Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59AA7388738F11F1BB77A6DBCE1D38B0.roa
File: 59AA7388738F11F1BB77A6DBCE1D38B0.roa (raw, json)
Hash identifier: 2hiul9jBuPDdILsNbl6I+LksGYDcoPCxSIqgMKyESpQ=
Subject key identifier: FF:22:A3:4B:87:4D:DE:CC:C9:C6:E4:B5:6A:00:EC:D4:38:C5:80:99
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D5DE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59AA7388738F11F1BB77A6DBCE1D38B0.roa
Signing time: Mon 29 Jun 2026 07:51:35 +0000
ROA not before: Mon 29 Jun 2026 07:51:29 +0000
ROA not after: Thu 06 Aug 2026 07:51:29 +0000
asID: 44559
IP address blocks: 154.209.140.0/24 maxlen: 24
154.209.141.0/24 maxlen: 24
154.209.142.0/24 maxlen: 24
154.209.143.0/24 maxlen: 24
154.209.147.0/24 maxlen: 24
154.209.149.0/24 maxlen: 24
154.209.150.0/24 maxlen: 24
154.209.151.0/24 maxlen: 24
154.209.156.0/24 maxlen: 24
154.209.159.0/24 maxlen: 24
154.209.192.0/24 maxlen: 24
154.209.193.0/24 maxlen: 24
154.209.194.0/24 maxlen: 24
154.209.197.0/24 maxlen: 24
154.209.198.0/24 maxlen: 24
154.209.199.0/24 maxlen: 24
154.209.200.0/24 maxlen: 24
154.209.201.0/24 maxlen: 24
154.209.202.0/24 maxlen: 24
154.209.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 12:38:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120286 (0x1d5de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 29 07:51:29 2026 GMT
Not After : Aug 6 07:51:29 2026 GMT
Subject: CN=6a422407-db1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:eb:32:f5:33:28:24:97:b4:b5:3c:59:9b:bc:
51:7d:ac:62:aa:28:69:bb:14:67:bc:10:f9:21:37:
0f:00:73:e6:70:e0:b4:ed:35:f8:42:50:4f:ed:00:
bf:03:83:b1:3b:62:02:93:9c:b0:d0:51:21:71:1b:
11:67:9f:60:db:37:ad:7e:81:e6:4d:08:86:e4:2d:
ba:ed:06:bd:6f:4d:db:e5:a9:52:e7:e1:6b:d5:18:
8d:c6:d8:25:f9:a1:92:d2:a9:a9:71:65:d4:77:0d:
e3:15:92:8d:08:5a:08:11:bd:7c:5d:65:4b:15:e4:
0d:7f:ec:dd:aa:a1:5e:81:ae:8d:8c:52:8e:c7:89:
ff:be:28:ec:dc:41:9c:a2:2d:dc:9f:d6:52:ea:2b:
cd:35:3b:f3:fa:ad:99:36:27:3e:ba:e0:ce:a4:06:
e8:b5:5f:4a:2a:4e:fb:60:3f:22:75:e0:47:cd:7e:
0a:ce:f6:5e:e1:e1:e2:b5:f4:f3:f2:cf:d6:0d:d7:
8d:99:33:d7:82:32:d1:d3:15:48:06:eb:da:30:bf:
7b:8e:d9:df:3f:98:32:5e:29:0f:6e:94:e1:63:28:
b2:31:71:cd:12:cb:6f:fb:a5:bc:b2:cc:50:a4:26:
3d:dc:5d:80:5c:ca:c0:a4:24:6a:df:d4:10:7e:0b:
2a:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:22:A3:4B:87:4D:DE:CC:C9:C6:E4:B5:6A:00:EC:D4:38:C5:80:99
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/59AA7388738F11F1BB77A6DBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.140.0/22
154.209.147.0/24
154.209.149.0-154.209.151.255
154.209.156.0/24
154.209.159.0/24
154.209.192.0-154.209.194.255
154.209.197.0-154.209.203.255
Signature Algorithm: sha256WithRSAEncryption
a3:d9:98:0f:d5:0a:ff:12:2b:73:4b:d3:3e:49:44:60:aa:bc:
63:42:84:ec:d7:c3:29:8a:23:1b:b1:52:87:b3:9f:98:d0:fb:
7c:9b:fa:df:69:df:84:a6:0e:0a:e8:1b:42:ef:b9:da:a1:7d:
e5:dd:b1:3c:6b:b3:6e:4a:01:0e:55:48:ea:d2:0b:d2:2a:55:
d3:41:b6:63:27:5b:5a:31:cf:84:f2:8b:c6:52:c2:53:57:2f:
c2:b8:90:61:19:78:a0:e5:1e:bd:b1:c9:08:8e:cf:b6:74:5c:
9b:94:26:a3:f8:21:4c:4d:b9:a0:a2:fb:b3:25:ef:c3:2f:e4:
69:c9:e6:c3:19:5a:9b:bc:62:bf:c8:1b:8c:3c:bb:fb:0f:66:
4b:4b:fd:2e:ae:52:b7:65:4d:06:44:4f:ba:0c:4a:0d:a0:36:
60:5c:72:c8:a6:97:9e:57:2b:97:c0:42:6f:c4:40:24:8c:24:
a8:f7:0b:f0:ea:f4:63:1b:e2:5e:fe:00:44:84:da:01:ee:ee:
cd:97:c6:bd:cf:09:e8:2e:f2:59:35:83:0f:3f:39:29:8c:c4:
8a:91:96:a2:5c:d6:80:d7:46:46:d3:cc:aa:57:c4:d0:99:29:
b2:45:a5:dc:a8:b1:55:0e:6a:21:03:f1:00:28:61:cd:85:21:
4f:c9:ef:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:01:44 2026 by rpki-client