Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7BEB8B6700D11F18B546DFACE1D38B0.roa
File: F7BEB8B6700D11F18B546DFACE1D38B0.roa (raw, json)
Hash identifier: Qle91jGJG/2g7sghlEWfHfu+0RcPlDE81VmKH8KkbRM=
Subject key identifier: F8:8C:B4:AF:10:D8:B0:06:35:0B:80:C3:A2:60:64:4D:88:D1:1D:71
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D501
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7BEB8B6700D11F18B546DFACE1D38B0.roa
Signing time: Wed 24 Jun 2026 20:47:52 +0000
ROA not before: Wed 24 Jun 2026 20:47:47 +0000
ROA not after: Tue 04 Aug 2026 20:47:47 +0000
asID: 20326
IP address blocks: 154.193.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 11:51:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120065 (0x1d501)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 20:47:47 2026 GMT
Not After : Aug 4 20:47:47 2026 GMT
Subject: CN=6a3c4278-6a8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a5:d3:7a:01:a7:44:0c:2b:04:94:9c:45:ba:
2e:c5:0c:9a:4e:57:ff:4f:a4:6b:be:26:66:2c:25:
4e:2d:98:f1:25:14:14:e8:e1:f1:14:63:15:1b:ae:
f1:0f:65:db:e1:fb:a5:38:0f:8a:57:3d:9d:c0:c3:
0e:41:3a:e7:5e:eb:a0:22:48:b4:79:90:d7:31:e6:
20:f6:c9:98:9a:74:00:02:80:d2:f9:ab:05:2c:43:
34:92:fe:b8:a0:18:f2:f7:d6:7a:3d:a7:be:c5:22:
a9:e8:00:24:3c:3c:cd:22:30:09:df:84:76:5a:9c:
0a:b5:0e:47:ad:80:51:31:70:fc:01:7e:ed:0d:f4:
dd:27:46:97:41:7b:1e:3c:bc:fa:21:31:9c:8f:9b:
71:e0:bd:52:0b:37:1d:d8:95:37:2f:53:d9:98:ab:
c7:d1:c7:9c:e6:00:10:56:38:3a:a5:b1:ef:50:55:
f6:e7:06:b7:5e:ad:23:bb:b3:7e:b2:25:51:1e:f2:
f1:dd:5d:29:bd:53:78:f5:b1:fc:9c:28:5b:ca:6f:
39:0f:b5:69:d0:6a:1c:f8:bf:59:bf:f8:07:05:39:
b3:b1:40:9e:9c:85:35:73:14:bd:4e:d6:8b:84:e5:
38:e1:2e:31:8e:17:64:fe:32:9d:47:36:2d:f5:b4:
01:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:8C:B4:AF:10:D8:B0:06:35:0B:80:C3:A2:60:64:4D:88:D1:1D:71
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7BEB8B6700D11F18B546DFACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.163.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:35:c9:c7:ee:92:6e:89:87:99:96:70:f7:c1:01:c6:a9:67:
c1:bf:c9:6e:b9:95:91:a2:4a:90:10:92:84:4c:db:d7:6d:48:
48:d4:dd:ee:82:c3:54:ea:c8:7a:63:ab:73:fd:86:d2:d1:82:
63:f7:dc:cd:1f:4f:95:14:85:7d:29:da:5c:14:a2:54:ae:9c:
77:98:51:3a:88:32:70:0b:10:99:aa:c7:a3:b5:5b:2d:4e:44:
15:06:b3:dc:85:04:42:1a:91:a0:02:eb:b5:1d:95:b1:fc:7b:
ac:46:ab:82:ea:8b:68:42:41:6f:f0:46:10:38:a4:d1:0c:49:
02:3e:e6:6d:82:35:fd:bc:f2:44:05:5f:7d:9d:70:0f:b9:28:
e7:ab:6b:c8:d2:f6:e5:22:d8:55:fe:d9:f1:52:93:c0:f5:b6:
80:8f:f1:4a:e6:40:59:f5:ff:f0:34:a2:86:5a:9f:ba:22:ac:
0d:84:73:17:35:ee:27:db:e1:d6:6a:59:a9:34:a4:3f:ee:d5:
59:f1:ad:40:09:0e:c3:5c:2a:db:c8:df:71:43:b2:85:74:b4:
a2:a6:c7:df:9c:d1:49:12:20:1a:10:5f:c5:fa:bc:45:c7:53:
d7:ba:27:39:01:f6:eb:3d:28:c9:35:4d:d0:7c:20:18:d7:e3:
a0:fa:73:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:45:49 2026 by rpki-client