Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F1C564BC8F1811F1BC38D20FCF1D38B0.roa
File: F1C564BC8F1811F1BC38D20FCF1D38B0.roa (raw, json)
Hash identifier: 3SscnZFPMoxRlNptb0GL6WUu4m9fEr0UruR0QM4QMdI=
Subject key identifier: 38:12:23:D3:6B:1C:48:8A:73:AF:E9:3E:DF:F9:B1:32:EC:4C:53:E3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DC80
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F1C564BC8F1811F1BC38D20FCF1D38B0.roa
Signing time: Mon 03 Aug 2026 08:54:33 +0000
ROA not before: Mon 03 Aug 2026 08:54:28 +0000
ROA not after: Thu 10 Sep 2026 08:54:28 +0000
asID: 154177
IP address blocks: 154.223.16.0/24 maxlen: 24
154.223.17.0/24 maxlen: 24
154.223.18.0/23 maxlen: 24
154.223.20.0/24 maxlen: 24
154.223.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121984 (0x1dc80)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 3 08:54:28 2026 GMT
Not After : Sep 10 08:54:28 2026 GMT
Subject: CN=6a705749-5851
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:5c:49:13:57:45:8e:1b:6a:ff:6c:b7:33:19:
2c:74:9f:b0:89:b4:eb:60:0f:23:8e:f6:5b:06:98:
92:84:bb:16:80:6a:85:9d:33:14:bf:a2:56:d8:91:
c6:c7:ed:be:e4:ef:58:2d:e5:44:7e:08:30:e5:11:
88:c3:ed:08:17:1b:cc:8d:c2:54:fe:c2:0b:83:ca:
57:d0:16:35:16:4c:35:ce:2f:b7:4b:9e:d5:df:b1:
32:c0:f6:16:4d:a6:94:60:50:3c:62:40:1d:e4:db:
dc:07:5a:24:07:a7:a3:37:7b:18:45:d7:74:7b:62:
81:a4:e4:b2:8a:7d:c0:2c:21:4c:88:8a:02:ff:0c:
f3:b7:51:a2:07:74:ef:e8:90:d0:10:68:33:91:8f:
4f:ef:82:55:85:2b:4b:f2:f5:c7:3c:cd:bd:d7:21:
1f:76:af:f7:97:04:8b:8e:9e:d9:23:7d:f5:11:a3:
b4:58:5d:2f:6e:93:dd:26:b0:bd:65:94:a3:09:3f:
0d:0b:0e:e6:76:44:16:0b:70:38:04:1f:16:66:be:
72:87:12:ee:db:63:d5:91:f4:77:6f:3f:c4:41:6d:
e1:4c:9b:49:1a:18:14:fb:73:63:ce:19:c8:f9:6e:
05:c6:60:9f:25:0e:2e:47:73:43:96:8c:99:e9:8c:
70:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:12:23:D3:6B:1C:48:8A:73:AF:E9:3E:DF:F9:B1:32:EC:4C:53:E3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F1C564BC8F1811F1BC38D20FCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.16.0-154.223.21.255
Signature Algorithm: sha256WithRSAEncryption
4e:0c:40:2c:75:0f:74:9a:b5:62:85:1c:c3:b0:0a:fd:fb:ba:
91:55:c1:6f:e6:a7:57:ac:f4:c6:21:a7:f0:2b:a2:0b:48:e7:
c3:97:f7:55:58:8d:5b:7b:46:a7:64:45:0f:8e:ba:a0:5a:42:
00:4e:62:64:6d:59:c1:33:fb:d0:f9:75:df:af:26:53:17:95:
97:aa:28:cd:27:59:37:f9:da:2a:c2:85:5a:7e:a3:39:b2:c2:
dd:9b:31:f1:6e:90:36:5b:6e:cf:ed:c6:0b:75:98:d8:92:db:
3d:f7:7e:dd:1d:e1:9c:6a:73:da:7c:14:ed:b0:c8:95:12:86:
0a:f6:09:f7:d7:32:58:0c:35:5f:a1:72:f2:2f:f9:61:34:a6:
eb:2e:cb:4b:11:43:aa:57:96:20:40:30:d3:05:00:4f:f1:44:
b3:41:3a:45:8f:91:b8:49:d5:27:0f:bd:5c:f8:e6:55:d1:81:
08:0d:23:ae:6a:95:95:18:c6:88:d1:de:87:f0:0c:17:9b:6e:
3e:0f:75:1a:d0:64:1a:24:e4:11:db:b2:1a:07:f2:3a:5a:89:
4b:b0:d7:e4:48:fd:51:23:a0:1c:a9:29:1b:4f:13:d6:18:84:
11:6a:0a:63:31:c0:4c:67:39:f9:ad:63:0c:19:a4:60:90:4c:
28:86:7b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:06:22 2026 by rpki-client