Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC031F688F0A11F1A28E45BECE1D38B0.roa
File: FC031F688F0A11F1A28E45BECE1D38B0.roa (raw, json)
Hash identifier: 5qG+lKEW6nFj+ltZ3+tmzEByyQHYMnpjJtx6fD7Tcuo=
Subject key identifier: 3B:A7:97:36:76:F0:29:FE:B0:30:2B:5B:0E:CA:8A:09:6F:A4:E7:37
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DC60
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC031F688F0A11F1A28E45BECE1D38B0.roa
Signing time: Mon 03 Aug 2026 07:14:37 +0000
ROA not before: Mon 03 Aug 2026 07:14:33 +0000
ROA not after: Thu 13 Aug 2026 07:14:33 +0000
asID: 14315
IP address blocks: 154.203.4.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121952 (0x1dc60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 3 07:14:33 2026 GMT
Not After : Aug 13 07:14:33 2026 GMT
Subject: CN=6a703fdd-137c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:53:12:4b:94:bb:4e:23:03:74:20:c5:47:d5:
0d:dc:d3:1a:a9:7e:ff:a9:e8:cb:05:1e:74:52:23:
f9:5b:46:89:f2:f3:05:77:aa:bc:cf:ca:30:0b:93:
88:70:a7:4e:ed:fb:2f:18:b9:dc:c3:e9:af:b4:48:
1d:f7:f2:96:1d:43:91:79:c5:4a:03:57:50:56:4c:
00:e0:2b:65:8b:de:66:63:bf:b3:f1:09:d8:e7:48:
13:08:a6:de:d1:19:95:6a:26:46:01:05:ef:6d:63:
20:e4:64:10:2b:ef:94:5f:39:92:3e:41:52:5f:76:
15:2a:4b:f6:28:fc:ed:ab:75:49:d7:d4:40:3a:7d:
ab:d3:6b:83:0e:c0:1d:50:ab:7a:4a:25:6d:96:44:
6b:05:ee:95:0e:49:db:e1:7d:79:0a:7a:6c:59:72:
49:55:3a:f5:7f:43:35:ba:df:66:f2:85:c4:da:f3:
78:75:ff:ff:76:5d:4d:6a:70:83:82:73:74:ab:a0:
fe:89:d0:21:45:4d:4c:95:5d:44:e7:07:85:e8:fd:
fb:6a:2c:90:35:b0:32:5a:c8:82:a0:d2:e4:18:d9:
63:7e:16:b5:9a:ea:bb:b4:d3:5f:c0:83:2f:f5:cd:
58:87:89:83:f7:92:1a:ba:f0:86:0e:2c:0d:b5:3d:
8f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A7:97:36:76:F0:29:FE:B0:30:2B:5B:0E:CA:8A:09:6F:A4:E7:37
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC031F688F0A11F1A28E45BECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.4.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:6f:29:6c:1c:0c:08:d0:91:47:36:57:da:ff:1d:7c:38:0e:
86:dc:de:12:ab:3c:c5:ae:3d:fc:90:9f:90:cb:7c:d3:a6:68:
b0:33:a7:2e:25:a5:a5:ef:5d:91:8a:bc:b4:bb:20:b6:ba:7f:
b5:ff:f9:ec:22:4e:2f:19:1b:17:65:da:ec:b5:8f:59:fc:35:
25:81:a9:2b:c1:d2:6e:87:ea:f3:25:c3:9f:cc:37:d6:74:ba:
a1:01:68:3a:7e:b4:91:5f:dc:6b:4b:cb:0c:22:1d:01:d2:5e:
f8:1a:ea:1b:03:96:88:02:37:8a:ee:3f:41:06:cf:79:0d:da:
6c:2e:96:7a:01:ad:f4:98:6d:6b:41:98:3d:db:df:eb:1c:30:
7c:c3:36:04:bc:36:fa:51:c6:7d:b4:30:79:cb:af:bb:b4:38:
a5:cd:03:dd:a6:7b:b1:5a:f5:33:ea:85:c7:70:16:84:1e:58:
44:c3:9a:82:ab:d6:32:aa:ad:a6:1a:48:ed:d7:a4:7f:dc:8a:
d8:df:7c:d3:e9:a7:9a:69:3d:ec:86:1f:29:99:24:1d:51:d3:
aa:47:03:41:42:27:15:6f:12:93:f3:b0:fe:5b:4a:38:0f:a8:
6d:ec:bf:57:4f:60:9a:7e:e3:f3:fe:52:f3:12:83:4e:e3:73:
a9:8f:ee:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:07:41 2026 by rpki-client