Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E8A5BB5C8CAC11F1BE15BFD6CE1D38B0.roa
File: E8A5BB5C8CAC11F1BE15BFD6CE1D38B0.roa (raw, json)
Hash identifier: mI2QgHp91+lm8Z4YlCo1xnNuARrpbYfE31XD5LOS2CU=
Subject key identifier: FE:D1:8A:9C:A8:3A:1E:61:31:8B:8E:70:65:1A:78:58:91:AD:A0:43
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DC0F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E8A5BB5C8CAC11F1BE15BFD6CE1D38B0.roa
Signing time: Fri 31 Jul 2026 06:56:09 +0000
ROA not before: Fri 31 Jul 2026 06:56:05 +0000
ROA not after: Mon 26 Jul 2027 06:56:05 +0000
asID: 209242
IP address blocks: 154.194.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 09 Aug 2026 00:07:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121871 (0x1dc0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 31 06:56:05 2026 GMT
Not After : Jul 26 06:56:05 2027 GMT
Subject: CN=6a6c4709-440e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d8:41:8e:49:42:7a:d3:f3:23:d9:75:8b:2f:
b0:2e:ed:1e:1a:00:31:7c:4b:24:af:b0:e7:e6:c5:
42:96:34:a9:15:d7:d4:0c:cc:c3:dc:92:1b:3c:c9:
d9:13:5a:2b:14:df:db:ba:2b:72:fa:bd:5d:50:b0:
96:28:03:8b:8b:bd:ed:2d:87:b9:dd:5a:68:4b:81:
00:1d:32:07:17:d2:7e:53:58:4b:2d:33:34:78:cf:
1d:9e:c9:9e:d5:0a:1c:ad:6a:f0:07:6a:b5:3c:ec:
02:48:15:41:de:0b:54:5a:fd:35:8a:00:41:49:3f:
a0:7c:76:2e:e0:d1:07:dd:49:8a:0c:13:ea:01:ce:
ed:d9:06:5f:0a:5b:33:2b:eb:16:9e:13:57:dd:ec:
3b:1f:62:df:e2:7c:e5:21:c4:23:26:d0:7a:a6:4c:
52:fc:11:67:97:a4:4f:37:40:8d:46:9c:1e:46:b2:
85:35:3b:7f:ae:ae:79:e2:e3:a9:e0:48:48:4a:79:
18:12:03:53:f5:dc:92:e7:41:40:d1:d0:5f:bd:ad:
e4:91:8a:e2:f3:26:a5:10:5e:ad:78:b6:42:b4:e4:
ce:28:25:19:32:1b:9f:30:66:0c:eb:ef:95:9f:8f:
c3:11:3b:04:83:2e:a5:fb:2c:7d:cc:2f:2e:22:8d:
a1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D1:8A:9C:A8:3A:1E:61:31:8B:8E:70:65:1A:78:58:91:AD:A0:43
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E8A5BB5C8CAC11F1BE15BFD6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.12.0/24
Signature Algorithm: sha256WithRSAEncryption
75:07:be:35:68:2a:c3:4b:9c:4d:67:20:d5:93:bf:b0:23:80:
e1:6f:e6:55:6d:b8:da:6f:21:bb:79:c8:b1:23:9b:96:b4:6c:
c0:fa:97:46:ee:99:52:b8:a8:92:3e:dc:71:fc:9c:d6:91:06:
e6:9b:78:7f:0b:61:a1:33:82:e8:71:2c:87:69:3c:42:d4:7d:
55:e7:4c:d9:fe:97:6c:fd:e2:c9:4f:e7:79:12:f9:ef:d3:b8:
61:24:90:4e:70:23:ce:bb:ca:e3:0e:27:9f:53:c2:2c:76:b9:
da:e9:c0:56:63:24:d4:5b:0e:9c:f8:39:18:1b:d3:e3:c0:87:
8e:5a:f5:30:1e:b2:16:f9:27:e5:b7:35:ce:43:98:c3:e8:0a:
bd:c7:ef:79:7c:fa:c6:6e:3e:ab:0e:24:d5:9c:c6:3e:f0:c3:
38:35:4d:98:3e:c3:12:8b:9b:d4:b0:bf:36:85:b2:c2:76:ab:
30:4a:23:48:52:85:28:22:0f:b2:89:d6:ee:d7:35:89:87:4f:
3a:c1:06:1f:4d:6f:0b:89:16:3e:49:da:78:fb:0a:b9:c1:b1:
4c:a6:f6:ca:1d:e7:4d:f2:1a:d9:62:8b:60:99:c1:e5:b1:2c:
6f:1e:72:04:90:a3:a6:5f:24:5f:f4:76:b0:53:8f:d9:1e:a8:
50:f8:b6:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 00:45:54 2026 by rpki-client