Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D32B71F48F0911F189F67AB6CE1D38B0.roa
File: D32B71F48F0911F189F67AB6CE1D38B0.roa (raw, json)
Hash identifier: yS8NOjATeR9nzILU+dDcWd6r5/2212ioWhWhDhK+atk=
Subject key identifier: FB:6D:98:95:75:35:BB:4F:14:81:95:C2:89:23:73:91:49:3C:5D:24
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DC5A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D32B71F48F0911F189F67AB6CE1D38B0.roa
Signing time: Mon 03 Aug 2026 07:06:19 +0000
ROA not before: Mon 03 Aug 2026 07:06:15 +0000
ROA not after: Sun 06 Sep 2026 07:06:15 +0000
asID: 147176
IP address blocks: 154.197.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121946 (0x1dc5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 3 07:06:15 2026 GMT
Not After : Sep 6 07:06:15 2026 GMT
Subject: CN=6a703deb-b9ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c0:54:9c:04:e2:28:e2:24:7b:3d:4f:6c:e4:
da:73:46:16:73:5b:70:2f:33:ed:2c:ba:79:6a:1a:
ed:ba:2b:cc:3a:99:8b:66:ae:70:e5:76:23:46:c5:
cb:e3:e9:e9:e1:e5:c7:82:08:1f:c7:61:db:19:0d:
e2:7b:07:fd:c0:6d:89:4e:be:97:66:06:5b:d7:09:
64:d1:a2:38:d9:84:77:89:f5:9b:fc:8c:5c:1a:86:
ca:e1:99:84:21:e0:e7:7b:04:63:4a:56:c7:cd:d6:
55:87:55:cf:e7:43:23:af:ad:64:25:94:47:de:bb:
93:08:4d:f9:0d:c3:65:e8:3b:4a:5c:a0:66:7d:11:
4c:26:4d:3d:ce:fa:35:de:a6:3e:6d:11:f1:c2:19:
3d:da:e1:3d:ef:9c:5f:9c:c5:87:ef:55:9b:80:66:
c0:f7:46:1c:c5:30:1e:fd:78:05:d0:ad:dd:26:77:
af:48:18:bd:9a:e5:9e:75:a9:e9:5b:87:be:4e:b1:
2d:d8:a5:fb:97:cf:09:17:24:42:6f:c7:63:ca:f5:
56:78:b0:35:23:d3:95:76:a2:0c:c0:d1:e6:0b:64:
16:7d:10:ae:44:78:cd:ea:b7:8d:3c:20:a1:5b:fd:
0b:c0:3f:bd:a0:9a:9b:2b:56:26:6f:0e:5f:f9:21:
b0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:6D:98:95:75:35:BB:4F:14:81:95:C2:89:23:73:91:49:3C:5D:24
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D32B71F48F0911F189F67AB6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.116.0/24
Signature Algorithm: sha256WithRSAEncryption
54:06:83:05:a1:d7:45:34:cc:ab:de:18:d0:9f:2c:f5:44:93:
68:23:9b:05:0c:cc:5d:38:0c:e5:8f:ef:52:45:25:1e:ed:3b:
73:e5:d0:ed:b4:93:36:88:2e:53:f4:37:d1:49:8d:d5:b8:28:
45:2b:a7:e5:ab:a6:64:5c:99:cc:9b:31:7d:b7:95:f5:37:73:
d6:90:3a:74:21:e6:30:33:c3:ec:03:f1:38:ee:82:a1:56:ae:
b6:b2:8b:33:b4:ca:b5:5e:2a:74:19:46:d1:a2:21:69:01:35:
de:79:aa:5d:c4:1e:df:a0:3e:b8:0b:c0:06:c3:c7:d2:53:d7:
11:df:0b:d1:5e:6b:21:30:6c:90:fb:40:5b:8b:ae:6b:12:d9:
3f:77:36:8c:73:11:71:eb:41:63:79:b8:1a:4e:92:f4:20:53:
ae:02:53:18:a6:37:95:9e:f1:04:b2:28:e3:2a:0e:2b:db:f8:
e4:b5:71:33:e6:b2:ee:89:af:13:f2:ef:34:84:fc:fd:5c:49:
29:0d:cf:07:34:c9:6d:e5:d9:6f:93:cd:d2:82:52:95:83:52:
5e:ba:2a:3b:8e:be:48:cf:85:29:5c:c4:07:88:84:d7:d0:88:
ac:e9:42:c2:0c:d6:c6:e3:f8:b4:91:57:d2:28:fb:2a:05:41:
b1:49:3b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:05:43 2026 by rpki-client