Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9BF030A924011F1ADC768AFCE1D38B0.roa
File: A9BF030A924011F1ADC768AFCE1D38B0.roa (raw, json)
Hash identifier: 6nfRont0W7VoKs5wpbdxP09tk6S3E5fK8NmgB/ORsoM=
Subject key identifier: 8A:E0:64:84:8B:86:F2:41:14:9A:A4:AB:19:9C:8C:CA:34:2E:DB:18
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DD67
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9BF030A924011F1ADC768AFCE1D38B0.roa
Signing time: Fri 07 Aug 2026 09:16:25 +0000
ROA not before: Fri 07 Aug 2026 09:16:21 +0000
ROA not after: Sun 06 Sep 2026 09:16:21 +0000
asID: 153517
IP address blocks: 154.86.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122215 (0x1dd67)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 7 09:16:21 2026 GMT
Not After : Sep 6 09:16:21 2026 GMT
Subject: CN=6a75a269-b876
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:73:99:40:72:b6:52:d1:3f:d0:46:2b:f3:20:
fb:21:b9:37:6d:3a:fa:e3:a6:79:66:61:78:ce:ae:
67:e9:c4:85:a3:29:60:80:66:bd:ea:c1:9c:0c:1c:
e5:07:7b:80:6c:5e:27:09:9e:01:db:57:2d:43:d0:
57:03:50:c0:0d:ac:95:ea:d8:5c:7d:3f:2a:54:4c:
7c:d3:b5:5d:76:45:3c:4e:d1:86:c1:f6:52:b8:4d:
28:a3:77:30:d3:61:7e:f2:44:ec:a7:79:46:8e:aa:
9f:8b:28:67:f3:53:f5:2d:9b:f2:dd:94:2b:9d:92:
c3:cc:88:41:d5:d9:d2:35:2e:04:49:e5:f8:78:af:
ac:f6:ea:09:40:14:3c:71:02:66:aa:c5:ea:e7:cd:
03:bf:d4:81:4b:37:19:df:9a:13:e6:71:5d:8a:00:
59:45:90:aa:71:c0:33:56:ba:a7:ea:32:41:b8:0c:
85:d1:c3:fb:cb:8f:38:f6:b5:5b:8b:bb:b4:23:c8:
d1:de:c4:b0:9c:74:51:36:5b:4d:ed:ed:2e:44:61:
2f:b4:fc:86:2e:e9:72:c4:18:38:f8:5b:73:81:0c:
5e:f1:5b:c3:e2:f8:a0:22:a9:25:3e:c4:f0:08:3b:
2e:eb:a5:ef:d0:49:f0:43:48:60:6e:ec:b8:cc:38:
37:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E0:64:84:8B:86:F2:41:14:9A:A4:AB:19:9C:8C:CA:34:2E:DB:18
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A9BF030A924011F1ADC768AFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.31.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:4d:9e:73:e4:6f:a9:6e:a4:57:15:bd:a9:38:93:13:ec:eb:
4f:63:05:fe:5e:bb:8d:43:bb:c6:54:03:5b:6a:f6:77:cf:e0:
53:c1:86:e7:f4:b8:8e:ac:f0:91:dc:77:08:60:39:8f:5a:5b:
94:5b:13:5d:f6:64:ee:b5:df:28:05:e5:86:1d:69:94:fc:6f:
2a:71:a3:fe:42:c9:a3:95:b9:29:22:3b:b0:33:b5:47:6d:4e:
60:b3:e9:b3:7f:95:57:12:45:64:78:44:e8:74:ea:cc:25:a2:
13:6b:ef:ea:0e:39:a1:da:06:1b:d7:aa:16:0a:06:72:ec:e9:
d4:93:5b:23:36:b2:2a:3d:42:22:92:ab:c8:23:69:99:d2:b5:
9a:e2:37:c3:40:d2:5f:2f:98:fb:27:58:59:f8:2f:0f:0e:d6:
57:ec:1e:1d:ae:ee:78:73:55:c9:31:10:9d:96:4b:c3:6c:82:
44:21:8c:e9:c6:ff:78:91:68:b8:fe:cf:78:0d:01:5c:4a:5d:
90:69:e2:3f:3c:f9:57:13:05:71:ec:e9:bd:3b:90:6d:99:93:
82:03:8a:d0:e5:81:65:3d:24:e2:16:1c:30:da:ba:21:82:b1:
30:f2:5d:10:d2:e3:ec:cf:8f:3a:68:e4:be:4f:61:6f:73:55:
b9:2d:96:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:08:10 2026 by rpki-client