Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9FAC79E922C11F1A57431B8CE1D38B0.roa
File: C9FAC79E922C11F1A57431B8CE1D38B0.roa (raw, json)
Hash identifier: FfQjvXroxg8FHTh4uSTyN8XK93dPCeE+lJMuCEQZtMM=
Subject key identifier: 80:09:15:B5:29:84:40:20:6D:8A:9C:99:A4:0C:7E:24:E1:50:52:08
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DD29
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9FAC79E922C11F1A57431B8CE1D38B0.roa
Signing time: Fri 07 Aug 2026 06:54:09 +0000
ROA not before: Fri 07 Aug 2026 06:54:05 +0000
ROA not after: Sat 05 Sep 2026 06:54:05 +0000
asID: 271956
IP address blocks: 154.88.190.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122153 (0x1dd29)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 7 06:54:05 2026 GMT
Not After : Sep 5 06:54:05 2026 GMT
Subject: CN=6a758111-5e46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:f9:71:9a:9a:57:06:2a:be:bd:5b:c3:e0:79:
8c:94:6c:81:80:75:f0:04:a7:16:10:03:a6:3d:8a:
15:24:b2:03:71:9c:41:99:27:de:90:c4:4c:51:97:
38:1b:a8:50:a2:a3:00:c4:3b:6f:3c:3d:16:4d:df:
ee:6c:76:9a:5f:8a:f3:60:a8:4e:fe:98:4e:0d:67:
62:d9:aa:e3:82:76:af:0b:81:67:9b:58:14:2b:de:
bb:6d:ce:c7:8f:50:d4:9c:b9:79:13:93:d0:9a:72:
bf:74:b3:1f:cd:d8:16:e5:62:75:21:29:a7:73:16:
54:06:1b:9f:3c:49:6a:7b:1e:a6:f5:76:a2:a8:ad:
1d:cc:0d:74:fa:e7:c2:ef:73:04:a7:bd:74:28:e3:
a3:d0:1d:cd:d3:59:aa:75:cb:b2:4e:69:4b:de:2a:
97:63:c3:5e:41:ba:28:7d:e7:08:0d:1e:ba:f6:fd:
af:b4:c3:70:dd:1e:5a:c5:5c:29:5e:6d:cb:bb:22:
58:f3:83:e3:4c:27:ed:1a:2d:cc:cb:8d:5f:ea:27:
da:b7:2e:03:a5:17:fc:ba:15:18:df:a0:4e:fc:9a:
80:28:52:95:00:2a:54:9a:26:75:15:d7:30:52:6a:
26:ff:c6:5b:7e:61:df:3a:93:00:65:32:61:13:6f:
df:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:09:15:B5:29:84:40:20:6D:8A:9C:99:A4:0C:7E:24:E1:50:52:08
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C9FAC79E922C11F1A57431B8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.190.0/23
Signature Algorithm: sha256WithRSAEncryption
28:1b:0d:72:d8:9b:e0:cc:cc:0b:71:a7:34:e5:b3:50:a6:b6:
dc:1d:0c:4f:28:6d:57:13:a6:0a:1f:11:1e:52:91:65:0b:d7:
09:63:79:82:fc:10:2d:1d:d1:cd:24:a3:da:cb:13:63:44:a5:
06:65:ea:51:b1:b2:c7:6f:88:0b:3b:f1:65:ce:a5:43:9a:8f:
9a:59:0e:f2:ef:5f:4e:7f:27:17:ed:fc:32:f2:04:fb:18:0f:
e8:1e:0d:e9:a5:dc:58:54:56:20:08:e7:76:a6:10:c4:73:d7:
04:47:8a:25:d2:49:44:32:a6:28:dc:5b:0a:61:2d:c4:58:ea:
9b:2f:26:1b:c2:a9:25:d9:b9:1b:80:85:66:de:2a:0a:ff:10:
e6:65:43:a6:77:3f:34:9d:1c:29:dd:14:a8:ee:88:b4:6e:ff:
3f:0b:3b:b8:a0:80:f3:b7:e8:3c:f1:81:27:c1:ad:8f:60:a7:
17:1a:fd:42:81:a6:10:79:ed:6c:1d:32:b3:54:4e:4b:e5:29:
25:5e:b7:aa:0d:6c:6a:7e:f1:6f:7b:a3:d6:39:5f:e5:58:b0:
62:b8:67:bb:0c:d5:d7:22:70:92:8a:53:5f:ba:f8:a9:e7:19:
4f:ae:76:12:26:68:a1:30:28:5d:ea:0f:64:c6:0c:6d:a4:b3:
35:b2:b3:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:07:39 2026 by rpki-client