Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B848410A802211F1BC5C000BCF1D38B0.roa
File: B848410A802211F1BC5C000BCF1D38B0.roa (raw, json)
Hash identifier: quTv1FMdG/7E2VqNKeAViLFjzHu3w3S+IRnUXKnkOV4=
Subject key identifier: 12:BB:4E:12:AB:E6:73:E9:70:B3:B3:08:C4:CA:42:7F:43:53:05:8D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D909
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B848410A802211F1BC5C000BCF1D38B0.roa
Signing time: Wed 15 Jul 2026 07:56:44 +0000
ROA not before: Wed 15 Jul 2026 07:56:40 +0000
ROA not after: Mon 24 Aug 2026 07:56:40 +0000
asID: 214413
IP address blocks: 154.82.0.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 12:38:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121097 (0x1d909)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 15 07:56:40 2026 GMT
Not After : Aug 24 07:56:40 2026 GMT
Subject: CN=6a573d3c-f1ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:87:9c:ed:da:42:4c:fb:43:c5:d3:ec:d0:fb:
3d:ab:93:29:76:2d:e8:96:b1:96:89:1a:49:b3:22:
22:e3:a6:a3:a3:59:f5:b3:c2:ef:16:45:57:fe:dc:
30:e1:16:ac:35:6d:2a:69:24:7a:71:af:2f:13:ff:
08:b5:7e:2b:9d:36:94:67:59:cd:9a:e4:10:49:d2:
07:99:77:13:de:03:f8:e5:61:7c:f1:a1:02:cb:9e:
ec:bb:20:5c:39:95:e0:59:de:8b:5c:0b:7f:c9:ad:
4e:50:1b:6f:21:1c:23:05:5e:96:a8:c8:f0:31:5c:
9e:ff:18:bd:24:3a:12:98:d7:fa:b1:7f:9c:be:60:
e0:67:ff:35:88:f4:c3:45:c0:95:90:60:2e:9c:0c:
dc:80:72:30:0a:15:4f:75:15:2d:08:5d:e3:98:49:
f1:7e:15:76:4e:96:2c:62:ed:9a:6c:1f:3f:3f:de:
70:b9:da:a8:eb:4c:48:24:c3:ce:d4:70:19:1e:93:
3a:58:a3:7e:b2:7d:f5:7e:ed:56:27:55:72:8b:86:
39:5d:4a:6b:0b:30:28:c2:6e:66:76:9b:ac:4e:08:
de:ab:b9:5c:80:a8:a9:c6:88:a1:07:e9:dd:e9:9a:
f1:73:98:fa:17:18:bc:54:9d:d6:b6:8d:bf:c6:98:
90:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:BB:4E:12:AB:E6:73:E9:70:B3:B3:08:C4:CA:42:7F:43:53:05:8D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B848410A802211F1BC5C000BCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.0.0/23
Signature Algorithm: sha256WithRSAEncryption
5e:fe:9a:fc:e5:57:7f:b0:64:51:bb:ac:10:67:d7:ed:e5:07:
ac:e0:f7:65:1d:5e:70:1c:75:ae:3e:85:b2:b7:00:74:8f:ea:
44:bf:d6:39:bc:6f:a8:c5:78:cd:43:3b:6f:a3:d9:1b:02:7e:
61:ac:bd:99:ce:ce:65:45:e3:54:74:ca:dc:c1:3c:b8:a5:0f:
6f:df:68:76:33:ae:3a:ae:b5:0e:e4:77:e8:47:73:6d:50:b1:
07:e1:14:39:be:c0:2b:b8:7c:ef:55:ec:0d:bd:e6:ce:18:ab:
da:a0:70:82:fa:61:01:ce:d0:ea:41:3a:97:cc:97:f3:fa:c1:
4d:cd:d7:cb:27:0a:2f:74:a0:a7:98:b4:3e:ec:23:96:dd:e9:
d8:80:59:df:9d:aa:d9:72:b6:39:7b:ae:54:3f:53:a5:fa:8e:
db:12:8d:07:d3:75:27:70:b2:b9:d4:68:c8:9e:75:51:22:42:
0b:9c:f0:fe:11:1b:db:83:38:c0:e2:08:40:28:fc:d1:65:91:
40:bf:93:bf:15:1e:9d:eb:84:e2:55:5c:a7:2a:3f:db:8c:93:
7b:bd:a4:41:ba:1a:53:77:5c:fe:e1:7a:51:18:1e:bc:a3:d1:
fc:67:41:58:72:62:8f:34:55:ff:3a:d9:32:8c:cb:77:de:48:
20:6e:d4:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:28:59 2026 by rpki-client