Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0EAC91091D411F19E25930ECF1D38B0.roa
File: A0EAC91091D411F19E25930ECF1D38B0.roa (raw, json)
Hash identifier: /JzUGaODQ/+U259/mfQ9MiNwitABvx5RWMSsRpipzOs=
Subject key identifier: 33:56:88:C9:A7:8B:DC:7C:B5:B7:50:34:D6:1F:84:58:41:44:EF:FC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DD01
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0EAC91091D411F19E25930ECF1D38B0.roa
Signing time: Thu 06 Aug 2026 20:23:05 +0000
ROA not before: Thu 06 Aug 2026 20:23:01 +0000
ROA not after: Fri 11 Sep 2026 20:23:01 +0000
asID: 401664
IP address blocks: 154.81.8.0/23 maxlen: 24
154.81.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122113 (0x1dd01)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 6 20:23:01 2026 GMT
Not After : Sep 11 20:23:01 2026 GMT
Subject: CN=6a74ed29-a3cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3c:8d:11:96:ca:4b:6f:c8:fc:3a:ae:48:81:
ce:0a:1b:ed:fb:c1:72:39:0d:88:cf:7d:37:0e:20:
61:b0:8d:85:1b:ca:ef:2d:55:c3:5d:ea:93:88:0a:
21:79:25:64:d4:48:d3:8f:67:df:24:37:0d:84:33:
9b:3e:fc:33:45:af:7c:8e:ef:e8:df:68:fc:d9:a2:
c0:94:1e:3a:97:df:21:00:98:e3:d9:0e:10:2f:98:
e7:47:fc:27:fb:49:9e:96:91:f3:6d:28:b8:b5:8b:
57:39:af:e4:b6:0c:ee:fb:f8:df:bb:44:81:7d:82:
01:a6:49:b2:b3:b6:2b:b0:d0:40:d7:37:8d:dc:1f:
b1:95:42:0a:68:cb:f7:80:77:79:46:96:bc:38:1c:
a2:23:b3:a4:38:74:bb:07:f4:7c:31:bb:b8:92:92:
4f:64:30:a8:df:da:95:43:53:9e:95:4c:7c:ae:af:
89:06:88:b8:19:f9:28:a5:1c:ae:c8:cb:c5:81:ca:
2f:6a:81:9d:91:24:60:5c:12:b4:af:69:c1:19:4a:
fa:8e:1c:68:98:db:7d:d1:66:a6:d5:cc:33:26:bc:
32:55:1c:b7:7d:db:b0:e1:a0:48:14:f6:21:54:cf:
94:37:4b:5c:7e:5e:05:c5:69:ec:0b:c9:3c:62:02:
b0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:56:88:C9:A7:8B:DC:7C:B5:B7:50:34:D6:1F:84:58:41:44:EF:FC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A0EAC91091D411F19E25930ECF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.8.0/23
Signature Algorithm: sha256WithRSAEncryption
73:66:e1:09:f7:0a:01:84:aa:77:51:9b:b6:91:45:5f:fe:f7:
ed:9b:a8:4b:db:ae:cc:de:53:db:61:90:75:ec:3e:80:7f:b6:
be:95:5f:56:9d:fe:0f:12:4e:75:f3:1f:45:b5:c4:8f:ec:ec:
65:09:20:c3:ea:fc:ee:a0:df:cd:51:94:ad:71:c4:eb:f0:78:
d9:1c:c8:22:9d:b0:61:6e:b0:ec:71:bc:13:7b:ec:13:89:d2:
f2:37:3a:64:c7:9d:7f:e6:04:88:91:c7:83:9f:cb:ea:f4:34:
10:61:4d:fa:a2:4e:f0:56:d5:9a:ba:04:ff:a0:9c:e5:af:a4:
2a:36:f6:49:00:03:59:ff:8a:46:64:20:80:cc:b9:a2:fb:f3:
d4:4f:28:b1:aa:67:1e:be:80:08:99:a3:e2:37:68:19:17:95:
75:47:65:16:26:c4:36:03:f1:77:e6:2b:b6:52:55:6c:c9:89:
77:b8:03:38:0d:cd:e9:52:eb:a1:57:a1:3c:e7:c6:69:ee:33:
a5:c5:a8:f4:28:0c:90:6e:5b:b5:20:2c:9a:e3:7c:2e:bb:ed:
dd:27:e7:55:93:66:03:3c:58:49:6d:0f:f2:b8:7b:41:23:18:
a9:51:55:d9:2d:47:ba:5e:01:68:42:54:03:9e:3f:0a:8b:50:
d5:8a:db:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:05:45 2026 by rpki-client