Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A914900A72EC11F1B24632F9CE1D38B0.roa
File: A914900A72EC11F1B24632F9CE1D38B0.roa (raw, json)
Hash identifier: SZJijzJXER4xCKJhNHLoeS7vJ2fFNImD4OXNEZZ/Au8=
Subject key identifier: 7F:C8:46:3F:EE:71:4F:F5:10:06:1C:36:2C:DC:A8:60:C7:1B:D3:70
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D5CD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A914900A72EC11F1B24632F9CE1D38B0.roa
Signing time: Sun 28 Jun 2026 12:27:00 +0000
ROA not before: Sun 28 Jun 2026 12:26:56 +0000
ROA not after: Mon 03 Aug 2026 12:26:56 +0000
asID: 17561
IP address blocks: 154.198.8.0/24 maxlen: 24
154.198.188.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120269 (0x1d5cd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 28 12:26:56 2026 GMT
Not After : Aug 3 12:26:56 2026 GMT
Subject: CN=6a411314-af74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ae:3f:4d:20:91:0b:f2:3b:3d:b5:cd:dc:7a:
5f:5a:0e:94:3d:5c:31:5b:b4:bc:f0:04:da:9b:3e:
ae:73:33:f2:ff:be:48:3e:57:13:44:f9:80:1e:bb:
b8:e9:08:0b:b8:12:9a:40:65:92:65:51:ef:0e:50:
1f:17:cd:14:21:17:70:8b:dd:5f:8b:4a:a4:15:c5:
a8:eb:8d:dd:f0:ab:98:f9:1f:78:45:b2:39:c3:7e:
7b:b9:41:82:1f:87:d5:90:0e:cb:1a:cd:60:54:de:
47:6a:e2:e6:3c:6e:ba:b9:d1:92:a6:91:51:3f:25:
39:8d:05:d5:9e:78:66:64:38:4c:59:93:ee:9e:01:
2f:81:57:59:90:4e:a4:a7:51:15:28:07:72:b4:06:
15:a7:4e:1b:7d:d7:0a:5a:c0:24:03:18:b9:95:cb:
ae:31:44:e6:b1:01:a0:91:2a:ab:a3:5d:b9:9f:80:
b3:75:97:50:6b:2d:f9:b8:45:bd:6f:58:01:84:20:
ae:35:db:d9:41:9b:c5:5a:cb:d5:05:f7:84:df:2d:
0b:16:b0:ea:6b:a3:9f:3c:47:22:66:a7:80:f0:ad:
f7:c9:cb:58:99:50:79:ba:38:f5:a9:25:2f:02:f2:
45:88:e6:12:6f:4b:c2:a2:bd:79:f5:1e:c7:a9:56:
3e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C8:46:3F:EE:71:4F:F5:10:06:1C:36:2C:DC:A8:60:C7:1B:D3:70
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A914900A72EC11F1B24632F9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.8.0/24
154.198.188.0/23
Signature Algorithm: sha256WithRSAEncryption
43:a8:e9:82:78:85:52:0d:9e:ee:40:88:3a:b3:a0:07:0e:c4:
1d:b0:74:dc:fd:7c:bf:5e:c7:9f:82:71:b6:d6:da:bf:ad:79:
ed:5d:75:1e:d4:0d:e8:8e:c9:bc:7c:27:d3:63:65:11:6a:3c:
da:8d:00:ec:be:f3:a7:d0:26:97:43:b1:c1:fb:af:41:29:1f:
db:ea:fe:74:96:60:c6:45:f3:db:09:20:a8:bf:39:cb:8e:01:
7d:23:85:e2:78:36:77:c7:d5:27:15:37:06:53:37:62:a5:46:
98:91:e0:8c:a0:df:45:d6:b4:46:bb:af:a1:97:bb:ce:f1:57:
93:f1:07:0b:73:fb:e9:87:f6:3a:92:00:c2:4d:26:2c:f5:1f:
91:dc:f6:cc:7b:2d:cb:3b:ce:d7:35:9f:17:35:41:f3:11:3d:
20:aa:8a:b1:0d:73:69:9d:3d:8e:a5:dc:bb:02:fc:06:da:c9:
e9:e0:b8:ca:f9:5b:cc:cc:1c:9d:77:3f:92:dd:d2:ea:ef:95:
10:19:4c:03:44:ff:ee:20:59:85:93:7c:38:83:85:ad:b2:8f:
44:01:c6:80:3b:f8:2e:b9:16:2a:79:4e:a3:92:1d:82:17:3f:
99:07:b1:60:08:dd:ff:cc:72:93:74:3f:9d:08:f0:6d:59:0e:
b6:da:9a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:22 2026 by rpki-client