Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD006200792611F199E0C9D1CE1D38B0.roa
File: DD006200792611F199E0C9D1CE1D38B0.roa (raw, json)
Hash identifier: EpK6LHZ7dr7ppLLh96aJw1LuKA4M/UwEOLTNVm1SjY0=
Subject key identifier: 7D:D2:E4:AB:52:C3:2F:BD:49:2A:55:88:2E:16:5C:B2:8D:16:1C:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D73A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD006200792611F199E0C9D1CE1D38B0.roa
Signing time: Mon 06 Jul 2026 10:38:45 +0000
ROA not before: Mon 06 Jul 2026 10:38:40 +0000
ROA not after: Wed 12 Aug 2026 10:38:40 +0000
asID: 214941
IP address blocks: 154.193.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 12:38:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120634 (0x1d73a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 6 10:38:40 2026 GMT
Not After : Aug 12 10:38:40 2026 GMT
Subject: CN=6a4b85b5-43b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:69:5e:87:90:28:47:7d:8e:57:1d:3f:aa:b3:
cc:fe:43:68:77:f3:04:1c:1f:27:9d:ca:2f:ee:38:
e4:77:fe:31:7c:78:df:f0:39:44:05:73:95:21:7f:
b1:3d:27:f1:33:15:10:85:68:22:c3:8a:e9:0c:6f:
92:53:4c:45:65:0d:39:28:b9:f8:4f:28:ae:30:70:
a2:1d:0a:c6:a5:2a:aa:62:35:1a:49:47:bd:ba:f5:
84:f2:6d:de:4a:32:db:d2:43:8c:02:26:45:a7:cf:
c2:0f:84:82:09:e8:63:3e:98:a3:47:e1:72:00:1d:
83:e2:74:6f:58:9c:4c:01:ea:38:a7:53:ad:f8:b0:
7e:56:ea:14:03:85:61:20:c9:19:1c:1b:62:c2:31:
ba:db:75:e1:dc:09:36:63:2f:0c:6f:07:5b:90:55:
c2:ab:d5:68:25:5e:52:37:7c:ee:a1:cb:0d:91:a3:
fc:d6:04:03:da:d3:6c:51:3c:cd:99:7f:f3:18:a4:
06:b5:7d:92:a3:2c:af:5e:f5:eb:dd:2d:26:66:ee:
67:70:73:06:b5:1e:18:01:4d:b7:b7:a9:24:fa:41:
05:10:3a:0c:70:19:57:14:ed:a1:83:28:cd:85:cc:
c9:93:5b:8e:df:b3:cf:0b:e1:72:d4:79:93:fd:92:
52:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:D2:E4:AB:52:C3:2F:BD:49:2A:55:88:2E:16:5C:B2:8D:16:1C:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DD006200792611F199E0C9D1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.0.0/24
Signature Algorithm: sha256WithRSAEncryption
96:7e:73:e4:54:4d:3e:c6:7b:ec:d9:9f:1b:87:03:15:db:56:
f4:62:2f:88:e6:56:29:e4:16:b0:ca:dc:04:2c:fb:8c:a7:f9:
c5:e3:ca:39:e3:54:ce:d7:60:41:df:65:23:01:1c:a1:b0:81:
18:3b:c5:c6:40:00:a3:8c:8d:e9:63:6f:85:31:49:33:67:59:
f0:f9:24:81:e2:27:da:7e:16:4e:01:52:64:b2:ad:fb:ae:6b:
49:3d:fd:d1:c3:91:8d:1c:23:8a:45:b7:e0:1f:cc:35:c6:50:
51:9e:00:2f:07:cf:e9:c4:b2:9b:e4:1d:d4:1c:c1:94:ef:68:
79:92:92:1f:b2:11:a3:17:44:38:70:ed:44:88:32:af:2f:19:
ef:f0:11:23:88:14:92:78:36:72:12:13:af:fd:e1:60:d9:6d:
6a:a3:39:c5:7a:d9:7f:10:54:62:1e:1f:c6:eb:32:b4:d6:06:
55:75:ca:93:0c:d6:41:ee:c1:91:27:db:2c:b1:c1:ad:4f:6a:
3d:60:62:c3:02:c0:ae:c0:d5:3d:ea:05:92:5b:a4:06:f3:4a:
a7:50:14:65:7b:a0:81:a2:fb:6c:24:40:83:30:4e:55:d4:12:
6d:f8:4d:be:e4:2d:95:36:ba:88:67:91:2f:17:e8:07:66:0a:
96:f2:33:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:11:46 2026 by rpki-client