Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F35D9A8688C111F19154EAE1CE1D38B0.roa
File: F35D9A8688C111F19154EAE1CE1D38B0.roa (raw, json)
Hash identifier: xGlnkpGPN+kpfdEhtUQNNL3pczPBQxSjiKuYm8Xiid8=
Subject key identifier: 3C:72:A7:31:C6:EC:F0:DC:F2:E6:C6:40:E3:14:F7:3D:2A:37:9A:8D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DB4A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F35D9A8688C111F19154EAE1CE1D38B0.roa
Signing time: Sun 26 Jul 2026 07:16:42 +0000
ROA not before: Sun 26 Jul 2026 07:16:38 +0000
ROA not after: Fri 04 Sep 2026 07:16:38 +0000
asID: 213169
IP address blocks: 154.94.48.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121674 (0x1db4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 26 07:16:38 2026 GMT
Not After : Sep 4 07:16:38 2026 GMT
Subject: CN=6a65b45a-635c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:01:4d:3b:fd:cc:df:e7:63:de:8f:f3:6d:c5:
cf:66:1b:d4:9c:d1:c0:c0:74:19:42:e8:86:20:d6:
a4:08:07:1b:05:12:17:98:87:40:c6:db:36:3d:dd:
6e:c5:de:84:9d:c5:17:c5:24:97:41:44:01:d5:fc:
67:b7:11:a5:d6:c1:71:f6:58:61:8e:e5:33:1a:fe:
46:0e:73:51:34:02:b4:a9:a4:4e:da:65:91:a8:a7:
21:d4:ca:4c:44:ac:04:1b:14:10:1f:99:a8:ac:10:
38:13:8f:05:76:3c:33:ee:6a:1b:09:5a:a1:1d:bd:
f0:04:2b:59:7e:14:56:3b:dc:a8:7e:fc:28:26:e6:
02:3f:98:60:d4:62:73:9f:d2:02:aa:4e:2d:76:00:
61:6c:28:0f:29:f5:82:99:6c:c1:4f:b0:c7:f3:1c:
5e:8e:26:14:53:ea:80:74:e4:70:23:b2:1e:c0:69:
5f:5a:53:fd:b2:ff:87:8d:df:a9:84:d8:81:53:75:
53:c6:af:96:aa:f4:85:65:39:70:d7:b1:61:b0:d3:
44:59:0a:b5:a3:6b:3c:ab:f2:d7:99:dc:ee:e3:bc:
e3:a2:cb:19:2a:62:49:09:8e:7c:3a:ae:52:2d:00:
7b:97:19:65:ba:c6:77:f3:cf:69:cf:be:1a:9e:ed:
62:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:72:A7:31:C6:EC:F0:DC:F2:E6:C6:40:E3:14:F7:3D:2A:37:9A:8D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F35D9A8688C111F19154EAE1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.48.0/23
Signature Algorithm: sha256WithRSAEncryption
98:03:9f:da:e7:64:da:6f:23:8e:27:25:0a:d5:ad:7d:43:28:
28:c0:80:ad:cd:88:3f:6c:3b:2a:59:86:5f:3b:2f:e0:13:df:
1e:57:83:0d:3e:1d:40:16:d7:cb:34:2f:6a:86:ab:24:e4:72:
b9:c4:5a:9a:c8:22:82:4b:e9:b2:38:9a:b4:0a:34:20:c0:2c:
4c:ea:e7:82:83:e4:ae:79:b9:03:ba:7b:88:05:c9:2e:1a:83:
00:c8:74:b4:fe:bd:6f:02:03:ed:ac:58:70:7e:97:cf:0c:95:
8e:e4:78:2a:f0:99:05:22:95:03:bd:18:12:a9:13:d6:56:b6:
10:dc:3e:a6:bb:c7:80:3b:bc:47:97:62:e1:34:61:b7:54:51:
f4:03:3d:35:03:27:21:4c:58:6b:a8:51:92:8f:8a:81:fd:05:
06:10:42:23:be:6e:34:9e:6d:c8:b0:89:f1:7d:3b:6c:72:28:
59:34:2c:e7:1b:8c:05:a1:e9:c0:65:0a:44:a2:ed:0a:00:b6:
fa:5f:c2:92:84:26:9b:5d:ed:a4:20:0a:6c:7a:c7:fd:25:83:
62:0b:87:30:9a:5c:9c:77:97:bd:e0:80:ed:76:94:db:9f:bc:
87:7b:8c:ca:d8:23:63:cf:50:03:e6:d2:d0:bf:13:0f:7b:42:
20:d6:4e:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:08:51 2026 by rpki-client