Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92E3C3F088B811F1BAF1A5ACCE1D38B0.roa
File: 92E3C3F088B811F1BAF1A5ACCE1D38B0.roa (raw, json)
Hash identifier: IsbW7Ln3lQHPnV9SlHIC2JXo0wkK1Q5bIyFUEAMYgHQ=
Subject key identifier: DD:0B:32:5B:8F:84:98:6D:23:62:37:AB:C0:8B:C6:DD:34:D4:B1:D9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DB42
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92E3C3F088B811F1BAF1A5ACCE1D38B0.roa
Signing time: Sun 26 Jul 2026 06:09:35 +0000
ROA not before: Sun 26 Jul 2026 06:09:28 +0000
ROA not after: Thu 27 Aug 2026 06:09:28 +0000
asID: 147176
IP address blocks: 154.83.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121666 (0x1db42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 26 06:09:28 2026 GMT
Not After : Aug 27 06:09:28 2026 GMT
Subject: CN=6a65a49f-ee7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d2:22:3d:66:71:65:0d:ff:b7:20:b1:4e:1a:
a0:c9:0b:a1:2d:03:4f:d5:a1:4d:06:5f:36:04:71:
37:ff:8f:4c:04:20:ea:35:2f:b9:e3:b4:f0:b8:30:
c6:8a:1c:11:aa:59:5d:bc:16:fc:5d:5a:a5:f9:8c:
91:47:48:10:55:3b:3b:59:48:88:71:d4:7f:f8:38:
4f:ee:aa:f4:c7:fb:f1:86:1a:dc:b9:a6:d5:9f:79:
87:d2:20:3d:b3:40:c7:44:36:48:e0:23:cd:b6:f1:
eb:55:48:89:6b:0e:0a:17:f0:10:1d:40:b3:02:47:
1a:02:96:df:31:b4:c5:44:ff:87:cc:5c:8e:e0:d9:
fc:e8:3e:34:03:29:a7:cf:16:81:04:9d:38:6a:65:
b2:f9:1e:2f:3a:94:5d:3f:0e:4c:c2:c8:ff:57:fc:
1d:e0:91:0e:24:0b:34:66:63:9a:bb:0d:5c:e7:a7:
88:e0:a2:42:7a:25:0d:8e:92:7f:aa:73:65:f5:50:
5d:77:d5:7b:5a:f2:8d:11:13:49:2c:ee:99:81:c7:
65:9b:12:13:a3:7f:2e:0a:9f:4c:ff:0b:89:7a:a2:
2b:cf:c3:7c:8e:c8:17:81:f9:ae:76:4e:99:16:de:
c2:67:81:2b:0a:61:b3:38:88:e8:a2:c7:66:6b:76:
12:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:0B:32:5B:8F:84:98:6D:23:62:37:AB:C0:8B:C6:DD:34:D4:B1:D9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92E3C3F088B811F1BAF1A5ACCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.25.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:e4:9b:51:0f:a5:fc:a2:a5:49:6a:12:7b:cb:c0:7c:e6:19:
7f:e7:b1:de:c1:03:1e:44:42:bb:aa:f4:e8:68:64:3a:b9:d1:
9e:f4:1c:67:8c:a9:b2:ae:62:1c:2e:22:83:7e:7d:84:c9:a4:
5b:43:58:9b:7d:8e:17:0f:6b:9e:45:1c:82:68:49:26:70:82:
f8:be:46:c7:bf:7d:0f:6f:ca:5e:2d:c7:cb:69:2d:38:c4:15:
ea:1a:80:77:6f:6f:1d:e7:88:32:68:8a:fe:a5:a8:e1:f4:33:
d6:e7:48:70:73:5b:20:84:e6:d2:92:9b:91:4c:32:ed:08:b6:
2f:76:fa:42:81:5c:42:e7:d2:b7:f5:b1:5a:53:65:04:73:5e:
60:11:0a:1d:6d:66:90:2c:cd:db:91:85:f0:67:55:8c:17:c3:
fb:53:c6:cd:33:f5:c9:56:2b:b7:8b:9d:13:c0:87:a8:34:90:
d5:8b:bb:b5:c6:54:d8:b7:f7:d3:82:fb:de:21:17:9d:67:b8:
96:24:54:51:59:69:06:7f:49:16:8a:ff:98:fc:b1:8e:b5:3d:
21:d8:ca:93:77:c2:eb:16:53:12:e5:56:3a:74:71:41:98:db:
2c:af:6f:11:e6:c7:3e:a1:b5:f0:cf:dc:2f:27:ba:c0:f2:70:
de:6a:59:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:55:15 2026 by rpki-client