Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F738766510711F1BE4ECA19CF1D38B0.roa
File: 8F738766510711F1BE4ECA19CF1D38B0.roa (raw, json)
Hash identifier: Myb1X1fwgAaQiYWJ9nFwTbp1URJjsyvC6uGHZXu2mIE=
Subject key identifier: 71:A2:D3:22:22:BE:9F:01:65:E2:E9:5C:13:A5:FF:B4:EC:96:B4:44
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CBE3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F738766510711F1BE4ECA19CF1D38B0.roa
Signing time: Sat 16 May 2026 09:13:54 +0000
ROA not before: Sat 16 May 2026 09:13:49 +0000
ROA not after: Fri 21 Aug 2026 09:13:49 +0000
asID: 209242
IP address blocks: 154.198.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117731 (0x1cbe3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 16 09:13:49 2026 GMT
Not After : Aug 21 09:13:49 2026 GMT
Subject: CN=6a083552-6597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:ad:4d:e8:91:50:0d:86:12:0b:73:83:ac:a9:
60:c3:f7:ff:94:93:8a:36:b2:3c:57:d5:b0:e0:1f:
04:ef:7b:d8:e7:4b:29:75:b9:5e:b3:86:70:5d:eb:
40:81:b6:29:94:9d:50:de:1d:a0:54:5f:3f:02:3e:
7a:28:8c:70:23:74:45:e1:29:21:8b:52:b6:f5:f2:
c9:71:87:d5:80:82:7f:2e:b5:be:6f:ed:22:c2:87:
db:3e:fc:89:a0:7c:11:73:33:79:7b:c2:b3:a2:88:
40:58:1a:8e:dc:42:0a:0d:9b:f4:8c:f7:89:7c:43:
d2:7f:02:09:aa:36:01:be:05:59:62:86:09:57:2e:
30:ae:fb:5f:11:2e:36:91:88:7f:bd:b9:f1:f0:9e:
7f:ca:81:b3:a1:34:d4:e4:f5:47:ff:3c:19:58:67:
a9:e2:87:87:e1:20:e9:79:04:44:1c:7b:e6:74:06:
55:2a:f7:da:cf:af:8d:d5:2d:5a:9f:89:d3:0a:41:
c6:eb:f1:84:60:8f:59:45:7c:84:2a:c7:21:da:79:
5d:9d:3b:41:7b:b7:d8:57:4e:d6:b9:d8:b4:99:82:
a2:f6:c5:60:66:99:bc:dd:55:d2:60:4a:27:24:81:
f3:34:b3:4b:9d:31:46:f2:53:b0:bf:1d:9f:a4:82:
92:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A2:D3:22:22:BE:9F:01:65:E2:E9:5C:13:A5:FF:B4:EC:96:B4:44
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F738766510711F1BE4ECA19CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.173.0/24
Signature Algorithm: sha256WithRSAEncryption
94:2e:b6:5a:3e:9c:af:66:6a:e3:8f:ad:49:1a:69:c8:f3:ff:
89:5f:de:f4:ed:71:a1:55:6a:06:04:1b:f7:d5:06:05:30:59:
26:a4:8d:b7:ff:fc:7b:1c:a0:e4:c4:50:e7:d3:37:77:f9:f3:
ca:56:92:af:74:20:37:fe:a9:39:b4:f9:21:b2:ed:55:d5:16:
7e:0d:f7:a8:91:bf:1c:75:3a:b0:8d:75:e5:72:ab:7c:ec:cf:
4c:42:25:0d:7e:14:15:c9:ca:4e:ad:8a:51:c3:6f:29:37:19:
50:17:f0:5c:17:bc:92:fb:3a:33:8a:53:d0:9b:61:c7:4a:11:
ba:71:8d:a7:64:ca:98:38:fa:b4:25:e7:cf:68:12:00:0b:61:
74:4a:f5:8e:75:0c:fa:77:b8:d3:4d:0c:67:f8:9c:7c:bc:49:
cb:90:43:6a:98:2d:15:04:b5:31:eb:b0:b4:f8:61:29:01:49:
9f:81:65:23:11:86:de:4c:0a:bd:f8:5e:4e:8c:ed:19:86:dc:
42:90:08:63:85:0a:2c:0b:af:0a:9c:db:8e:4c:4e:60:01:00:
2d:a7:49:82:e9:30:45:53:00:78:77:30:7d:54:cf:0b:e5:f4:
f7:24:78:ea:0a:23:e0:74:bd:08:c2:99:61:2c:57:17:60:61:
a8:9c:b8:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:53:46 2026 by rpki-client