Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF1667847E1411F19D0D2803CF1D38B0.roa
File: AF1667847E1411F19D0D2803CF1D38B0.roa (raw, json)
Hash identifier: DWaiBz53jqfxEPopwUksemWFOwPYsB3lnpmJYTJ+Mfk=
Subject key identifier: 4C:C6:00:22:07:CA:D7:66:22:E8:73:FC:11:E5:2E:7A:D1:B9:E0:B6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D8A7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF1667847E1411F19D0D2803CF1D38B0.roa
Signing time: Sun 12 Jul 2026 17:11:13 +0000
ROA not before: Sun 12 Jul 2026 17:11:08 +0000
ROA not after: Sun 04 Oct 2026 17:11:08 +0000
asID: 149440
IP address blocks: 154.81.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 12:38:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120999 (0x1d8a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 12 17:11:08 2026 GMT
Not After : Oct 4 17:11:08 2026 GMT
Subject: CN=6a53cab1-b111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ca:a2:f0:e8:a8:31:c8:61:05:e7:65:0a:d6:
a6:f3:c2:fc:91:fa:60:1b:5e:34:ba:5c:98:39:ed:
ef:47:8c:66:70:f0:56:a6:a9:8e:32:7a:b4:18:a4:
44:81:d6:a0:f0:37:c8:f7:68:63:21:db:e4:3f:bb:
82:8e:3c:b3:82:e7:a7:a9:a1:49:4b:15:4b:b7:db:
dc:62:0b:37:d7:b7:48:49:2b:0d:59:50:f8:af:4f:
a1:e3:c2:9e:09:14:76:cf:5d:b0:7b:00:27:7c:39:
9c:06:b9:b6:73:db:52:05:f2:dc:7a:8e:c5:ae:32:
42:d0:af:50:d8:83:31:40:84:7b:78:85:a5:d3:8e:
5b:da:1b:50:54:54:6a:53:68:6e:03:33:8c:ab:ac:
2a:fd:f0:0d:a5:08:e8:cc:4e:6d:fc:cc:57:49:65:
3c:ff:77:5b:06:e3:e6:a2:32:ec:5f:8c:23:33:c6:
0b:64:aa:33:2c:ea:4d:7a:d3:f1:2e:6d:cf:9b:b4:
09:ac:ea:88:5c:f9:e1:94:ab:c1:68:84:58:76:2f:
86:b0:b4:91:19:a2:f5:d3:17:c6:ac:16:96:97:db:
53:fd:a9:bc:b6:ac:33:f8:fb:2b:6c:68:42:c3:04:
07:47:41:56:fa:8e:9e:17:ca:03:d8:e6:1f:21:da:
9c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C6:00:22:07:CA:D7:66:22:E8:73:FC:11:E5:2E:7A:D1:B9:E0:B6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AF1667847E1411F19D0D2803CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.220.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:40:6a:ad:15:52:e5:28:4a:af:c9:85:00:44:d8:46:79:71:
92:13:9b:5d:82:52:7a:6e:4d:7e:d0:31:8e:46:6e:74:c8:3c:
c2:d9:f7:23:44:b5:61:1b:e8:94:99:1f:e0:4b:a8:29:e9:86:
c2:fc:52:c9:62:16:aa:40:31:ea:6c:55:35:a2:c5:23:b4:50:
1e:34:0a:9d:ec:81:22:8c:99:13:a8:0d:88:31:82:16:05:f9:
32:e3:f2:f8:00:87:54:d6:e4:b2:0e:6e:85:9d:94:96:12:06:
39:fc:4d:03:e4:59:3d:a1:12:50:a2:e6:63:4e:86:e1:4b:71:
79:20:43:34:ae:3d:99:f0:c1:42:e2:32:43:bd:f6:b6:4b:ce:
3f:11:4d:ce:96:e6:ce:a5:8b:f5:13:07:64:67:75:c8:45:15:
4d:70:7b:42:aa:87:9e:f4:b3:16:9f:7a:fb:aa:44:f7:76:49:
ec:2a:43:15:dc:9f:7e:e7:9c:bb:bf:cc:86:6e:87:fc:ad:d4:
29:43:1a:75:01:db:0a:8c:83:b2:c0:fd:24:66:b5:fa:5d:bd:
05:c4:4c:1c:7b:71:cd:9c:17:eb:0c:92:c1:de:ba:3c:6c:b7:
9a:77:fb:cb:78:aa:c6:a4:b3:1c:9c:30:53:d8:60:db:3c:f4:
b0:77:64:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:57:04 2026 by rpki-client