Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5D172A0949611F1B1247AD4CE1D38B0.roa
File: C5D172A0949611F1B1247AD4CE1D38B0.roa (raw, json)
Hash identifier: 9RVyIQQ5EPew4hoAzKSsK11IEhL5nT0EvhN+Rv/x09Q=
Subject key identifier: DF:C7:73:68:25:6A:D8:7B:67:2A:0A:A7:F0:FB:79:15:60:C8:BB:FF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DDE0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5D172A0949611F1B1247AD4CE1D38B0.roa
Signing time: Mon 10 Aug 2026 08:37:51 +0000
ROA not before: Mon 10 Aug 2026 08:37:47 +0000
ROA not after: Thu 17 Sep 2026 08:37:47 +0000
asID: 22773
IP address blocks: 154.213.207.0/24 maxlen: 24
154.213.208.0/24 maxlen: 24
154.213.209.0/24 maxlen: 24
154.213.210.0/24 maxlen: 24
154.213.213.0/24 maxlen: 24
154.213.214.0/24 maxlen: 24
154.213.215.0/24 maxlen: 24
154.213.216.0/24 maxlen: 24
154.213.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Aug 2026 00:07:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122336 (0x1dde0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 10 08:37:47 2026 GMT
Not After : Sep 17 08:37:47 2026 GMT
Subject: CN=6a798ddf-37d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c9:aa:19:82:73:12:1d:bf:66:37:af:cd:7b:
88:a1:58:d2:21:13:27:11:9b:16:d7:7f:49:33:71:
a8:f8:80:8d:3d:bf:d4:f6:d7:f6:29:ee:25:5f:42:
28:29:12:7e:59:da:3c:3a:78:8d:9f:3c:90:7a:34:
dd:0a:b0:a0:49:86:95:a4:0c:f7:7c:95:ef:9a:8e:
e6:14:c8:29:49:fb:bf:e9:ee:de:83:d4:de:a5:23:
3f:c6:61:63:c3:4e:f7:42:1d:b0:72:44:0c:6e:2e:
35:d5:3f:b7:8d:94:9f:19:14:34:fb:ac:fc:31:f0:
89:18:50:6b:e9:b0:1a:8c:b2:49:89:97:b8:53:cb:
f3:6a:48:f9:92:92:d9:83:0a:bd:db:68:e1:2c:88:
6b:34:95:4f:c8:60:bc:cd:29:2b:fd:2a:9e:3b:4e:
c3:9e:e7:02:65:d8:b4:5c:03:54:eb:a8:93:90:4a:
05:9d:a5:bb:3e:85:2d:cf:5a:61:7e:40:c4:31:2d:
46:62:d1:b3:58:51:3d:45:e0:23:c1:43:64:0b:30:
9b:ce:4e:9a:35:58:c7:84:af:ec:ff:c0:b3:b3:4b:
ec:67:1d:10:22:b2:39:51:03:b8:6e:66:92:fe:3e:
05:12:c2:7c:c1:87:98:c3:b4:89:8a:9f:ae:04:a1:
58:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C7:73:68:25:6A:D8:7B:67:2A:0A:A7:F0:FB:79:15:60:C8:BB:FF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5D172A0949611F1B1247AD4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.213.207.0-154.213.210.255
154.213.213.0-154.213.217.255
Signature Algorithm: sha256WithRSAEncryption
80:ed:24:24:c0:ea:2a:24:22:f1:8a:b1:7b:dc:19:3d:2c:d5:
2b:ba:8f:85:b3:a3:8d:7e:c8:ba:fd:34:0c:7f:44:d8:c6:5f:
65:7e:eb:ee:f4:61:fd:a5:5a:e7:54:52:da:45:68:24:9f:95:
7c:f0:a5:e9:c9:14:55:0b:8e:79:31:bd:26:c1:46:eb:76:9e:
17:1b:0f:16:a2:62:af:12:a5:38:0a:f9:69:c4:14:2c:17:3b:
7a:b4:f9:61:03:26:2a:8f:d4:ec:9d:cd:43:c8:3a:12:7b:9d:
4e:5d:98:ac:92:0a:4d:c6:86:4a:bc:cd:f9:ec:32:30:e6:f3:
45:c3:41:91:2a:0c:e5:a2:94:b0:10:b5:67:b7:3b:7b:60:27:
be:d4:08:e0:cc:75:4d:9a:92:13:48:eb:c3:6c:c6:1d:3d:64:
f5:50:52:4a:26:91:b8:9e:7c:7a:c3:d8:12:87:16:f7:6d:58:
e9:05:e8:a8:39:d0:d4:32:d6:e3:d2:b3:40:f9:c5:13:da:ae:
e5:00:4f:85:25:8f:2d:9a:57:62:d9:89:d6:aa:63:7e:f0:57:
a0:cd:c9:79:1b:be:66:e8:8a:84:8d:52:fc:56:04:6f:c4:76:
e1:bd:39:38:d1:30:03:f1:53:3c:e7:ed:1e:02:ae:75:d1:c9:
53:17:bf:4f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Aug 19 05:13:57 2026 by rpki-client