Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A320F1B48F0911F197D81BB6CE1D38B0.roa
File: A320F1B48F0911F197D81BB6CE1D38B0.roa (raw, json)
Hash identifier: Qw80YMT4JrfmiBfyqU9/YGVdFEDzQEZv56l/rC55izo=
Subject key identifier: AE:34:B6:AF:1C:5F:CE:52:73:B9:09:DB:C8:86:AF:C0:12:D2:81:12
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DC58
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A320F1B48F0911F197D81BB6CE1D38B0.roa
Signing time: Mon 03 Aug 2026 07:04:58 +0000
ROA not before: Mon 03 Aug 2026 07:04:54 +0000
ROA not after: Thu 13 Aug 2026 07:04:54 +0000
asID: 141883
IP address blocks: 154.86.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121944 (0x1dc58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 3 07:04:54 2026 GMT
Not After : Aug 13 07:04:54 2026 GMT
Subject: CN=6a703d9a-5263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9e:69:d3:46:2c:d3:17:cf:3f:a2:ac:5a:1a:
34:9c:ef:ef:29:13:3a:f4:75:25:54:d3:9c:03:91:
c5:5c:ea:b7:a3:b7:4e:9a:a9:9c:d7:ee:e9:9a:57:
c6:35:50:e9:f1:07:3c:ed:3a:54:19:b1:93:89:da:
4b:d1:51:9c:15:0e:c5:c0:5e:e7:cb:76:aa:15:5f:
43:cd:0c:83:c6:4c:59:b5:cb:73:f8:f0:27:35:bc:
61:f8:21:f8:dd:1b:e8:a1:0f:49:91:01:76:ea:b4:
49:ba:77:4d:42:3d:d3:66:a4:64:e5:0d:b5:2f:a3:
e8:7a:1a:c7:27:7a:d6:00:39:41:e6:99:28:eb:56:
f9:b5:37:28:7f:56:e7:9f:9b:e9:c6:26:95:c0:09:
aa:54:b3:54:ef:18:be:c1:40:bd:11:e7:88:a9:ad:
ff:8d:28:a3:a9:43:19:f0:d8:2a:ef:48:fe:20:19:
3b:ad:24:ea:f3:0b:90:34:2d:d7:7c:49:2e:27:e4:
6a:20:20:a2:e7:16:11:5b:e5:61:bc:46:d1:fe:72:
13:e2:98:5f:26:66:fb:65:dd:70:68:24:d2:40:6b:
26:ad:72:ea:4e:f8:3c:76:9d:2e:a2:bb:1f:94:ee:
29:f9:44:95:b7:7b:e6:a5:0f:d7:44:8e:9b:78:68:
dc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:34:B6:AF:1C:5F:CE:52:73:B9:09:DB:C8:86:AF:C0:12:D2:81:12
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A320F1B48F0911F197D81BB6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.0.0/24
Signature Algorithm: sha256WithRSAEncryption
19:e3:a4:9a:42:87:e4:02:96:43:94:58:91:fb:d2:b4:9f:38:
85:1b:3c:f8:7b:28:7b:26:04:3b:cf:09:a2:6f:5c:19:44:80:
a8:21:0e:97:52:a7:a6:69:50:30:1a:56:05:79:e0:11:cb:d8:
c8:3d:ae:62:07:09:3b:72:80:af:74:32:f1:9f:c8:0b:2c:75:
f9:5a:bb:d0:4d:36:54:a3:7b:02:e0:b6:51:30:36:d1:d3:e6:
f1:63:12:6c:82:07:e3:55:7c:84:fd:17:ff:9c:50:eb:da:0a:
85:a7:39:a8:8a:39:53:63:2c:41:65:5d:b6:35:b9:f2:83:1c:
e4:cd:4f:81:1d:91:a1:67:b6:bb:6f:b6:be:92:bd:84:ff:f9:
9a:f4:57:0d:ff:73:67:44:c6:96:e3:50:84:52:eb:2e:ed:ff:
89:3f:25:1a:d6:31:21:01:ae:ca:a5:e6:1b:70:67:36:34:97:
f6:82:50:b0:fb:58:01:56:ca:59:e4:e1:95:02:4b:82:21:77:
01:2c:9c:c1:01:ed:82:50:1e:d8:6e:c7:c6:f4:df:29:92:56:
3d:9d:e1:67:24:20:29:43:b8:6a:71:0d:91:66:56:8b:4b:48:
5a:cc:34:62:da:b1:0e:52:74:6c:c9:3a:8a:ee:0f:92:a2:a2:
01:66:d3:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:07:57 2026 by rpki-client