Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3ADB87C907C11F18BDA7BF4CE1D38B0.roa
File: B3ADB87C907C11F18BDA7BF4CE1D38B0.roa (raw, json)
Hash identifier: KoIFUlIUSXzuC5FsUU1lJ8kGeOPUQnrBv/1zbK5gkPA=
Subject key identifier: E1:06:42:76:33:D8:42:68:E2:6E:F2:79:16:54:AB:9A:F0:8C:67:70
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DCA1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3ADB87C907C11F18BDA7BF4CE1D38B0.roa
Signing time: Wed 05 Aug 2026 03:21:09 +0000
ROA not before: Wed 05 Aug 2026 03:21:04 +0000
ROA not after: Wed 12 Aug 2026 03:21:04 +0000
asID: 9294
IP address blocks: 154.195.64.0/19 maxlen: 24
154.203.96.0/19 maxlen: 24
154.205.64.0/18 maxlen: 24
154.206.192.0/19 maxlen: 24
154.218.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122017 (0x1dca1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 5 03:21:04 2026 GMT
Not After : Aug 12 03:21:04 2026 GMT
Subject: CN=6a72ac25-aeb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ba:57:6d:c8:a4:43:33:9f:b6:32:5e:d9:8e:
f8:dc:6a:72:f0:db:2a:7b:98:b8:a5:67:bd:3b:1e:
df:9c:a6:5e:30:28:cb:7b:46:4f:1a:77:1e:1c:d4:
0b:ac:68:4c:04:3b:1d:7e:4d:7a:2f:7f:b4:e4:d3:
2b:2f:1d:37:bd:bf:56:62:bc:9c:da:3a:b7:58:4e:
d3:b7:44:e6:2c:0f:1f:be:04:fd:fc:d6:eb:b3:7b:
59:e2:31:e5:bc:3d:db:c2:d6:d5:d1:3b:d8:4f:c7:
10:f4:78:bc:92:4d:f1:de:74:b0:8a:ff:7f:a8:8a:
07:24:3f:3c:9f:46:fe:ec:27:58:a5:f2:d0:5c:f1:
5c:fe:00:ca:b1:34:75:cb:86:d4:55:6c:b0:6e:8a:
f9:02:6e:71:47:52:33:62:97:49:a8:19:d8:b4:ce:
05:e2:b1:dc:f7:85:69:7e:5d:42:73:a4:0e:5b:fd:
80:fa:de:0b:c5:9c:8a:25:3e:7e:ef:cc:91:a7:b2:
4e:b2:2b:9e:c6:43:3f:de:f8:87:9f:6f:46:f5:4f:
4c:a2:2b:d0:bd:12:1d:ef:8d:38:4b:76:8e:d1:73:
c5:87:99:07:5f:24:4b:87:89:c1:db:4f:4c:29:99:
07:b4:11:79:47:8e:6d:93:67:95:0d:d9:1a:9f:79:
b3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:06:42:76:33:D8:42:68:E2:6E:F2:79:16:54:AB:9A:F0:8C:67:70
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3ADB87C907C11F18BDA7BF4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.64.0/19
154.203.96.0/19
154.205.64.0/18
154.206.192.0/19
154.218.32.0/19
Signature Algorithm: sha256WithRSAEncryption
68:c9:68:d4:85:f8:2e:89:69:c0:57:5a:0e:45:7f:64:21:f6:
fc:58:61:01:2c:ea:6a:42:c7:4f:77:50:66:0f:fe:f6:08:bf:
22:a6:3f:96:99:4c:f0:6e:82:07:6b:b9:84:ec:2a:09:d3:13:
9f:ac:3c:32:51:3e:33:56:b5:12:bd:60:a8:a6:df:71:04:37:
4f:d4:c8:c2:25:c5:c6:18:c2:4e:d7:98:c9:0d:df:4c:f4:23:
c3:47:5b:a7:df:7b:24:8f:b0:55:f5:2e:a1:0e:1f:0d:bf:c3:
de:c1:ef:32:16:ea:fe:58:8d:4e:95:3d:af:5d:6d:9e:6a:e9:
3a:f6:05:90:0a:5c:34:48:84:8d:e5:51:01:55:da:3e:b4:bc:
cf:3a:d9:ca:d2:3e:67:92:a2:3a:8c:88:62:74:9f:d0:6a:75:
c9:39:57:91:9b:c7:94:c6:57:f7:01:aa:76:87:3d:0f:8c:02:
e4:bc:38:57:a0:19:bc:88:af:e4:24:f7:24:9b:e8:d0:b4:65:
30:dc:f3:34:83:0f:6d:94:06:0e:ff:a7:0a:99:69:5f:94:de:
85:a5:f4:64:a1:60:ff:f2:eb:74:0d:01:af:21:16:95:c2:12:
77:c2:63:4b:c7:c2:5e:60:95:c6:52:62:52:a3:b3:0f:a6:a8:
a4:dd:34:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:06:00 2026 by rpki-client