Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F367D0C5/29E381AEA48911ED81691E87F1222468/209BBE628AA011F1947378C3CE1D38B0.roa
File: 209BBE628AA011F1947378C3CE1D38B0.roa (raw, json)
Hash identifier: 424qdU5Y5exzELBBv5ObHFHrKN5G8oqYQmnBf8+v118=
Subject key identifier: 91:4C:23:D7:AD:89:0A:A1:17:98:8A:D7:19:FA:11:E1:EE:9F:CD:49
Certificate issuer: /CN=F367D0C5AF/serialNumber=569245EDF8EF53DD25E0095A12485B170F10EC3E
Certificate serial: 0530
Authority key identifier: 56:92:45:ED:F8:EF:53:DD:25:E0:09:5A:12:48:5B:17:0F:10:EC:3E
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/VpJF7fjvU90l4AlaEkhbFw8Q7D4.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/29E381AEA48911ED81691E87F1222468/209BBE628AA011F1947378C3CE1D38B0.roa
Signing time: Tue 28 Jul 2026 16:19:37 +0000
ROA not before: Tue 28 Jul 2026 16:19:33 +0000
ROA not after: Thu 10 Sep 2026 16:19:33 +0000
asID: 37284
IP address blocks: 154.127.64.0/20 maxlen: 27
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/29E381AEA48911ED81691E87F1222468/VpJF7fjvU90l4AlaEkhbFw8Q7D4.crl
rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/29E381AEA48911ED81691E87F1222468/VpJF7fjvU90l4AlaEkhbFw8Q7D4.mft
rsync://rpki.afrinic.net/repository/afrinic/VpJF7fjvU90l4AlaEkhbFw8Q7D4.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 31 Jul 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1328 (0x530)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F367D0C5AF, serialNumber=569245EDF8EF53DD25E0095A12485B170F10EC3E
Validity
Not Before: Jul 28 16:19:33 2026 GMT
Not After : Sep 10 16:19:33 2026 GMT
Subject: CN=6a68d699-5332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:45:0c:94:d6:34:86:6f:36:f5:85:e1:96:74:
ae:ad:12:9d:4d:1a:4a:37:33:42:97:5b:c5:a0:35:
f4:c5:4f:99:96:e2:1d:ed:47:4d:99:a0:74:ac:7f:
fc:9a:cb:9c:19:86:33:6a:fb:d0:1b:6f:8d:c1:db:
87:c0:d2:a6:8d:f9:04:51:60:28:b6:33:d8:aa:ab:
02:f3:8c:5f:d0:c4:f2:52:1b:29:e6:49:75:5b:2f:
0b:71:19:7f:44:3e:08:0d:dc:4d:0b:9f:b6:b9:2b:
28:a5:91:a5:2e:ee:55:2e:de:00:61:78:0f:89:8d:
10:ef:6c:c1:b3:27:c6:fa:29:17:98:51:57:b3:e9:
15:18:e8:78:fb:89:3b:68:25:84:68:7a:b7:b0:f0:
58:f3:40:ce:d0:88:1c:21:61:e4:a1:a3:9e:52:e8:
56:85:d3:a2:c5:58:fa:91:d4:39:3f:a5:59:95:86:
68:da:44:06:a1:26:f2:b5:9c:3a:67:21:be:03:e1:
9d:b4:9b:a1:55:83:d6:28:d7:d1:30:fc:3c:ab:f5:
0a:c4:32:be:63:bd:7e:cf:28:b7:c7:91:84:b5:77:
f9:dd:8d:14:35:8b:18:19:df:92:c7:80:55:4b:3f:
5b:da:34:d7:49:46:9c:e0:57:02:bb:25:23:9a:42:
73:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:4C:23:D7:AD:89:0A:A1:17:98:8A:D7:19:FA:11:E1:EE:9F:CD:49
X509v3 Authority Key Identifier:
keyid:56:92:45:ED:F8:EF:53:DD:25:E0:09:5A:12:48:5B:17:0F:10:EC:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/29E381AEA48911ED81691E87F1222468/VpJF7fjvU90l4AlaEkhbFw8Q7D4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/VpJF7fjvU90l4AlaEkhbFw8Q7D4.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F367D0C5/29E381AEA48911ED81691E87F1222468/209BBE628AA011F1947378C3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.127.64.0/20
Signature Algorithm: sha256WithRSAEncryption
0a:87:9d:cf:e8:a8:ce:b1:c6:3e:e9:b0:5b:4f:38:40:e7:37:
ea:8e:30:fa:af:bd:a8:e0:3d:2f:4b:b9:34:2a:6c:e9:1b:31:
86:5c:13:fa:52:3f:20:d5:c1:93:e2:d8:93:75:98:9e:60:65:
c0:27:7e:aa:e2:88:d4:38:e5:a1:d5:38:97:67:26:ab:fb:3d:
1e:a3:c3:0c:4d:29:1c:9b:ed:3d:4a:af:53:40:3f:dd:95:c8:
ee:8f:6e:7b:af:f6:71:d6:c5:19:b3:40:a8:02:d4:d5:2c:b6:
92:64:56:b0:12:9a:21:27:9c:d5:3d:81:23:5e:02:3a:94:d7:
04:96:64:1e:b9:03:77:45:c5:66:a4:69:57:b1:3f:2a:2c:7e:
99:57:83:5d:0c:48:ab:0f:57:bf:10:66:de:96:a7:de:11:5a:
b9:1b:fe:f3:c4:c5:b1:1f:25:7a:cd:82:68:a8:f2:fd:ff:c8:
4b:c6:95:55:d4:f2:57:ab:bb:c2:09:28:02:6f:84:7c:4c:34:
a4:ff:92:2a:c5:1b:60:ee:58:cd:d8:a3:57:7a:d0:9c:cd:6e:
4b:11:aa:78:e7:4e:14:e1:22:b7:2f:96:fa:30:91:2d:48:fb:
56:e1:bd:bb:2f:65:11:72:1e:25:c6:ce:93:92:e2:79:53:96:
16:1d:2f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:08:24 2026 by rpki-client