Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D435E2C0924511F1BDB1FACCCE1D38B0.roa
File: D435E2C0924511F1BDB1FACCCE1D38B0.roa (raw, json)
Hash identifier: E8oY51v0VPdaUyVyQzEbS6b0YqEAXRcg2OF7a3hIrKw=
Subject key identifier: E5:3B:72:B8:4A:19:F2:A4:6A:B7:7D:49:1C:81:74:39:7A:D9:E3:73
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DD7B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D435E2C0924511F1BDB1FACCCE1D38B0.roa
Signing time: Fri 07 Aug 2026 09:53:24 +0000
ROA not before: Fri 07 Aug 2026 09:53:20 +0000
ROA not after: Wed 23 Sep 2026 09:53:20 +0000
asID: 49453
IP address blocks: 154.193.188.0/24 maxlen: 24
154.193.189.0/24 maxlen: 24
154.193.190.0/24 maxlen: 24
154.193.191.0/24 maxlen: 24
154.208.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122235 (0x1dd7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 7 09:53:20 2026 GMT
Not After : Sep 23 09:53:20 2026 GMT
Subject: CN=6a75ab14-527e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:89:5f:23:79:55:27:fc:cc:b0:e5:16:72:5a:
07:c2:28:7f:0b:ff:d5:7e:18:cb:d3:e4:b9:50:48:
c1:d2:19:e1:90:d6:44:c9:5e:82:d2:cd:7b:94:94:
fa:46:55:88:47:b6:23:30:fe:f7:d8:f3:37:2e:15:
95:72:4b:5d:c7:90:ec:3d:7e:79:72:72:cc:f4:59:
c6:97:31:df:27:7f:31:fd:f7:99:43:f1:67:8e:5b:
58:f0:a0:28:a1:fc:ee:97:bb:72:2a:41:4e:ce:54:
a7:ff:67:29:f4:e5:74:00:dd:53:89:4b:0b:24:4e:
98:e9:ee:a4:70:92:bc:6b:ce:03:cc:52:34:f4:b2:
d4:65:67:20:b9:0b:b1:c7:5a:37:4e:6e:1c:65:40:
d9:ac:bb:63:9f:f8:37:84:08:1a:98:e6:32:c0:2d:
ef:7c:d0:ae:cb:a3:bf:bc:43:c0:8d:15:45:91:76:
77:4e:d5:19:f8:ee:df:b1:ef:36:65:4e:98:e2:10:
f0:23:90:0f:fc:22:e2:29:77:4e:80:ff:ec:53:0d:
5f:24:be:03:09:97:5b:f1:0e:15:46:e4:3c:2e:30:
57:52:9f:4f:0b:32:1f:fd:da:67:ec:55:6e:df:fe:
0b:b3:67:65:72:71:00:16:72:4e:6f:5a:d0:51:4f:
9c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:3B:72:B8:4A:19:F2:A4:6A:B7:7D:49:1C:81:74:39:7A:D9:E3:73
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D435E2C0924511F1BDB1FACCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.188.0/22
154.208.112.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:a9:08:8d:e3:1e:b0:d2:66:4f:14:c3:6f:15:de:76:32:34:
c0:12:7f:d8:2a:db:6a:15:fb:cc:ad:25:f6:35:61:54:0c:71:
9a:8d:8e:c1:b0:f3:17:3b:57:38:9d:b9:b8:0b:a6:db:de:40:
3d:cc:b4:a0:30:12:49:a3:08:72:25:04:fb:72:d1:7b:1b:2c:
ce:47:c9:45:3c:d3:84:40:c0:b0:cb:05:ca:e8:62:97:23:52:
65:2e:39:1b:cb:6c:1b:b4:91:fc:93:fa:f5:16:63:84:e0:c5:
f2:c2:67:cb:04:25:84:d7:75:c8:fd:6c:71:71:8e:e7:db:27:
86:ab:42:4c:2d:fe:ed:b1:a3:c1:23:1c:4f:87:d8:8d:42:47:
2a:5b:c3:cc:80:5f:a0:1a:17:7f:b0:f5:bf:31:e7:6d:66:87:
53:1a:53:15:4c:90:f7:18:fd:9a:48:46:bf:c4:e4:87:14:e8:
b9:9f:1b:ad:43:48:85:98:e4:5b:95:35:83:30:ea:55:b3:d3:
60:3c:43:b4:7e:df:c9:5f:7c:08:a0:70:85:7d:10:37:f3:01:
06:f5:64:f2:b1:7f:79:20:86:53:bb:6a:2f:d7:c9:9b:01:21:
e1:3c:10:4f:e4:6a:cb:dc:c0:8b:4c:16:68:89:e2:0e:96:03:
b9:3c:fe:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:06:24 2026 by rpki-client