Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6500A3F4707611F1A25EA802CF1D38B0.roa
File: 6500A3F4707611F1A25EA802CF1D38B0.roa (raw, json)
Hash identifier: IU4LHRFAAUWR+MxXzGbrOE4QVlVR2vuGeGrk7/5X5Js=
Subject key identifier: 77:B3:41:94:AD:0F:60:3B:B2:DD:7E:EB:5E:43:1B:3E:D8:D0:FC:C8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D524
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6500A3F4707611F1A25EA802CF1D38B0.roa
Signing time: Thu 25 Jun 2026 09:15:23 +0000
ROA not before: Thu 25 Jun 2026 09:15:18 +0000
ROA not after: Sat 01 Aug 2026 09:15:18 +0000
asID: 44559
IP address blocks: 154.81.41.0/24 maxlen: 24
154.81.42.0/24 maxlen: 24
154.81.43.0/24 maxlen: 24
154.81.44.0/24 maxlen: 24
154.81.45.0/24 maxlen: 24
154.81.46.0/24 maxlen: 24
154.81.47.0/24 maxlen: 24
154.81.52.0/24 maxlen: 24
154.81.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 12:38:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120100 (0x1d524)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 25 09:15:18 2026 GMT
Not After : Aug 1 09:15:18 2026 GMT
Subject: CN=6a3cf1ab-d4d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:10:20:eb:72:54:2d:c7:4b:b5:51:85:ba:f1:
2f:a6:7d:db:cb:20:0a:08:dd:29:6c:21:25:e6:34:
7b:cf:de:07:4b:60:a9:5a:25:0b:4b:d7:7a:10:37:
39:a3:c8:70:e7:66:95:52:74:48:99:2d:25:bc:67:
92:1a:f2:a5:ef:34:37:55:66:cb:2b:f6:4d:e3:4a:
99:0e:ef:28:ac:a9:c2:3b:be:43:c4:36:4e:94:bd:
a3:96:fc:94:4c:21:72:79:56:e5:03:3f:0c:10:76:
0d:34:2d:0b:fa:8a:b0:2a:cb:ce:38:4b:f9:e1:e4:
9c:88:2b:64:9a:c3:89:b4:bc:15:fa:69:09:5b:91:
5a:13:29:3e:42:19:83:46:ed:dc:0a:45:01:c8:9d:
f1:9e:09:cf:e0:3f:fc:1a:9c:65:8d:d9:9c:7f:a3:
53:4d:fd:1d:a6:46:cc:b7:7a:5c:db:b7:3b:11:fa:
ba:38:05:52:5c:7b:ad:df:8a:f9:0d:9c:3b:10:7e:
8c:64:e6:d3:9d:59:9a:f1:cb:06:d9:74:2d:ac:d1:
76:be:38:40:69:3d:45:1a:3c:7a:6b:d0:d7:5c:b0:
f5:d4:79:8e:ce:e3:d0:1c:2a:02:fa:db:e7:53:34:
9c:49:ce:df:cd:58:e3:77:cf:19:51:a2:4d:36:df:
57:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B3:41:94:AD:0F:60:3B:B2:DD:7E:EB:5E:43:1B:3E:D8:D0:FC:C8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6500A3F4707611F1A25EA802CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.41.0-154.81.47.255
154.81.52.0/24
154.81.194.0/24
Signature Algorithm: sha256WithRSAEncryption
cd:3d:c4:39:0f:d1:a0:14:7c:05:82:b3:4e:f8:89:7b:99:ab:
74:b3:f3:dc:d6:59:95:ec:c4:c0:a5:56:72:85:21:98:57:30:
80:06:71:cf:62:cd:33:f6:22:7d:0e:c4:4a:00:88:8d:9a:0e:
da:1a:9c:11:50:a0:b5:07:81:8b:95:28:5e:ac:91:45:a9:9f:
65:93:c0:68:8d:5d:4a:68:c1:94:71:1b:49:df:d6:2f:df:f8:
3e:62:98:2d:e6:c1:dd:2d:de:62:07:b2:4d:37:b0:c5:97:9e:
75:00:9c:d4:11:7b:53:51:a9:10:c2:22:a3:87:7b:f0:1f:92:
69:6a:9c:6f:c5:ea:53:0f:9b:31:cf:1f:07:df:e2:ea:fc:88:
d1:fe:d9:92:d2:bc:e4:be:66:ca:47:a1:0b:af:09:7a:58:63:
86:b6:17:c1:b5:84:7b:d3:23:cb:5d:e4:9b:08:72:5a:e6:2a:
34:27:a5:67:32:cb:42:6c:a1:a3:7e:e9:4c:1c:cb:77:7b:93:
b0:e2:14:07:2b:5c:9e:e1:4d:12:ed:a2:71:35:4f:b0:d5:c8:
0c:55:82:92:ce:54:21:64:73:24:3d:41:5f:fc:7f:cb:f4:25:
d3:fe:a4:05:fe:37:1d:cd:4d:3e:3c:b3:6b:ce:77:79:45:ea:
fc:a6:63:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:01:45 2026 by rpki-client