Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF4D7B24816C11F1B8ED2E19CF1D38B0.roa
File: FF4D7B24816C11F1B8ED2E19CF1D38B0.roa (raw, json)
Hash identifier: Q77X+BmiVnKvX+LY8VG9Ykv9mvPIlM9Qt6P4HJagR5g=
Subject key identifier: 08:CB:00:37:7D:3B:6F:F4:52:CC:56:DE:FA:15:86:17:2A:B9:67:10
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D93A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF4D7B24816C11F1B8ED2E19CF1D38B0.roa
Signing time: Thu 16 Jul 2026 23:20:57 +0000
ROA not before: Thu 16 Jul 2026 23:20:53 +0000
ROA not after: Sat 22 Aug 2026 23:20:53 +0000
asID: 137899
IP address blocks: 154.94.224.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121146 (0x1d93a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 16 23:20:53 2026 GMT
Not After : Aug 22 23:20:53 2026 GMT
Subject: CN=6a596759-4ae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1b:62:6a:48:0b:4d:f0:af:66:09:83:69:7c:
a1:a6:46:34:df:86:b2:1f:dc:ea:f9:84:2a:56:d9:
0e:56:f3:cf:ac:c2:dd:b1:b9:25:16:ea:5b:9c:73:
5c:2e:cd:f2:a6:8d:1e:45:94:62:40:6b:bc:70:0b:
14:61:d5:10:ed:88:dc:af:2e:03:67:9c:5d:d8:f4:
44:a8:89:72:cd:fe:26:d1:b9:29:f0:65:fc:68:bc:
6a:4d:b2:fc:c3:2e:4d:4f:ee:e0:fe:26:4b:ce:64:
a0:b7:cf:df:2c:21:3a:50:8f:ea:46:9c:a1:5e:05:
45:af:de:7b:18:fb:b1:59:b1:0b:86:28:c8:72:c2:
84:7f:a1:8e:71:d5:89:c3:f4:3d:9a:ec:8d:84:1f:
6e:9a:03:63:05:3f:de:d8:6a:dd:a4:b3:9c:4a:48:
a3:51:0a:44:70:a8:f5:33:5f:b6:03:0f:b8:0b:a9:
82:f0:37:19:1f:37:5b:f1:7b:6a:23:aa:7b:65:a3:
0e:46:d1:57:5d:f8:98:ea:10:ce:ec:67:ff:df:33:
06:7b:b2:86:e4:41:18:4a:38:47:bd:8b:6d:0e:16:
5a:97:02:63:4b:ac:d9:74:c6:5d:de:61:07:a5:f8:
de:99:d5:7d:ce:22:60:a0:70:9c:b1:f4:d5:33:65:
ac:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:CB:00:37:7D:3B:6F:F4:52:CC:56:DE:FA:15:86:17:2A:B9:67:10
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FF4D7B24816C11F1B8ED2E19CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.224.0/20
Signature Algorithm: sha256WithRSAEncryption
70:46:f2:16:bb:22:2d:06:77:88:66:66:7d:7d:92:71:d6:ee:
55:32:c2:42:2f:73:67:4c:70:3f:db:42:99:ac:90:82:ac:4a:
b2:6b:4e:5b:64:27:fc:d3:2a:cb:38:37:39:a9:c0:66:11:6d:
e2:bf:9a:1f:c1:60:09:9c:77:20:16:0c:1e:fd:58:27:66:6b:
7f:99:66:ef:02:b3:a6:bd:d3:81:63:eb:6a:93:ff:ee:59:ab:
4e:f2:11:fe:0a:b0:3f:71:e4:c8:72:50:70:0c:1d:37:52:67:
a8:19:f3:cc:f6:72:b3:0e:d4:c9:bc:39:a8:bf:71:35:b6:98:
b5:76:c0:4d:9d:fa:3f:a5:35:34:c6:37:b8:c1:94:9b:a8:e0:
80:c6:af:cf:dc:5c:92:d0:d9:bc:ea:12:18:18:83:e3:77:90:
3a:cc:87:43:e9:2f:28:5f:4b:ff:80:55:d7:f6:5d:b9:27:46:
a8:cf:5c:24:86:d5:b8:12:57:bf:ab:e1:71:d9:6b:81:a5:2b:
09:4b:c9:75:d1:2c:23:9c:93:f5:a0:8f:73:78:0e:a4:b8:e0:
45:0a:eb:32:3e:89:7c:2a:cb:d7:a9:45:b8:28:ec:06:32:b4:
d7:8d:e7:60:04:14:a2:9c:48:e2:77:b0:31:87:20:57:fb:30:
5e:b2:94:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:23 2026 by rpki-client