Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF8198A08A4D11F1AB1169D3CE1D38B0.roa
File: CF8198A08A4D11F1AB1169D3CE1D38B0.roa (raw, json)
Hash identifier: jhavQ2U2szGlh41/wsvW+ZJGOs6JlmJfw0KNOKz7ohw=
Subject key identifier: 70:1E:0B:11:56:6F:A1:C5:AC:43:8E:CE:39:E8:28:14:64:CC:AA:90
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DB8E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF8198A08A4D11F1AB1169D3CE1D38B0.roa
Signing time: Tue 28 Jul 2026 06:30:23 +0000
ROA not before: Tue 28 Jul 2026 06:30:19 +0000
ROA not after: Wed 02 Sep 2026 06:30:19 +0000
asID: 209242
IP address blocks: 154.206.12.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121742 (0x1db8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 28 06:30:19 2026 GMT
Not After : Sep 2 06:30:19 2026 GMT
Subject: CN=6a684c7f-018a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ba:3e:39:cd:07:d9:59:78:4a:20:80:4f:1a:
ac:ad:5c:84:c1:5a:39:ad:4d:46:2b:2c:77:95:9f:
d5:16:90:0b:3e:34:63:7c:57:8f:6f:48:40:e2:d0:
47:4f:71:d2:47:70:5f:37:d1:87:8d:d4:96:1b:0a:
16:48:6f:a4:f3:97:5c:4a:a9:e1:77:fc:5c:cf:9d:
31:12:43:8f:40:70:8b:89:a5:bc:95:97:7d:da:df:
b1:7d:79:cd:90:f5:2a:36:0f:d1:79:35:69:47:f9:
d7:5e:2c:df:3b:60:f8:83:fb:da:12:be:73:4c:3b:
6d:93:e0:b2:2f:47:d7:d0:a9:cd:bc:51:e4:b9:bb:
70:61:4f:61:eb:d2:13:eb:5b:59:ae:51:ca:ba:90:
bf:f9:26:ff:be:50:2c:55:2b:e7:23:f1:1e:f5:73:
d3:dc:f8:6a:cd:3d:b8:d3:7b:dd:51:66:e4:a8:5a:
36:17:11:cc:3e:d6:96:ec:6b:83:0e:f0:f4:6e:18:
07:18:da:85:eb:f8:5b:97:2a:99:a9:7d:53:2a:e5:
0c:a7:ac:d2:92:64:84:26:cb:42:b3:2d:a1:e9:45:
5c:46:5a:77:38:2e:86:48:65:a7:5b:39:9f:e3:cf:
5f:69:6b:6b:3e:bd:7c:5e:0e:26:67:ab:e2:e9:40:
92:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:1E:0B:11:56:6F:A1:C5:AC:43:8E:CE:39:E8:28:14:64:CC:AA:90
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF8198A08A4D11F1AB1169D3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.12.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:e3:69:34:86:1e:07:ae:c0:b9:0b:a0:27:50:6c:39:86:49:
40:51:cf:47:ef:52:8a:36:56:55:87:6d:c2:d7:c8:31:95:c0:
74:11:a9:d5:da:5b:44:88:ec:13:89:cf:f1:78:ec:d3:03:3c:
a8:dd:0a:5c:b4:c2:74:42:55:bc:57:b5:be:a1:5e:20:f0:72:
04:70:e9:a6:53:10:2f:fe:27:4f:53:4a:a9:e1:10:d9:e9:91:
fe:f8:6e:e7:c4:cf:2f:aa:63:a2:43:f8:40:a5:1c:0d:f4:7a:
f7:68:69:4c:7d:0f:27:ba:d7:be:fc:35:7d:7b:9f:93:53:df:
0e:36:68:49:a0:a9:6c:32:a4:af:ec:5c:5d:02:2c:a7:82:4e:
68:0b:3b:2e:77:2c:f6:ab:ec:c0:01:ba:d3:4a:62:0d:25:69:
8f:67:3a:bb:7a:ce:a4:35:df:fd:04:d6:b8:ca:4c:4f:da:3b:
8b:1e:5d:67:22:5a:fc:e0:80:1d:fe:0c:5b:7b:ba:cd:e4:b0:
0e:95:1b:6e:12:4a:a8:2b:05:1b:1c:70:1a:58:e5:23:db:bf:
3f:81:ca:3e:5c:e6:16:bd:41:dc:6f:33:20:ed:c8:d8:ee:06:
0e:a2:7b:db:b9:9b:09:62:30:59:24:7b:3c:d6:fa:25:d3:ba:
d1:ea:17:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:43:08 2026 by rpki-client