Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41D46FEC7FB611F1884766E8CE1D38B0.roa
File: 41D46FEC7FB611F1884766E8CE1D38B0.roa (raw, json)
Hash identifier: 2EnwufUh7SQX+O4wmwVFKSInriuphkBWK3J+0dVO8/0=
Subject key identifier: 7D:86:67:B8:86:98:00:5E:66:DF:0B:23:97:36:D6:78:E8:27:88:C3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D8F6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41D46FEC7FB611F1884766E8CE1D38B0.roa
Signing time: Tue 14 Jul 2026 19:00:19 +0000
ROA not before: Tue 14 Jul 2026 19:00:14 +0000
ROA not after: Fri 21 Aug 2026 19:00:14 +0000
asID: 214143
IP address blocks: 154.82.172.0/23 maxlen: 24
154.82.174.0/23 maxlen: 24
154.82.176.0/23 maxlen: 24
154.82.178.0/23 maxlen: 24
154.82.180.0/24 maxlen: 24
154.83.18.0/23 maxlen: 24
154.83.32.0/24 maxlen: 24
154.83.40.0/23 maxlen: 24
154.83.42.0/23 maxlen: 24
154.83.72.0/23 maxlen: 24
154.83.74.0/23 maxlen: 24
154.83.76.0/23 maxlen: 24
154.93.1.0/24 maxlen: 24
154.93.3.0/24 maxlen: 24
154.93.26.0/24 maxlen: 24
154.93.28.0/22 maxlen: 24
154.94.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Jul 2026 13:50:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121078 (0x1d8f6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 14 19:00:14 2026 GMT
Not After : Aug 21 19:00:14 2026 GMT
Subject: CN=6a568743-992c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a9:86:09:b6:0c:41:7c:18:0a:84:64:a1:e1:
b8:6f:59:ca:e3:e9:76:b8:b5:61:d2:b4:fc:1f:54:
56:70:8f:f4:44:47:eb:cd:5a:42:27:a0:25:30:c7:
e5:6b:3d:2c:18:8d:47:82:85:9d:f4:a2:5f:93:04:
c2:dc:2e:51:01:87:cf:f5:f8:e4:d3:ae:a4:8e:42:
c6:e0:ec:da:9e:93:cc:17:fa:cd:5f:f7:98:85:a3:
22:0a:3a:33:d2:4d:b0:64:b2:81:24:85:b6:2a:ae:
e1:2a:f9:0f:37:26:86:db:3f:03:a0:05:9b:7c:3e:
ff:40:e3:78:b2:40:45:4f:ea:04:cd:6c:6b:35:c1:
18:44:e8:6c:a4:3f:0f:43:66:3e:ce:e5:ad:8e:c7:
6c:ea:35:fb:c2:6e:6d:16:dc:80:d3:d4:e8:3c:88:
5f:5b:36:47:48:78:67:da:80:17:9e:57:e9:dc:49:
f1:0d:c7:68:f6:27:22:c6:2a:46:86:3e:82:27:bc:
86:17:b0:a0:09:dd:71:b9:1c:c6:5e:d2:c0:fd:6a:
3d:b2:eb:c8:17:7b:d4:8d:11:67:38:e3:6b:ed:88:
b3:e0:4d:a6:72:b0:e5:aa:31:2c:61:97:95:69:c7:
fb:47:5c:95:a8:a9:25:2e:55:4e:71:b0:82:f5:ec:
81:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:86:67:B8:86:98:00:5E:66:DF:0B:23:97:36:D6:78:E8:27:88:C3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41D46FEC7FB611F1884766E8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.172.0-154.82.180.255
154.83.18.0/23
154.83.32.0/24
154.83.40.0/22
154.83.72.0-154.83.77.255
154.93.1.0/24
154.93.3.0/24
154.93.26.0/24
154.93.28.0/22
154.94.35.0/24
Signature Algorithm: sha256WithRSAEncryption
27:b4:2b:0d:f5:f8:fd:3f:9e:cc:b5:31:39:26:61:4b:26:46:
a2:1c:af:4a:38:56:5a:d8:5e:75:d4:f2:09:20:40:34:91:5c:
73:e2:53:1a:7f:f0:2e:92:d3:b0:21:c5:c6:19:54:36:9a:ed:
15:4f:f5:ba:31:70:2f:30:dd:eb:97:f6:f5:7d:d4:4d:0c:49:
ef:ac:e6:f5:05:a2:bb:af:5d:29:94:f9:0f:f0:1b:04:35:92:
eb:f8:45:be:43:21:b4:bb:fd:94:41:ee:fb:aa:73:94:31:2e:
4e:9e:78:a5:b7:3c:44:a5:a6:11:4d:9d:cf:90:84:52:88:61:
15:f4:24:cb:28:5c:e0:1f:24:21:41:36:67:fd:d7:02:ef:81:
2a:2d:b1:ba:1d:68:6e:bf:23:ab:08:79:c2:de:86:45:fd:8c:
96:72:c3:82:c3:86:83:ad:1d:38:b0:42:64:db:9d:30:ac:c2:
02:e4:ec:fa:c6:ba:6f:8c:2a:18:0a:bf:41:4f:b3:7a:f7:42:
0a:5f:a9:0c:fc:51:ae:d1:d1:a0:84:86:6c:a0:99:91:7f:3e:
57:ca:e0:c6:60:0a:2a:ff:c2:7d:a7:b5:44:50:fc:b8:60:40:
14:90:e9:19:b3:17:17:c3:38:98:62:de:40:c1:0a:a2:51:f5:
c3:0c:0c:44
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jul 20 19:14:52 2026 by rpki-client