Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8F905407F6C11F1922E22B5CE1D38B0.roa
File: C8F905407F6C11F1922E22B5CE1D38B0.roa (raw, json)
Hash identifier: AiphBK0uMO3bIDhVnun/IiE8K1knrMoZMnq7ceg9lOs=
Subject key identifier: 1E:84:FE:60:53:F4:E5:B4:64:A6:01:7B:C3:B2:BF:4F:59:AE:94:8E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D8DE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8F905407F6C11F1922E22B5CE1D38B0.roa
Signing time: Tue 14 Jul 2026 10:14:32 +0000
ROA not before: Tue 14 Jul 2026 10:13:19 +0000
ROA not after: Fri 21 Aug 2026 10:13:19 +0000
asID: 9304
IP address blocks: 154.92.176.0/24 maxlen: 24
154.92.184.0/24 maxlen: 24
154.92.186.0/24 maxlen: 24
154.92.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121054 (0x1d8de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 14 10:13:19 2026 GMT
Not After : Aug 21 10:13:19 2026 GMT
Subject: CN=6a560c08-5093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f1:7e:12:f1:3f:98:f6:71:91:5d:b9:eb:eb:
0e:27:0b:de:75:55:cb:d0:fe:c3:33:9c:73:9c:ce:
25:88:db:14:02:30:94:2e:94:a6:f2:af:4a:c1:bf:
8d:f5:a2:c2:d8:9f:7e:7e:98:e1:69:e9:b7:77:98:
e0:67:2e:20:79:c5:28:e6:f4:3e:bf:3c:66:79:63:
ed:7b:7a:f5:d7:ea:9b:f8:38:7f:97:a6:1b:38:4c:
0a:61:6c:87:3f:a8:85:bb:3a:15:05:c9:ac:16:f2:
cd:2d:de:c8:06:50:40:85:57:48:57:76:c2:be:c1:
02:f2:78:18:b6:03:e7:4a:72:c7:62:f5:96:c8:44:
3f:d8:e6:5e:5b:1b:94:f5:f2:ed:72:86:fe:67:e8:
b1:c3:87:e8:72:35:b3:12:66:b3:b1:28:df:7f:44:
53:ba:df:13:e8:8b:ba:a5:e4:b0:61:e2:33:7e:47:
17:00:20:6e:59:6e:eb:1b:3d:43:8d:a9:c5:01:58:
83:bc:19:8a:4d:54:61:74:df:42:d6:66:2e:5f:53:
97:00:93:bb:87:76:ad:6e:02:3b:bf:19:1d:66:fa:
29:cf:bd:b5:63:03:a5:b8:e3:d0:db:b2:98:53:dc:
2a:9b:89:9f:01:e4:63:ed:29:c0:b3:ca:05:ef:06:
89:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:84:FE:60:53:F4:E5:B4:64:A6:01:7B:C3:B2:BF:4F:59:AE:94:8E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C8F905407F6C11F1922E22B5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.176.0/24
154.92.184.0/24
154.92.186.0/24
154.92.190.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:4d:e0:5f:50:b2:16:cf:3a:0e:73:22:ea:b6:de:c5:12:4e:
dc:5d:de:33:6c:9d:d9:16:79:9e:79:12:7d:16:ec:b7:98:4a:
8f:62:c9:64:2e:da:5f:9c:06:8f:5e:23:1f:e2:3d:9a:94:5b:
15:9c:65:76:bb:47:95:60:85:3d:cf:28:52:f0:b7:dc:5f:be:
45:9e:f5:3d:3b:49:51:b3:17:e9:5a:70:0f:5a:01:1b:e8:64:
6c:dd:bd:6e:b3:74:ba:7d:5b:21:a7:b1:32:72:c6:ff:96:eb:
9d:c3:72:b2:de:ad:18:8e:ca:8b:1c:22:c8:5d:af:e9:0b:3e:
af:06:15:74:83:a4:ca:82:29:1f:c6:ff:08:89:32:f6:b4:f5:
e1:bf:87:27:7d:da:07:37:3d:68:63:26:73:20:4c:d6:94:d7:
0e:6f:cf:d0:10:0c:e1:cd:b9:a8:b8:8d:75:ff:ea:ee:f5:4f:
92:95:75:3b:74:75:37:20:c8:8d:b3:44:79:bc:39:c7:7b:06:
59:4d:e9:3a:62:dc:0b:a2:bd:0f:b2:61:4c:5f:8c:d9:19:fb:
a3:f0:87:40:a6:af:05:4e:59:92:2b:b0:af:53:65:e8:1e:b9:
33:83:26:51:45:cc:33:33:30:81:0b:4b:2f:8b:e0:63:86:80:
e9:d9:9b:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:19 2026 by rpki-client