Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAAC42EE73F411F1BEE582B7CE1D38B0.roa
File: DAAC42EE73F411F1BEE582B7CE1D38B0.roa (raw, json)
Hash identifier: fainJl92lCqXpBHNunJ8s9NxxPlY8Dnw3HsVHe4jLFQ=
Subject key identifier: 40:26:CD:B4:AB:07:82:7D:CA:37:2D:56:03:1B:13:24:5A:2D:ED:2C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D618
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAAC42EE73F411F1BEE582B7CE1D38B0.roa
Signing time: Mon 29 Jun 2026 19:58:11 +0000
ROA not before: Mon 29 Jun 2026 19:58:06 +0000
ROA not after: Mon 03 Aug 2026 19:58:06 +0000
asID: 17561
IP address blocks: 154.198.8.0/24 maxlen: 24
154.198.188.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 11:51:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120344 (0x1d618)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 29 19:58:06 2026 GMT
Not After : Aug 3 19:58:06 2026 GMT
Subject: CN=6a42ce52-ca9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:60:73:a3:c0:ab:c4:0b:68:4a:17:82:30:21:
36:67:5c:32:a6:30:2f:26:86:8e:19:82:b6:c5:93:
30:c9:c0:51:b8:14:c8:d5:08:33:c2:ec:b3:49:e6:
97:96:5a:ce:9f:93:b8:2c:e0:e6:3e:23:65:28:08:
e0:0f:ef:3a:08:51:7e:5f:99:ce:1a:ea:2c:a7:fe:
d4:fe:33:25:68:26:07:75:c8:37:b1:9d:f8:65:96:
eb:12:b7:4e:d6:03:4e:fb:34:75:bf:e2:70:81:51:
3a:cd:22:d2:36:f0:7c:74:17:ae:ee:2a:3a:64:d9:
9c:95:ac:eb:3d:41:6c:92:84:d4:29:80:37:9a:6a:
b7:a5:d9:ca:ea:81:92:19:59:0e:e2:47:9a:e9:6a:
38:57:03:15:f0:50:36:cd:45:c2:cb:ca:14:a5:ee:
d7:7c:2f:40:1c:b9:ae:55:9c:2e:5b:42:50:b6:3d:
00:a8:08:df:0f:dd:32:84:f9:00:c6:99:9e:60:14:
09:f3:f8:65:8e:2b:0e:e2:64:48:84:44:2f:09:f2:
92:ab:1c:7c:23:2f:b4:74:22:b7:8c:d1:ac:bd:92:
cd:28:40:a3:d8:ea:8e:6b:2d:81:f1:48:e8:8a:d1:
4d:36:b7:ae:ff:47:b4:54:49:2e:51:c6:3c:f5:ba:
70:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:26:CD:B4:AB:07:82:7D:CA:37:2D:56:03:1B:13:24:5A:2D:ED:2C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DAAC42EE73F411F1BEE582B7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.8.0/24
154.198.188.0/23
Signature Algorithm: sha256WithRSAEncryption
71:63:30:4d:ab:80:73:1e:10:6f:6a:6e:ac:ff:3b:27:06:9e:
13:93:fb:cd:b1:ea:63:a6:46:3f:4a:14:32:15:78:af:3d:37:
83:57:04:8b:93:00:a2:5f:9a:af:da:6c:b3:2e:65:e0:ba:c6:
66:61:1e:2f:fa:9a:16:8d:08:be:29:43:2e:45:71:5c:c2:2c:
a7:dd:e0:26:f3:97:71:36:8f:59:4a:5d:74:e5:e7:fe:dd:bb:
e5:13:e0:96:8f:56:a3:4b:2a:8d:db:7f:68:ce:90:ae:7b:3b:
40:f3:eb:e6:3c:e4:9b:ad:94:25:11:ae:67:9c:4e:32:02:3d:
44:06:3c:92:15:ea:26:ed:3a:c2:40:df:96:05:2b:cf:92:61:
3e:05:47:d9:a7:f2:1e:42:f2:f0:11:1e:17:79:f5:9d:36:99:
8c:ec:34:a7:37:46:2f:ea:54:d7:31:d2:9d:18:d4:d9:32:2f:
6c:54:2e:f2:77:aa:e1:62:52:34:59:28:78:d4:51:9f:a9:ff:
99:2d:fb:b0:b9:ba:19:4b:8c:52:5a:16:23:24:ce:aa:3b:ae:
dd:f4:ff:7f:c0:0c:d8:b4:9a:01:b4:20:aa:e2:93:e7:6d:28:
c1:31:54:d0:99:11:20:b9:44:ed:98:bd:36:62:5e:e5:34:2d:
e1:c1:d0:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:45:47 2026 by rpki-client