f5:ca:e2:
c6:4a:44:65:d2:e2:3d:cf:26:de:7f:b4:79:4f:d4:
1b:00:01:8b:21:d0:2c:5d:1e:39:c6:ea:b5:a5:a1:
19:a5:1b:f3:59:ca:00:57:2a:47:cf:e6:fc:3e:d8:
a2:7b:bb:d3:7e:e0:9d:44:10:e4:d6:2a:c8:62:cd:
56:f0:8c:ec:06:e4:c8:28:75:50:c3:24:bf:db:cb:
79:fc:ed:cc:84:4f:37:5b:e5:e0:f6:a3:4e:63:08:
f6:ab:ee:7d:cf:cb:b9:2e:e5:8a:73:27:57:b6:47:
89:cd:c9:a7:ec:5c:93:e9:46:9c:2d:a9:86:fe:d9:
96:23:8a:3e:ef:98:c6:0c:c8:db:d2:4a:92:27:7e:
30:53:bc:40:fd:9f:ad:75:f2:1b:a3:98:27:6a:21:
e7:59:60:8f:6f:48:f5:e1:f4:79:f8:74:2d:17:69:
91:2b:ff:5a:05:06:b1:c4:91:3d:29:f6:d2:e2:59:
f2:29:a1:3f:92:af:f5:68:d0:90:de:97:9c:98:18:
48:e1:98:19:02:19:8b:94:71:00:d9:47:8d:ee:e0:
5a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:DF:54:D7:35:C5:D8:A0:12:19:76:A8:96:ED:69:40:DB:58:26:37
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9DEDF28472E711F1BA8226D9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.24.0/21
Signature Algorithm: sha256WithRSAEncryption
8e:33:fc:f2:cc:cd:a5:f7:96:32:1c:79:55:7b:47:e3:7c:d8:
9c:2c:d4:d6:4d:06:27:a1:92:be:b8:5b:fc:0b:6c:99:ff:a8:
54:a9:7f:b8:7d:ae:f5:af:eb:33:fe:5e:1b:9b:fa:16:5d:66:
2a:ae:8e:48:d1:bb:76:3f:55:5d:e4:a4:9a:a4:90:f2:92:62:
70:b9:40:18:03:89:ab:46:54:83:46:fd:ca:4e:7e:70:7b:eb:
b0:ee:91:04:aa:00:80:2f:49:7c:25:a0:de:59:30:4e:31:11:
af:32:ba:08:91:96:5b:b3:57:26:8d:e7:c1:bf:89:7e:58:e7:
fe:19:29:6d:e5:7b:17:bb:d6:db:c6:cb:1a:3d:f4:5c:3a:1c:
78:40:a4:68:18:a0:34:64:a2:ce:61:b9:63:ed:10:fc:4e:ab:
03:1d:d2:91:66:54:09:82:7e:4d:94:88:12:4d:97:d8:f8:3a:
c0:50:4e:1f:b0:3c:10:3c:15:14:b6:b9:82:29:8c:a7:87:7a:
65:c9:99:42:b6:23:19:8d:4d:5c:20:9d:9b:19:d4:b1:8b:f0:
de:3e:d6:e9:e8:97:84:55:4e:b7:5b:4e:f8:63:89:74:c7:84:
14:4b:c3:3f:86:69:d7:30:8e:3b:80:0e:b0:46:b9:d3:81:a7:
7b:14:28:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:28 2026 by rpki-client