Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1A8E0308B2011F19794D0DFCE1D38B0.roa
File: B1A8E0308B2011F19794D0DFCE1D38B0.roa (raw, json)
Hash identifier: fNVUT4RBVr1sHvWRYYwYrtV9bqg/Ak3dSnjPu/0SI/c=
Subject key identifier: A5:CE:A8:E2:52:15:B0:0A:8A:07:6E:AA:9B:89:A7:02:FC:28:81:92
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DBBF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1A8E0308B2011F19794D0DFCE1D38B0.roa
Signing time: Wed 29 Jul 2026 07:39:56 +0000
ROA not before: Wed 29 Jul 2026 07:39:52 +0000
ROA not after: Sun 30 Aug 2026 07:39:52 +0000
asID: 55286
IP address blocks: 154.83.192.0/24 maxlen: 24
154.83.193.0/24 maxlen: 24
154.83.194.0/24 maxlen: 24
154.83.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121791 (0x1dbbf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 29 07:39:52 2026 GMT
Not After : Aug 30 07:39:52 2026 GMT
Subject: CN=6a69ae4c-2d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:44:6e:3a:6e:21:0e:bb:be:1b:d4:b7:3c:4f:
77:4f:68:11:1b:15:3b:0b:00:28:a2:39:17:47:03:
20:cb:f2:d2:c9:2a:25:c4:81:8a:eb:50:f9:da:12:
04:f5:5c:49:e5:1a:1c:74:31:a8:f0:c1:af:5b:78:
9d:bf:67:50:7f:60:da:8b:bc:50:91:d0:2b:70:7c:
8c:99:c9:a7:50:7d:d8:e4:e6:b3:54:30:98:45:30:
62:09:b6:9d:50:71:e1:dd:eb:1e:2d:0c:8f:ec:18:
b9:8f:60:51:60:fd:9f:ab:05:06:92:e1:fe:84:48:
6f:2c:32:72:ca:4b:d1:16:3c:d4:c5:4a:44:7d:50:
89:ad:38:a7:12:e1:02:47:30:67:52:6f:1a:e2:46:
4d:99:93:d7:02:6f:9d:08:aa:6c:40:28:76:98:ac:
a5:6d:ec:e1:71:82:8a:af:52:76:81:cf:54:29:f3:
cb:f5:0d:8d:3d:65:10:1f:a9:e9:17:2a:0c:81:4a:
11:0a:7c:a8:8b:2c:74:b4:f0:5e:9c:11:dd:c1:a0:
f4:f7:e1:b5:a0:36:59:4f:f8:ec:f1:d6:58:a2:bb:
fa:45:db:7a:c7:98:18:a3:c3:8d:9a:3f:35:ca:31:
bb:74:0a:9a:9e:3c:00:7f:c7:64:d9:7f:e4:d5:da:
9e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CE:A8:E2:52:15:B0:0A:8A:07:6E:AA:9B:89:A7:02:FC:28:81:92
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1A8E0308B2011F19794D0DFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.192.0/22
Signature Algorithm: sha256WithRSAEncryption
80:53:5d:06:a6:a1:a1:9d:0f:9f:83:bd:ca:cc:d9:25:07:9f:
bf:2a:05:f0:19:71:ec:2c:b0:08:5d:97:6f:79:c0:c6:95:4d:
9c:35:28:cf:a6:ff:56:05:54:1f:8c:6b:9d:d9:f9:4e:5c:18:
c1:25:c5:41:1b:19:66:19:0c:08:39:b0:ea:05:27:cd:99:a1:
5f:2f:9d:15:e2:45:41:19:97:77:4b:ae:06:dc:ff:57:bc:3a:
81:dd:47:91:df:18:3c:7a:2f:e0:c7:9d:60:ea:1e:01:5d:83:
ed:85:11:ef:5e:27:8a:73:b3:ab:77:15:55:1c:64:42:41:b3:
12:18:d7:a4:45:ea:6d:e3:62:bb:0e:7d:f2:8e:3b:07:01:aa:
b5:5a:5d:f9:8f:b8:7f:68:21:6c:09:75:e8:43:69:25:59:9c:
48:f5:81:37:a9:e2:c5:60:e9:32:34:89:cf:28:a7:91:26:f9:
2e:f0:19:8c:99:81:bf:f8:20:ad:a4:31:5b:b5:69:4b:78:19:
e4:b4:33:bf:eb:a4:a4:68:3a:ef:10:7f:fd:37:13:83:5c:e5:
29:73:ed:34:cc:cb:14:24:dd:56:06:a1:51:bc:0c:e6:29:1a:
4f:75:b2:b7:ab:7c:c0:d9:fb:0a:0d:c1:90:50:49:26:3a:c7:
86:6b:b0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:07:56 2026 by rpki-client