Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F84BD59288B911F1B19ADFB3CE1D38B0.roa
File: F84BD59288B911F1B19ADFB3CE1D38B0.roa (raw, json)
Hash identifier: 3cIAQPETas0csoHNJGmJmOr5AkmqLMoklLFHPXY0kvs=
Subject key identifier: 9B:4C:58:F2:87:E7:22:38:E5:79:A5:01:62:6C:C7:4F:F0:EF:D7:92
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DB44
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F84BD59288B911F1B19ADFB3CE1D38B0.roa
Signing time: Sun 26 Jul 2026 06:19:34 +0000
ROA not before: Sun 26 Jul 2026 06:19:30 +0000
ROA not after: Fri 28 Aug 2026 06:19:30 +0000
asID: 197574
IP address blocks: 154.83.129.0/24 maxlen: 24
154.83.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121668 (0x1db44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 26 06:19:30 2026 GMT
Not After : Aug 28 06:19:30 2026 GMT
Subject: CN=6a65a6f6-451f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:8e:0b:78:ed:52:f4:7b:f4:6e:48:d5:64:ff:
f6:84:ac:b0:0a:6b:f3:08:bf:88:c3:2e:90:42:6b:
42:b0:d8:c1:e3:88:c2:d8:bc:33:ce:47:0e:b5:ca:
2f:b3:25:82:1c:90:b2:13:1f:2f:d3:82:ba:59:5d:
88:9f:11:ff:5b:6d:98:d1:6c:02:ac:c7:63:a2:60:
3b:f2:35:b2:9a:34:2d:bd:57:65:03:26:37:18:80:
9f:4c:35:c7:f3:eb:98:3d:18:0f:39:75:ec:1f:12:
82:c9:97:67:a2:bc:e0:8d:26:2b:14:9d:e2:9f:b8:
df:31:91:25:19:8f:1a:97:29:21:af:d4:1e:23:4b:
cf:0b:31:37:6b:49:f9:76:ff:39:04:c5:af:22:ad:
d7:87:df:40:8e:b0:63:be:11:de:59:7c:ec:d5:06:
05:51:85:63:e6:fb:8a:41:9f:58:10:6a:08:c9:1f:
2b:c2:47:97:64:26:31:aa:55:45:cb:d0:15:a2:54:
92:38:99:b4:c1:82:3a:aa:39:13:5f:96:76:ab:ad:
a0:22:e3:de:ba:c4:80:60:41:7f:43:c3:97:20:c3:
fd:00:7c:5a:39:91:fa:31:67:27:e5:34:36:d5:4e:
54:14:e8:a4:70:53:72:05:e4:b3:41:13:bf:33:1a:
5c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4C:58:F2:87:E7:22:38:E5:79:A5:01:62:6C:C7:4F:F0:EF:D7:92
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F84BD59288B911F1B19ADFB3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.129.0/24
154.83.208.0/24
Signature Algorithm: sha256WithRSAEncryption
64:ad:e7:ac:28:28:e9:f2:cd:01:8e:b2:4b:73:87:94:ca:c8:
9c:76:62:87:e9:5e:28:92:31:d6:c1:66:c2:ba:ee:c0:14:3e:
2c:a7:5e:f4:6d:61:f5:06:6d:0b:86:b4:0a:78:2e:29:39:80:
ff:a7:5d:29:d0:40:d9:a2:da:d3:a8:f7:01:a6:5d:49:c2:57:
6e:74:10:35:e6:95:ca:96:1b:b6:cd:df:8a:a7:5c:d1:ef:9d:
d3:29:d2:43:23:26:2e:0c:97:07:f9:64:fb:f4:2f:c2:c9:b0:
c7:d6:1d:b5:31:41:6a:6d:02:d2:6b:36:13:a1:c2:b2:c5:c1:
e1:f8:4d:d5:79:73:80:90:5a:a3:9b:2e:d5:4a:e8:df:7a:da:
42:b5:b5:f8:c6:05:4c:86:99:1a:61:3e:3c:40:4f:05:03:0b:
db:29:e7:c3:a6:9c:b5:80:db:ce:d6:5d:e2:bb:82:c1:b8:ab:
a6:2f:f8:62:a2:bf:f6:72:11:22:31:30:fa:bb:83:14:2a:5a:
69:0a:aa:75:89:8f:40:91:5c:ef:25:32:41:1f:57:de:da:ab:
7f:d2:4c:ff:b4:c4:55:70:ba:e4:46:78:41:d2:69:95:1d:5c:
d8:51:ce:c2:8f:5e:23:39:f4:67:0c:9a:88:65:f2:be:f8:56:
10:f9:fc:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:08:23 2026 by rpki-client