Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8342352880911F1859BD0FACE1D38B0.roa
File: B8342352880911F1859BD0FACE1D38B0.roa (raw, json)
Hash identifier: VTFzeDTw+j8DrFVnLCluQGd0XVqK8QAsP90549fpBdc=
Subject key identifier: 73:AF:58:68:51:52:D0:F6:CF:98:BA:94:CD:5E:12:E6:83:31:36:21
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DB3F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8342352880911F1859BD0FACE1D38B0.roa
Signing time: Sat 25 Jul 2026 09:17:55 +0000
ROA not before: Sat 25 Jul 2026 09:17:52 +0000
ROA not after: Tue 01 Sep 2026 09:17:52 +0000
asID: 9009
IP address blocks: 154.90.188.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121663 (0x1db3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 25 09:17:52 2026 GMT
Not After : Sep 1 09:17:52 2026 GMT
Subject: CN=6a647f43-ca96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5b:a4:b0:0f:b7:ef:7a:a8:80:90:d3:7c:a5:
7b:d3:46:2a:8f:da:e0:42:28:96:d2:71:de:b5:3c:
6c:14:8f:4c:9d:94:23:78:2b:a6:a8:bc:99:a2:13:
b8:47:7e:e4:34:61:20:a1:0a:11:fa:a2:be:06:6c:
0b:4f:46:6e:64:c9:7b:11:4a:82:83:d6:88:ca:18:
af:49:ab:42:2f:d8:c3:53:6a:b7:ee:8d:95:52:9c:
f0:0e:34:f2:59:29:e2:ca:10:0f:be:79:ed:cb:f4:
67:76:91:98:45:0d:2e:c4:08:99:82:75:76:5d:9f:
15:0e:d6:9a:9b:cb:be:df:4d:b6:1f:e6:94:f3:31:
be:c1:9a:62:3b:15:89:80:30:51:8e:de:88:bd:cb:
77:1c:fc:cd:ac:77:2e:c2:ec:f0:c1:d1:39:28:81:
92:73:61:92:15:bd:4a:3e:56:b5:c9:06:7e:d3:7d:
42:79:30:6b:21:f4:05:f5:3d:1f:36:c4:66:95:e1:
3d:fc:b5:39:a2:61:45:05:8c:c9:ee:94:1a:69:a5:
40:6d:e8:b7:c7:bc:0d:0f:41:c6:48:d3:f7:bb:44:
63:74:da:a3:e1:e1:2b:ed:11:1c:97:c9:1e:84:98:
49:0c:66:45:8c:35:05:50:6b:7e:b4:51:e8:45:f5:
51:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:AF:58:68:51:52:D0:F6:CF:98:BA:94:CD:5E:12:E6:83:31:36:21
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B8342352880911F1859BD0FACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.188.0/24
Signature Algorithm: sha256WithRSAEncryption
83:81:82:92:ec:c6:4d:99:a1:73:aa:f6:a8:81:7a:44:de:ad:
c6:e4:ef:24:9f:71:73:99:ac:ba:a0:8b:38:93:63:88:cf:26:
05:64:be:90:c3:6c:50:35:a0:6c:7c:0d:4b:04:99:04:cc:c1:
b9:33:0e:89:a3:a1:39:08:94:43:4c:96:6f:ce:d1:62:68:83:
3d:fd:5b:00:f4:b5:dc:66:a1:79:48:eb:e3:58:90:86:64:85:
92:f9:47:c4:6e:9b:7c:5e:14:58:b1:37:9c:b9:eb:c8:06:0d:
38:95:93:23:0c:d6:39:13:33:1a:45:4c:91:9a:be:f7:13:51:
c6:d0:5d:2d:84:b8:d3:f3:aa:86:78:39:47:4b:8b:d5:b8:94:
6f:35:86:ae:e3:8b:09:ee:b7:b7:57:67:e7:1f:bb:b9:ff:99:
6b:71:81:23:20:4a:68:33:13:b1:2d:4f:e4:c5:10:c1:ac:07:
8e:b8:ed:72:a2:94:79:9c:92:fe:97:46:76:45:6f:30:d4:f4:
15:1f:ac:60:dd:96:57:86:cf:b8:21:a3:f4:60:11:1b:ee:fc:
6a:71:65:2a:6d:46:68:18:a2:a3:26:64:eb:3b:07:0b:cf:32:
9a:db:ea:62:d8:e0:60:3e:2a:7c:2e:26:40:48:7e:03:ae:b9:
11:7d:a8:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:16:13 2026 by rpki-client