Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0351A94C8A6011F1B17C2CC1CE1D38B0.roa
File: 0351A94C8A6011F1B17C2CC1CE1D38B0.roa (raw, json)
Hash identifier: Fx6bJjzHu58AaIGjCiz7jbIFZp7Ze7MrCZI8bYkR5rE=
Subject key identifier: CA:DA:45:C9:9B:01:7E:C6:24:63:0A:13:1E:98:53:3D:2B:12:34:72
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DB96
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0351A94C8A6011F1B17C2CC1CE1D38B0.roa
Signing time: Tue 28 Jul 2026 08:40:40 +0000
ROA not before: Tue 28 Jul 2026 08:40:36 +0000
ROA not after: Wed 04 Aug 2027 08:40:36 +0000
asID: 274300
IP address blocks: 154.82.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121750 (0x1db96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 28 08:40:36 2026 GMT
Not After : Aug 4 08:40:36 2027 GMT
Subject: CN=6a686b08-621e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3b:66:3d:44:94:c7:52:bb:e3:42:74:92:88:
a8:10:a4:db:2d:91:9f:91:e1:cc:4c:60:13:40:ba:
2c:4e:67:27:a1:da:32:70:1e:02:6c:d3:85:5b:54:
a1:df:18:e0:87:ce:44:25:b2:d1:c1:f8:c7:cf:ed:
df:c2:cb:b8:f9:51:8b:dc:29:62:69:c4:5d:50:2c:
20:2c:1e:2f:2b:e6:b3:c4:57:78:f1:61:5f:71:87:
21:5b:a9:f7:0d:d8:07:0a:56:c9:0d:04:fa:1b:99:
3d:10:dd:c5:f2:1a:eb:70:6c:ee:03:fa:37:c3:f2:
92:5c:ff:a1:57:9c:3a:6a:84:c9:4e:51:c0:a2:ca:
d4:63:cc:2c:96:31:b7:62:1a:34:32:8c:f7:15:bb:
81:36:84:21:5a:2a:c7:b7:e0:bd:41:4f:be:19:e9:
cd:1b:35:23:99:f7:27:ec:e3:5a:b3:5d:3c:13:5a:
29:92:c8:ac:ec:46:5e:02:1b:dc:b1:be:6f:79:c7:
e8:d3:75:42:26:72:8b:a8:bb:96:2f:5d:a7:83:32:
7c:d1:9b:36:0d:41:3c:a2:b0:4d:fd:3f:b7:47:36:
32:22:e9:89:ae:a7:71:11:44:e9:d2:3a:2a:ba:4b:
d3:81:32:5b:41:72:76:46:fe:8e:04:13:71:4f:d2:
2e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:DA:45:C9:9B:01:7E:C6:24:63:0A:13:1E:98:53:3D:2B:12:34:72
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0351A94C8A6011F1B17C2CC1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.24.0/24
Signature Algorithm: sha256WithRSAEncryption
be:6d:53:18:f6:4c:5a:bb:90:ce:94:94:26:4b:d9:ae:8e:03:
64:ec:b5:45:a7:a1:d1:9e:52:f1:78:9a:8f:9b:88:35:92:3a:
66:95:0c:10:22:45:ef:bc:b3:51:82:b4:4f:a2:8f:8d:28:eb:
a3:9d:07:6f:0a:b6:ac:b3:8d:63:7e:f8:bc:f0:82:79:f4:2e:
b9:97:39:51:27:69:3d:d2:72:d3:50:85:0f:f1:84:b2:01:9f:
9e:e4:53:b0:ae:27:fd:60:24:4a:9c:c1:94:fc:af:25:7d:f7:
5b:e4:b9:ed:64:ba:ac:71:06:fc:f1:1c:ee:3a:ad:98:07:9b:
9d:3e:ea:32:43:e6:02:b6:bf:d2:5b:79:3a:fc:02:12:48:b4:
f4:6d:9f:a7:14:ff:9c:d8:35:70:07:0e:d3:e1:3c:6e:9c:58:
14:36:fc:4d:ad:7b:08:48:d8:93:24:e1:34:52:eb:68:76:d8:
b1:5e:9f:f8:54:0e:3c:0b:27:f4:0d:a9:af:b5:2e:dd:50:67:
51:05:c1:6a:84:02:cb:1b:d0:fd:76:d7:ef:5c:4b:ae:db:c2:
85:d9:ac:25:8e:cc:4d:be:d3:40:96:a0:65:4a:ba:ba:d2:6d:
13:5b:d5:ac:6e:df:79:88:ae:d3:e8:9f:cf:bb:40:15:79:d8:
6c:bf:89:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:58:58 2026 by rpki-client