Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6A51F5A779A11F18C6C66F0CE1D38B0.roa
File: D6A51F5A779A11F18C6C66F0CE1D38B0.roa (raw, json)
Hash identifier: qPt+BmokQbFiHl78nSkRvXVRxqy4otX+HYMQkd9DSxk=
Subject key identifier: 18:A1:E8:A3:A7:A8:39:C7:00:79:04:50:9C:4B:29:DD:79:6F:ED:31
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D701
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6A51F5A779A11F18C6C66F0CE1D38B0.roa
Signing time: Sat 04 Jul 2026 11:23:54 +0000
ROA not before: Sat 04 Jul 2026 11:23:49 +0000
ROA not after: Wed 12 Aug 2026 11:23:49 +0000
asID: 20326
IP address blocks: 154.83.184.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120577 (0x1d701)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 4 11:23:49 2026 GMT
Not After : Aug 12 11:23:49 2026 GMT
Subject: CN=6a48ed4a-0aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2e:6f:7a:56:e0:b6:50:82:16:05:02:fc:57:
a5:c3:4f:cd:41:61:7f:fb:17:44:4b:d4:3e:6e:05:
96:e3:d9:1c:da:98:ee:d7:c3:f0:01:61:f3:d6:0c:
23:85:b8:6f:0f:a0:c6:cf:e3:5b:83:d2:54:59:46:
3c:6e:02:e2:35:14:f6:68:21:65:95:dd:04:37:a0:
2a:94:f2:8c:4c:da:91:78:64:92:b8:ae:ba:a4:74:
e0:a1:e8:1c:b6:25:76:de:61:c4:aa:20:a7:2f:2a:
67:35:59:bf:2e:4b:06:87:b6:e7:bc:c9:79:46:c7:
72:11:d6:69:60:c8:0c:fc:38:63:da:44:50:eb:d1:
3d:32:44:c6:21:0a:95:d9:69:c0:c2:fa:62:50:64:
7a:d0:02:98:6f:a2:63:9f:39:68:e3:25:72:94:bd:
dd:57:19:38:df:36:b5:c0:98:21:7b:dd:b0:70:6e:
94:56:f9:46:4c:8f:11:36:f0:dd:ac:3c:bd:48:35:
ac:c5:69:49:e6:ef:20:55:77:c8:02:f8:be:0a:0f:
22:cc:91:41:44:35:25:cc:7f:b4:6b:1b:2a:4f:0f:
78:f2:9d:ec:b8:a3:4d:86:2c:35:9f:0c:61:e5:59:
be:31:07:be:f1:2e:34:18:66:b0:3a:20:62:2a:98:
5e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:A1:E8:A3:A7:A8:39:C7:00:79:04:50:9C:4B:29:DD:79:6F:ED:31
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6A51F5A779A11F18C6C66F0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.184.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:4b:b3:bd:ab:ab:f5:9f:e4:33:da:96:1a:8a:bb:10:f2:c7:
c1:7b:e8:56:b1:f8:c2:b2:22:6b:e2:55:ea:8d:fa:73:07:a3:
2d:6a:5a:ae:7e:36:ba:9f:b2:a2:59:cb:1a:46:8d:8a:4e:a4:
59:fd:7e:6a:2c:13:b8:62:31:65:4d:26:0b:b6:a2:d7:5e:2b:
01:9d:f2:b2:7d:a8:4c:40:e2:64:68:22:19:65:00:e3:3b:e9:
14:9b:90:45:9a:18:b4:bb:21:9c:e3:80:38:cd:d1:ed:c5:f7:
e2:8b:cb:ef:d9:fb:cb:28:3e:b3:d2:9e:fe:d2:e2:7e:ac:ac:
0f:83:48:ee:e6:71:96:b3:ae:0a:64:60:31:44:60:de:81:2a:
3c:ef:91:27:43:5b:a7:26:f2:c6:de:82:0e:29:5b:22:a8:57:
3c:4e:27:d6:3d:f9:f3:7b:f6:aa:a5:8b:8f:51:2d:2d:69:61:
3f:d1:b6:b5:e9:1b:15:8c:2a:08:dd:17:7f:bc:f1:90:f7:a8:
9f:57:c2:61:59:0d:77:34:50:91:b1:5d:5e:e0:b4:f0:a5:e7:
17:eb:ee:a8:8d:bd:b5:af:53:d6:2e:96:eb:14:de:27:f0:28:
8e:ae:0b:72:17:fa:8b:89:64:97:b4:fc:1d:bc:64:38:6d:4e:
38:c8:1c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:19 2026 by rpki-client