Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7E871368B1911F1B51667B7CE1D38B0.roa
File: D7E871368B1911F1B51667B7CE1D38B0.roa (raw, json)
Hash identifier: 3ZOrq3hjqyFmFBBUYiBnnsFqFvoovC3P5viSjfFkQhg=
Subject key identifier: D1:00:DE:4F:C9:AD:0C:1D:0A:75:9A:50:2E:F8:62:1A:C3:60:09:2C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DBAF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7E871368B1911F1B51667B7CE1D38B0.roa
Signing time: Wed 29 Jul 2026 06:50:54 +0000
ROA not before: Wed 29 Jul 2026 06:50:50 +0000
ROA not after: Sat 08 Aug 2026 06:50:50 +0000
asID: 271956
IP address blocks: 154.88.190.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 08 Aug 2026 06:50:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121775 (0x1dbaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 29 06:50:50 2026 GMT
Not After : Aug 8 06:50:50 2026 GMT
Subject: CN=6a69a2ce-c386
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b6:ae:4c:91:d8:20:c4:3c:69:de:2a:ff:db:
16:74:5f:3f:1a:8c:85:19:9a:07:c2:3b:7c:45:a5:
1e:e2:7d:b5:45:b9:cb:23:be:7c:64:ea:be:49:7c:
ef:b0:fe:b6:f8:fc:9b:d6:11:77:34:9e:c0:1d:a1:
7c:e3:b0:9d:97:ba:91:a1:4e:2e:7f:71:05:07:1b:
64:f4:de:7b:21:ed:88:4a:ba:91:a5:bc:54:d9:9c:
99:b6:83:b9:2a:c7:25:29:22:63:96:ac:5b:e3:34:
52:4c:e9:fb:27:8f:7e:d5:2a:ba:55:b0:83:1f:84:
74:f7:bd:69:45:9f:cc:7d:f1:34:d2:c2:2c:74:f1:
73:05:05:6a:0e:48:27:c2:3b:bc:d7:a0:6d:4c:22:
68:e1:27:52:bf:7f:7b:60:16:cd:2c:a8:10:dd:d7:
35:c5:92:4d:47:38:36:21:12:70:e5:74:53:98:a8:
d4:f6:15:9b:fa:1c:c2:2c:44:c1:a9:97:da:47:d3:
40:96:98:85:93:56:a1:fe:7a:f7:84:ac:25:d9:32:
ba:7a:cf:fd:dd:89:20:da:fb:90:83:6e:0a:ae:21:
80:fe:d8:5d:d6:1a:a1:54:cd:fe:26:20:73:37:58:
63:2e:e1:86:59:36:e9:c2:fe:5f:2b:70:34:55:c2:
21:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:00:DE:4F:C9:AD:0C:1D:0A:75:9A:50:2E:F8:62:1A:C3:60:09:2C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D7E871368B1911F1B51667B7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.190.0/23
Signature Algorithm: sha256WithRSAEncryption
87:0e:25:5c:74:bb:58:33:73:55:1b:fa:cb:f6:d0:bc:eb:c5:
08:3a:af:3b:ce:84:54:65:3c:b9:48:b7:1f:b9:d5:4d:2f:73:
a3:d0:ae:5c:e4:ee:5a:b0:70:37:ac:24:43:cf:41:90:43:67:
12:65:d7:b6:60:1f:92:6b:3d:80:3b:af:76:60:7e:a6:1e:1d:
3a:e7:63:21:2b:5f:47:7f:a9:0d:f0:16:25:25:bc:a7:73:13:
80:d7:d6:69:4e:0a:d2:4c:10:88:dd:86:8e:d8:af:b3:52:c6:
3e:96:cc:4f:ff:3c:8a:2f:04:14:b2:ee:46:10:23:8f:18:7d:
13:58:3c:2b:4f:8d:25:40:95:57:0e:98:7d:e8:62:53:e5:7e:
15:50:85:12:c8:ff:4a:d9:33:a5:cc:33:bc:e9:5d:2d:e3:55:
c1:7f:54:3c:85:e6:c2:1b:96:df:38:ea:f7:7b:20:49:41:7b:
12:f5:f8:cb:b9:3b:d9:ea:1d:ce:f7:a5:bc:da:bb:bd:0a:17:
42:93:e6:63:1a:ea:a9:2a:46:6a:ae:48:c6:2a:cd:2a:c1:1c:
29:3e:71:a2:6e:b3:55:85:65:f7:29:00:9b:13:64:1d:16:f1:
c1:ce:29:c5:6b:97:ce:7a:13:54:61:75:1b:7a:d0:25:63:99:
9a:5e:9a:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:08:47 2026 by rpki-client