Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE3C88F27B8C11F1AC27C9A2CE1D38B0.roa
File: DE3C88F27B8C11F1AC27C9A2CE1D38B0.roa (raw, json)
Hash identifier: zEtpE6lTPpVXs2BM8/q5NbqBqolKRTXHnYZsdIoeOVU=
Subject key identifier: 51:E3:5A:65:B1:08:B9:96:A5:0B:A3:3B:0D:A3:59:62:53:D4:6A:12
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D7D6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE3C88F27B8C11F1AC27C9A2CE1D38B0.roa
Signing time: Thu 09 Jul 2026 11:53:58 +0000
ROA not before: Thu 09 Jul 2026 11:53:53 +0000
ROA not after: Sun 16 Aug 2026 11:53:53 +0000
asID: 401434
IP address blocks: 154.85.16.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120790 (0x1d7d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 9 11:53:53 2026 GMT
Not After : Aug 16 11:53:53 2026 GMT
Subject: CN=6a4f8bd6-9115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:52:b9:2f:5b:53:17:45:ae:87:02:3f:80:89:
f7:cc:01:50:e4:31:ea:f0:f0:8a:a1:a7:48:ea:74:
90:f3:37:29:94:78:7a:e3:67:09:10:1f:ea:51:fa:
ac:93:2d:33:f1:ff:80:a5:db:b7:6b:29:ca:8f:7f:
16:2c:e0:05:14:4e:17:a5:6e:11:af:c3:98:34:0d:
4a:83:49:4e:47:73:6e:94:95:6c:08:9b:93:20:e2:
44:7a:55:55:4e:eb:85:9e:95:cd:8c:53:cc:6b:7e:
06:8c:14:83:67:c2:b7:2f:50:41:11:45:90:16:cb:
36:09:67:10:ec:a6:de:6c:51:12:6f:33:2b:60:e5:
06:c3:a9:4b:10:81:80:e1:31:27:72:bf:2f:01:79:
6a:dc:08:00:fc:60:97:d0:ab:8a:8b:84:c6:84:0b:
62:84:b2:17:02:a3:51:65:96:64:93:b3:62:07:b7:
25:b2:e4:04:45:22:63:be:8d:aa:ee:5e:ba:ce:e5:
5e:44:29:0b:3d:ea:d1:c7:68:78:aa:65:a5:4a:77:
9c:7e:c9:cd:c3:88:47:12:4d:2b:bc:bf:8d:a4:86:
b2:21:5e:28:c7:ef:5d:da:e6:99:34:57:10:79:7c:
27:77:13:81:e0:94:4e:aa:2b:f6:ba:d2:ff:bf:f6:
70:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E3:5A:65:B1:08:B9:96:A5:0B:A3:3B:0D:A3:59:62:53:D4:6A:12
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE3C88F27B8C11F1AC27C9A2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.16.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:46:42:e6:8d:17:3b:c9:56:fb:94:4b:d6:fa:01:e6:35:de:
64:6b:c7:51:0f:9c:cf:37:77:2b:7b:b7:57:9c:31:d5:76:de:
10:2e:90:7c:2c:cd:6d:53:06:0c:2c:93:12:48:c9:77:79:a7:
c9:b3:6b:92:e7:12:d9:e7:f9:89:18:8b:05:29:5f:ba:a1:09:
53:67:4d:d4:1f:34:a9:5a:2b:71:d1:14:6b:7b:42:21:7a:80:
39:ab:f7:b0:6d:74:95:d4:3d:fc:6c:cb:dc:a8:72:bc:bf:72:
ba:63:24:50:82:27:23:57:e1:ff:08:d6:dc:93:39:f7:35:5e:
24:13:bc:f8:b5:87:a5:9f:8f:74:43:b6:08:dd:da:0f:8f:57:
3f:23:73:aa:81:45:72:4d:0e:23:4c:df:a8:9e:c4:45:a9:29:
7f:ac:95:79:a6:bc:bc:e3:2d:9e:e1:04:d2:41:ef:23:a2:54:
4c:18:01:23:26:6b:38:a3:47:7a:04:92:2c:f5:64:9b:f2:9c:
81:c6:5b:06:c1:e6:0c:4a:22:14:01:c7:fd:fc:e5:b8:af:e0:
2e:d5:dd:a6:67:6d:e0:ef:44:7f:54:7b:50:85:1b:66:8a:cd:
0b:2f:7d:97:ae:62:c4:70:5f:2e:88:6a:16:33:e3:c7:e4:4f:
9b:db:52:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:20 2026 by rpki-client