Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A64C12F2755E11F1928A1ED3CE1D38B0.roa
File: A64C12F2755E11F1928A1ED3CE1D38B0.roa (raw, json)
Hash identifier: PwJYaiwOtEuCInnpycr6YWLxm66erOA2NRng9rkOkpU=
Subject key identifier: 32:13:27:B8:5D:A8:56:14:B2:9C:66:52:F6:3D:08:CA:8D:16:C3:F1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D644
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A64C12F2755E11F1928A1ED3CE1D38B0.roa
Signing time: Wed 01 Jul 2026 15:08:01 +0000
ROA not before: Wed 01 Jul 2026 15:07:56 +0000
ROA not after: Sun 09 Aug 2026 15:07:56 +0000
asID: 48031
IP address blocks: 154.210.239.0/24 maxlen: 24
154.219.94.0/24 maxlen: 24
154.219.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 12:38:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120388 (0x1d644)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 1 15:07:56 2026 GMT
Not After : Aug 9 15:07:56 2026 GMT
Subject: CN=6a452d50-7ff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:c1:4d:07:67:81:81:67:a4:2c:38:87:10:61:
67:e1:a6:bd:79:f2:59:e2:c3:16:89:8a:4d:1d:ed:
d6:e2:8b:3a:13:5e:6b:73:db:c9:1e:23:dc:71:16:
1c:53:90:40:bb:cc:0b:97:00:91:65:9f:19:ab:ea:
60:28:f0:a0:e6:38:e4:8b:70:88:e2:46:cd:27:13:
88:6a:8e:b7:e5:43:5c:e0:a4:62:4e:75:d4:5c:81:
02:1f:65:8c:56:3e:e6:5c:ae:73:6e:cb:b6:fb:f2:
20:ca:99:27:63:48:da:e0:4f:1d:66:0d:8b:8c:e4:
c4:f7:b3:cb:99:c1:43:60:5b:61:6e:1e:3a:ca:ed:
b5:24:bf:c6:6b:ac:6b:96:2d:7b:ee:0b:f5:59:f8:
2e:97:6f:9a:6b:1c:9c:2a:9c:01:2e:ab:7b:99:dc:
65:ff:c7:39:27:7e:95:96:07:bd:cc:96:7b:86:f5:
61:94:28:e0:25:f8:33:8c:81:fa:8b:5a:b1:52:18:
be:c8:8a:48:eb:7c:3c:44:8d:6c:25:20:69:95:48:
c2:9c:79:05:58:39:a1:71:b1:23:15:83:61:52:69:
a7:59:02:44:5b:3c:6b:b5:bd:1b:e8:60:ff:e4:2f:
0d:e8:98:13:4b:af:e2:e5:71:48:cd:dd:4a:c9:49:
8b:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:13:27:B8:5D:A8:56:14:B2:9C:66:52:F6:3D:08:CA:8D:16:C3:F1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A64C12F2755E11F1928A1ED3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.239.0/24
154.219.94.0/23
Signature Algorithm: sha256WithRSAEncryption
c5:85:69:d5:c1:f2:de:dd:7a:85:43:b9:e6:8c:d3:47:89:36:
95:4f:0d:6e:dc:6a:10:2e:5a:66:45:37:97:ce:c5:19:39:e7:
19:f8:60:2a:c2:97:36:a4:25:ba:0d:0d:e7:e8:05:46:14:ad:
db:89:36:ba:a8:32:9b:85:38:ca:91:8a:32:47:69:79:f0:3a:
e7:d2:9b:a3:e1:18:24:bb:8c:b9:ae:aa:75:fe:eb:99:e7:4f:
dd:7a:63:5c:2e:f7:3f:47:85:45:12:88:f9:68:04:21:d7:02:
d9:96:b3:82:21:69:5a:34:df:95:91:72:b9:81:16:86:f1:39:
8d:02:7c:69:ab:fa:31:1d:8e:11:0d:4d:2a:63:ba:05:55:53:
d2:ff:ac:6d:f3:b1:67:62:f9:c1:a9:c2:ce:9f:c2:6c:47:70:
d6:7e:d9:bd:cd:a1:b9:55:26:44:60:26:e1:26:76:d2:db:e0:
59:c1:e2:ce:93:57:87:b3:74:af:52:2f:05:b8:6d:19:6c:0b:
56:c7:d5:da:65:3d:28:6f:32:c0:a9:ac:78:c9:13:94:f5:02:
b9:e4:55:af:17:6a:a2:d7:9c:e6:30:88:8e:7a:52:0d:58:59:
aa:fd:e2:a4:2c:66:36:93:ad:10:f8:57:2d:56:3f:8c:aa:e5:
60:7a:15:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:10:04 2026 by rpki-client