Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/006D8FC4716B11F188D339CDCE1D38B0.roa
File: 006D8FC4716B11F188D339CDCE1D38B0.roa (raw, json)
Hash identifier: P5qWH0CdWSJbnhgcSemqSt6q6hmIoNoqZUKGVBGJok4=
Subject key identifier: E9:35:E1:95:8B:4B:8F:1B:D1:55:27:22:82:C8:A3:95:23:C6:25:24
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D569
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/006D8FC4716B11F188D339CDCE1D38B0.roa
Signing time: Fri 26 Jun 2026 14:26:21 +0000
ROA not before: Fri 26 Jun 2026 14:26:16 +0000
ROA not after: Thu 30 Jul 2026 14:26:16 +0000
asID: 401783
IP address blocks: 154.82.153.0/24 maxlen: 24
154.82.196.0/24 maxlen: 24
154.82.197.0/24 maxlen: 24
154.82.198.0/24 maxlen: 24
154.82.199.0/24 maxlen: 24
154.83.67.0/24 maxlen: 24
154.89.132.0/24 maxlen: 24
154.90.65.0/24 maxlen: 24
154.90.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:08:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120169 (0x1d569)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 26 14:26:16 2026 GMT
Not After : Jul 30 14:26:16 2026 GMT
Subject: CN=6a3e8c0d-dee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d9:1f:2d:b7:ff:49:8d:cf:86:b1:e8:99:e5:
76:66:b2:3b:65:72:cb:8c:07:88:1c:10:5c:61:44:
f6:be:2f:6a:8e:08:54:9c:5e:97:ec:3d:cb:ca:fa:
13:04:3d:4b:0e:c1:b2:88:b4:2b:50:43:46:88:97:
a4:8f:ea:f6:e3:66:1e:19:55:bb:7c:bc:fb:2d:e5:
16:3a:23:c2:49:c3:6e:8d:4b:d4:48:0c:97:63:54:
1c:6b:32:cf:2b:10:e0:8c:68:94:e4:e3:c0:16:40:
66:04:04:38:46:f2:a4:ae:5b:0c:c9:ed:88:87:d3:
91:15:1c:a2:14:96:07:a9:18:de:2a:bf:e7:8a:1f:
02:f9:41:85:4f:ca:1c:cc:bd:1b:53:5d:a4:dd:cc:
63:36:04:df:66:e1:83:77:2e:95:f9:77:9c:26:01:
86:be:6e:80:05:3f:8f:1a:e3:57:58:00:b7:96:5d:
0a:cc:76:eb:bc:92:c1:79:14:77:1e:be:bb:25:cc:
82:81:ab:89:c0:94:36:79:b5:b6:35:fb:9d:00:b9:
e9:19:7a:54:1f:0c:1a:ee:f1:85:ca:64:93:aa:c1:
02:5c:eb:64:12:32:bb:61:b0:40:cf:c9:ac:27:12:
39:7e:2a:c4:dc:be:69:f2:10:b7:7a:ca:ea:6d:19:
c6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:35:E1:95:8B:4B:8F:1B:D1:55:27:22:82:C8:A3:95:23:C6:25:24
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/006D8FC4716B11F188D339CDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.153.0/24
154.82.196.0/22
154.83.67.0/24
154.89.132.0/24
154.90.65.0/24
154.90.67.0/24
Signature Algorithm: sha256WithRSAEncryption
09:1d:51:d0:a6:62:a0:a1:ea:4f:ed:5f:80:f1:ff:ff:20:29:
a2:e8:3d:ff:53:09:1b:9a:36:2f:da:60:ea:d1:a8:f0:cc:2f:
16:d4:cc:43:86:64:03:7e:62:e4:17:4b:af:f2:c4:0c:a0:ae:
41:8a:f2:71:1a:9e:b2:2f:b9:31:05:6a:3b:22:98:b2:63:3d:
ec:47:e9:cd:0a:d4:d5:9e:0d:ea:80:3c:46:aa:03:3c:0f:ef:
34:56:ef:17:89:cb:1a:ce:23:2a:5f:3c:ec:1f:0a:bb:1a:cc:
6a:1c:b5:94:ec:2e:74:81:05:74:91:ad:56:86:cc:a2:51:23:
2b:6a:b8:fd:79:f9:4d:c4:bd:07:e4:21:36:f5:30:47:12:3e:
3c:1d:79:eb:b6:7e:b9:1a:8d:2b:44:ab:f7:b5:53:1e:ab:c2:
a8:eb:06:67:9f:5f:7b:e2:c6:a0:ce:0c:db:b5:d0:98:8c:bb:
34:7c:2b:13:ea:c5:b1:0a:64:97:9e:3a:ce:05:0e:df:fd:4b:
b8:c1:41:82:c8:f4:43:8b:2f:03:f3:ac:86:bf:62:a2:72:48:
8c:dc:c6:ee:ef:73:1a:f7:5f:3a:95:21:c3:29:77:80:47:96:
7c:22:72:7b:4b:ff:b2:f8:72:af:df:e8:7a:01:1f:2c:58:29:
52:96:5f:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:43:09 2026 by rpki-client