Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5379BBE8F0C11F181E7D0C6CE1D38B0.roa
File: D5379BBE8F0C11F181E7D0C6CE1D38B0.roa (raw, json)
Hash identifier: mz4L5pg+bvyqxJyZqy1OG6gg65DdtcBFnwClB6XbSVQ=
Subject key identifier: 71:D1:77:4B:8F:71:83:4F:DC:49:7A:BD:0F:1A:D8:41:C2:73:DD:AB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DC66
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5379BBE8F0C11F181E7D0C6CE1D38B0.roa
Signing time: Mon 03 Aug 2026 07:27:51 +0000
ROA not before: Mon 03 Aug 2026 07:27:47 +0000
ROA not after: Wed 09 Sep 2026 07:27:47 +0000
asID: 48031
IP address blocks: 154.210.239.0/24 maxlen: 24
154.219.94.0/24 maxlen: 24
154.219.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121958 (0x1dc66)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 3 07:27:47 2026 GMT
Not After : Sep 9 07:27:47 2026 GMT
Subject: CN=6a7042f7-bdc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b3:1d:fb:72:f3:dd:9d:89:c7:1d:57:19:71:
bc:63:91:77:ff:4d:c1:2e:6b:c1:56:67:1b:21:66:
91:83:c2:b9:ae:32:8b:b6:65:90:c7:e1:1f:3b:14:
7a:27:d1:03:00:d5:29:24:8e:50:5a:43:71:b9:7c:
e7:dc:11:4f:5d:62:06:7c:ac:15:c7:b1:7b:cc:e8:
39:4c:be:02:67:50:08:a7:3a:35:da:d5:33:70:62:
ce:e4:4c:ef:2f:c0:b7:ca:e4:3d:61:37:f6:c4:8d:
62:ea:f4:ac:36:e2:13:a4:1b:0f:ae:3b:6a:09:27:
4c:9e:0b:7b:ab:0e:50:fb:b9:f2:29:0e:03:1b:8f:
9b:73:c3:f2:91:43:ea:d0:d5:d5:35:ac:fa:07:e7:
fc:b3:c0:bf:3a:54:92:14:75:0d:75:75:c5:32:87:
bc:54:1f:65:dd:e3:71:95:75:38:84:79:09:3f:c2:
d1:41:aa:fb:36:80:68:83:92:ca:73:4f:e9:13:29:
fe:91:fc:0f:a3:61:c5:1a:47:2d:4b:4d:99:a8:60:
2a:ee:3a:61:f1:70:6c:3a:04:77:0d:44:16:ae:76:
21:aa:16:05:12:b2:79:e4:d4:45:4a:3f:35:6b:1f:
47:1e:1a:be:31:9b:f6:52:09:c9:88:2a:57:90:4f:
cd:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D1:77:4B:8F:71:83:4F:DC:49:7A:BD:0F:1A:D8:41:C2:73:DD:AB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D5379BBE8F0C11F181E7D0C6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.239.0/24
154.219.94.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:9d:aa:5d:00:7f:7b:0c:9b:dc:c3:98:b1:ec:9b:b6:58:51:
f3:6e:d6:1e:c8:99:af:bc:39:4e:2a:a0:e1:d0:30:a8:31:7d:
8f:5a:40:fc:68:7f:50:bc:73:d7:1c:6d:43:36:b4:e0:51:aa:
40:60:22:0a:d8:3c:7b:0f:a4:8e:d3:e2:12:93:eb:20:02:32:
06:fa:e8:66:fc:c7:2d:fd:a5:f1:77:ec:7b:da:95:dd:de:67:
c7:74:b7:80:1e:80:31:fa:f8:f4:96:a4:0e:da:72:ed:7f:56:
18:d0:d5:11:b0:a0:63:17:fc:fa:b7:88:91:8d:2f:ba:f7:83:
95:da:4a:68:db:11:7a:98:3c:8d:95:49:81:44:7f:72:b5:b3:
cf:de:e5:b4:5c:1f:6a:d7:ab:01:87:9a:76:c4:60:8d:06:d4:
25:5c:23:3b:83:48:df:e1:19:a7:b1:40:a8:a1:13:8c:5e:a3:
d3:1e:4c:d1:df:5d:4d:44:78:41:a3:cc:3a:0e:dc:92:e8:85:
2b:e2:c9:d7:71:9f:4d:6b:7a:a3:ce:d5:6b:aa:59:b1:f2:60:
18:32:1b:75:6d:70:08:4d:58:22:c4:34:e4:93:79:6b:67:1f:
8b:d9:19:6f:2b:ec:b5:ae:4e:85:7c:3b:61:91:bf:5c:90:cb:
eb:8a:a8:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:11:53 2026 by rpki-client