Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B6FD33875CC11F19BB4D1F2CE1D38B0.roa
File: 3B6FD33875CC11F19BB4D1F2CE1D38B0.roa (raw, json)
Hash identifier: 0dqYmZse+SDahIZNQCjLYLMdU6KGjBw921eyU8921d4=
Subject key identifier: 0B:BA:C8:6B:83:0C:A6:84:8C:46:F8:22:0D:C2:2D:94:49:E9:70:70
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D662
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B6FD33875CC11F19BB4D1F2CE1D38B0.roa
Signing time: Thu 02 Jul 2026 04:12:26 +0000
ROA not before: Thu 02 Jul 2026 04:12:21 +0000
ROA not after: Sat 25 Jul 2026 04:12:21 +0000
asID: 401783
IP address blocks: 154.81.160.0/24 maxlen: 24
154.81.162.0/24 maxlen: 24
154.81.165.0/24 maxlen: 24
154.81.167.0/24 maxlen: 24
154.81.168.0/24 maxlen: 24
154.81.169.0/24 maxlen: 24
154.81.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:08:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120418 (0x1d662)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 2 04:12:21 2026 GMT
Not After : Jul 25 04:12:21 2026 GMT
Subject: CN=6a45e52a-0e56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2e:0a:15:52:e8:0a:9b:d0:74:2a:98:c3:10:
7c:61:df:0a:79:32:28:d0:16:fc:c3:45:33:97:2a:
53:21:49:9c:6d:c5:2e:41:99:d8:b2:b6:19:16:1e:
b9:f0:d3:94:1e:fb:40:8d:64:14:55:99:e6:28:65:
52:d3:75:02:0c:3c:b0:d1:52:33:ab:9c:39:fb:6f:
43:84:12:cf:d6:24:4d:be:e4:76:a0:ae:eb:19:0b:
43:fd:0d:20:66:a6:51:4f:11:ea:36:1b:63:c7:2f:
76:a0:04:39:95:c4:f4:bd:f6:ad:f5:59:b7:46:bc:
44:b4:b6:ef:6e:53:9c:fc:40:db:11:7b:ff:75:bc:
63:56:a2:65:02:af:a9:99:ee:08:ac:aa:bb:fa:f0:
fb:ef:7d:ae:ef:e8:a1:e2:78:5a:09:4d:92:ae:aa:
c9:aa:44:c8:ab:e5:c7:4f:e3:33:eb:02:c2:8a:87:
62:86:7a:bf:99:fe:59:b8:64:d4:6c:67:59:f1:fb:
cc:08:37:e3:54:31:0e:55:01:d0:cd:80:51:6d:35:
62:94:70:8f:b6:65:1f:f4:ca:5a:a3:4f:f4:45:0f:
2c:c3:df:c0:17:70:91:1c:08:d3:7e:6c:d1:68:10:
ed:53:78:51:0f:81:d6:5c:6b:9d:43:66:e5:c4:fb:
0c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:BA:C8:6B:83:0C:A6:84:8C:46:F8:22:0D:C2:2D:94:49:E9:70:70
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B6FD33875CC11F19BB4D1F2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.160.0/24
154.81.162.0/24
154.81.165.0/24
154.81.167.0-154.81.169.255
154.81.171.0/24
Signature Algorithm: sha256WithRSAEncryption
80:72:a8:14:0a:49:a5:a9:63:dd:10:be:9e:03:8a:ca:d6:df:
3f:bb:03:23:91:f4:12:b8:b0:d1:21:24:11:81:40:b8:79:a5:
50:4b:4c:60:8f:e3:7a:b9:8b:69:2d:7d:ba:62:d4:3d:a9:72:
ed:30:09:af:62:5b:19:a4:19:92:53:de:eb:0f:98:9b:e6:7d:
79:a9:97:3c:02:5f:c8:ac:04:1c:01:b3:f9:a1:ad:62:ba:6c:
43:38:79:2f:f2:ae:c8:09:69:37:50:3a:85:5f:e6:a8:fa:d9:
40:73:2d:ce:01:12:4b:74:3e:5f:70:be:d4:f6:4a:af:e1:ae:
a8:c8:d8:d6:d1:4b:89:93:f1:cf:39:81:ff:21:20:db:e6:56:
0f:82:2c:e7:d1:4c:a6:45:37:26:5d:da:17:5a:5c:4d:73:10:
e4:55:5e:e4:80:b4:a6:b3:d5:18:fa:3a:93:a1:2c:b0:a2:ab:
bd:1b:48:e7:c0:50:ff:d6:77:12:66:13:bf:41:ba:56:44:5e:
30:aa:a2:1e:7d:95:18:25:8d:2d:67:8f:66:d1:47:ab:94:cc:
f6:ad:df:8c:63:e0:0a:fa:da:9e:94:cb:13:da:d7:ec:6e:45:
cd:2c:b9:a6:19:d3:bc:38:9a:11:64:c3:68:01:9b:47:e4:cc:
d2:16:e4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:43:13 2026 by rpki-client