Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B486B84E707811F19EF55812CF1D38B0.roa
File: B486B84E707811F19EF55812CF1D38B0.roa (raw, json)
Hash identifier: 5C9vKpBDgWXesrEXv41qvhLR6Y8ZkCr/Du6yjaovuTc=
Subject key identifier: 7D:7D:B6:0D:D3:5C:61:43:AE:81:DA:A7:86:D4:66:73:B2:46:59:53
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D52A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B486B84E707811F19EF55812CF1D38B0.roa
Signing time: Thu 25 Jun 2026 09:31:55 +0000
ROA not before: Thu 25 Jun 2026 09:31:51 +0000
ROA not after: Sat 01 Aug 2026 09:31:51 +0000
asID: 202656
IP address blocks: 154.81.193.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Jul 2026 17:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120106 (0x1d52a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 25 09:31:51 2026 GMT
Not After : Aug 1 09:31:51 2026 GMT
Subject: CN=6a3cf58b-f5e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ed:47:ae:60:9c:64:fc:cf:21:b8:95:d4:b9:
07:95:97:7c:9e:fd:eb:9c:33:42:92:0c:c5:1f:9a:
47:f9:57:30:2e:4a:f4:53:9f:0e:1a:92:03:d6:f6:
13:b1:3c:8f:ea:e6:3e:fa:ae:7b:3c:f1:9a:e6:7d:
86:e3:70:32:06:1c:5e:73:53:f8:0e:cb:f9:73:43:
2b:0d:23:35:6e:67:62:86:7c:57:1d:0a:6d:59:c6:
20:85:5b:dd:e2:fa:48:17:d4:0d:8a:ba:47:81:82:
c4:a2:85:73:64:27:f2:91:a6:d8:b4:b3:2e:54:9a:
ea:63:8e:d0:25:8e:1d:a3:5b:b9:b3:d4:72:a1:3d:
17:3c:66:69:38:2a:4f:fc:48:82:a5:3b:4d:a7:00:
a9:c3:63:fb:22:51:a8:9e:79:c6:bf:c4:e7:8d:00:
52:96:f3:a0:67:36:fa:ab:e6:14:00:36:3b:c6:f1:
40:4f:f6:d8:c9:c9:88:f4:b2:54:ee:43:ab:6e:99:
e5:43:32:5e:8c:cb:7b:34:4d:00:cd:e4:d7:32:60:
de:33:29:92:96:90:eb:d7:3a:0a:a3:e8:8d:62:2c:
49:4a:df:40:d0:78:43:93:16:3f:03:71:89:86:58:
d9:0a:b2:ab:e6:ac:56:60:f5:9f:0b:13:8d:3a:31:
fb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:7D:B6:0D:D3:5C:61:43:AE:81:DA:A7:86:D4:66:73:B2:46:59:53
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B486B84E707811F19EF55812CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.193.0/24
Signature Algorithm: sha256WithRSAEncryption
45:d0:89:ce:95:fa:10:5d:8e:5d:b2:59:16:14:2f:38:02:a8:
b6:d1:9c:09:7a:11:66:ff:6f:62:a5:d3:2a:11:60:5a:21:e9:
38:7b:0d:bc:38:85:ac:01:5b:9e:7c:e6:91:15:5b:45:9a:b2:
22:63:7b:4c:2d:f0:94:cd:28:13:b4:f4:ea:7d:e1:0a:73:c6:
f9:b1:c2:9e:25:76:07:b6:eb:fd:c6:9d:86:fe:f8:54:4f:9b:
f8:83:38:17:02:c7:be:b3:44:d3:1e:50:1b:4a:72:25:58:7b:
47:57:8f:59:fe:75:8d:f8:2e:23:e1:a7:16:dc:13:db:c8:22:
d4:22:42:1b:50:b9:55:56:1c:61:e8:96:1e:52:53:96:a6:98:
6e:2c:58:6f:39:05:8b:d4:20:09:e4:94:b3:08:c9:33:65:d4:
ba:01:0e:5c:99:e7:83:bb:60:ec:e5:1a:65:53:49:4d:eb:46:
95:8f:02:ca:22:02:ce:b6:09:e2:eb:81:41:5e:a5:66:e2:b7:
20:7b:2c:62:32:f6:ce:03:9e:44:5f:cc:11:b9:7e:df:0f:4f:
f3:3c:f4:1f:bf:b7:b8:4b:a2:fb:95:af:74:da:ae:e5:58:06:
73:93:98:d3:dc:6f:cb:da:51:2f:63:5d:94:87:4c:9a:3b:7e:
b6:63:17:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:42:02 2026 by rpki-client