Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA48A43C8B2B11F1A3273BA0CE1D38B0.roa
File: AA48A43C8B2B11F1A3273BA0CE1D38B0.roa (raw, json)
Hash identifier: MmEvTZQNCQoxCQEIkNJLpeGLo3ejQHS9FqOnFXLTxwg=
Subject key identifier: 8A:6C:3F:D6:60:FF:B2:C4:32:1C:84:99:29:C2:C3:70:F3:E9:76:31
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DBCF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA48A43C8B2B11F1A3273BA0CE1D38B0.roa
Signing time: Wed 29 Jul 2026 08:58:28 +0000
ROA not before: Wed 29 Jul 2026 08:58:24 +0000
ROA not after: Thu 03 Aug 2028 08:58:24 +0000
asID: 38638
IP address blocks: 154.197.82.0/24 maxlen: 24
154.215.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121807 (0x1dbcf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 29 08:58:24 2026 GMT
Not After : Aug 3 08:58:24 2028 GMT
Subject: CN=6a69c0b4-4cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:14:99:dc:f5:21:ca:75:66:1f:7b:7b:fc:d4:
88:81:a3:aa:78:01:eb:a3:2c:63:79:e3:66:4c:dd:
72:63:7e:9f:36:7d:57:c0:cb:d6:64:1e:18:04:7d:
a3:d4:49:e8:3f:5c:0d:9d:97:a3:d7:48:24:a1:21:
fe:12:a6:7d:98:4a:93:6a:06:ce:28:5c:98:4c:51:
e4:bd:56:5f:14:7e:c9:11:11:98:3d:e1:d5:26:e1:
5e:7b:59:76:fa:5d:96:90:8f:cd:13:22:3e:83:0e:
8f:cc:eb:b7:2e:22:38:d9:8c:c1:a1:0f:ff:a2:cf:
50:22:01:c2:21:9b:8c:fe:3b:43:56:97:b1:99:82:
47:8b:16:36:c8:c4:1e:57:80:4b:6f:0b:2d:ba:2a:
a6:0b:8f:96:7e:76:ca:7b:6f:13:2f:25:19:fd:bb:
83:62:50:cc:c6:32:d4:c0:ee:8f:af:6a:a9:89:72:
46:ea:ad:11:c8:bf:0e:d4:e8:36:37:f3:61:83:dd:
58:01:37:d2:eb:08:fe:81:52:d5:be:cf:4a:27:eb:
12:63:f9:7e:ca:30:f8:bb:fa:68:8e:05:1d:e1:0b:
d0:e0:a1:8c:c5:82:7c:c5:b4:c6:c5:46:31:9a:e8:
49:fb:aa:af:f7:42:f7:d1:11:14:c7:c9:22:5a:a5:
a0:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:6C:3F:D6:60:FF:B2:C4:32:1C:84:99:29:C2:C3:70:F3:E9:76:31
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA48A43C8B2B11F1A3273BA0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.82.0/24
154.215.1.0/24
Signature Algorithm: sha256WithRSAEncryption
62:d5:10:c4:e7:22:b6:54:ae:43:0a:a8:a0:bd:57:45:ac:be:
09:19:5a:ed:1b:95:65:7c:67:d4:1c:86:06:80:8f:1c:8b:b5:
7b:51:16:7e:16:43:65:44:00:17:97:5a:57:4e:fe:f9:10:78:
6b:21:a9:51:60:e2:b3:14:5e:da:54:41:81:58:29:40:1a:b4:
74:68:1e:f1:4a:5b:c1:92:55:5c:47:7f:e9:aa:fe:a6:a9:d0:
7e:27:5e:bc:de:64:db:1d:d4:15:50:df:7d:93:b2:d7:5b:a1:
1b:2c:11:59:e8:b5:ec:2f:f6:09:4c:86:61:18:b3:e8:eb:65:
bc:2b:96:18:ee:04:21:8e:55:76:9a:d7:d3:ba:86:59:ae:07:
c2:55:3e:ed:db:07:6f:72:87:1c:82:c4:ad:a9:a3:4c:f8:4f:
e3:19:b6:32:a9:bd:8e:ff:59:42:0c:e9:f2:db:1a:02:bc:c0:
cb:df:20:1e:7e:d4:40:82:11:f3:ee:e4:d7:09:0e:36:56:00:
fc:ea:e0:f7:51:0c:2c:9f:96:3b:bb:af:3f:a2:22:67:6d:cb:
57:2d:c5:3a:53:3c:4b:3b:a9:22:44:b1:1f:a7:a8:fd:e3:0c:
c9:4a:d8:c5:96:7e:d2:9e:5a:cd:61:fe:73:6a:db:5d:de:eb:
df:a9:73:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:07:59 2026 by rpki-client