Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/834E1F5881BA11F1929A6105CF1D38B0.roa
File: 834E1F5881BA11F1929A6105CF1D38B0.roa (raw, json)
Hash identifier: +5sWGsoqlHFVQI8hALVQ1E2Un5d9zHcydCRll+0gsQE=
Subject key identifier: 49:0C:73:C7:57:F1:2E:93:5F:59:09:D4:10:C5:0B:4E:95:AA:D1:2E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D95D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/834E1F5881BA11F1929A6105CF1D38B0.roa
Signing time: Fri 17 Jul 2026 08:35:49 +0000
ROA not before: Fri 17 Jul 2026 08:35:46 +0000
ROA not after: Mon 24 Aug 2026 08:35:46 +0000
asID: 401783
IP address blocks: 154.92.210.0/24 maxlen: 24
154.92.211.0/24 maxlen: 24
154.92.212.0/24 maxlen: 24
154.92.213.0/24 maxlen: 24
154.92.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:08:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121181 (0x1d95d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 17 08:35:46 2026 GMT
Not After : Aug 24 08:35:46 2026 GMT
Subject: CN=6a59e965-05b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d3:88:fe:de:bf:79:cc:cd:0f:cb:c8:7d:65:
27:b6:2d:e4:8f:df:5e:cd:94:ee:aa:cf:e1:58:bf:
08:80:d8:30:5b:3b:0f:5b:4d:00:d7:96:ed:fa:c0:
46:e0:32:69:c1:7e:7f:6a:ea:1e:d9:c5:4e:33:13:
f9:15:e2:db:c7:df:99:7d:18:7a:e5:e7:51:4a:a6:
a2:0c:a7:66:d9:7b:7c:54:88:fc:0b:da:59:5a:21:
d0:da:13:03:82:99:2f:d4:bb:25:5d:ed:cb:aa:80:
60:7e:41:0d:25:8f:3e:29:45:34:2d:25:35:11:a1:
2c:53:95:2f:f2:4d:47:10:13:c9:68:b2:fd:f0:d3:
6d:de:55:24:5a:08:62:73:a1:8c:e7:03:22:3d:f2:
0a:a7:b3:89:84:aa:5c:ae:08:2d:80:4c:ef:eb:d2:
eb:2c:ca:38:52:14:98:9a:dc:98:4c:0b:43:ac:1d:
b3:e2:6b:a8:8b:91:a8:0b:3b:b9:48:7f:fb:10:24:
e6:d5:7f:b8:7a:84:e9:48:cd:70:f7:87:91:7f:10:
90:3f:f7:d8:76:72:a4:86:28:64:16:06:96:b5:38:
c5:70:79:84:77:a5:05:7c:22:e1:94:49:46:d1:5d:
7a:52:9a:36:3d:c8:61:d4:f4:87:c0:1f:35:68:3e:
49:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:0C:73:C7:57:F1:2E:93:5F:59:09:D4:10:C5:0B:4E:95:AA:D1:2E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/834E1F5881BA11F1929A6105CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.210.0-154.92.214.255
Signature Algorithm: sha256WithRSAEncryption
6f:96:56:a2:70:15:b4:1c:65:99:94:b6:a7:15:83:c6:9f:c1:
63:c4:d8:f0:7a:6c:6f:85:33:a1:07:7b:03:99:6b:1e:f6:f9:
66:a4:88:e1:09:b7:34:69:b8:53:0a:ba:60:85:a1:b3:7c:3b:
09:c7:e0:b2:af:7e:33:a4:5f:e7:21:c8:a8:19:51:2c:d2:22:
25:a0:ab:c4:86:75:31:dd:22:db:17:d4:f8:57:eb:08:4e:82:
3c:dd:73:98:4b:19:d5:66:76:0f:4c:1b:0f:8a:53:1c:92:6c:
65:b5:27:dd:2b:c8:a6:7d:0a:fb:4d:24:55:2b:2a:c3:0c:f1:
1b:db:76:7e:ac:2b:91:44:1b:b2:1c:25:9f:56:b2:53:c3:7e:
3a:f5:ab:aa:8a:45:f7:3f:10:ba:9a:0b:38:25:8f:0e:97:e6:
49:1b:86:d9:23:15:7c:d1:ee:34:e9:e3:ed:ec:16:94:fe:c4:
74:b5:40:9c:3e:5e:04:1b:d2:4d:70:a0:24:c9:84:26:8d:96:
d3:ed:94:c8:d1:a9:2b:42:15:48:03:ee:4e:02:24:aa:2e:59:
06:a0:c4:d8:9b:3e:cc:89:9c:8f:98:46:12:14:06:5a:60:46:
6e:19:f6:fa:47:60:36:79:9c:b6:5c:99:c8:d8:be:db:23:c4:
20:40:02:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:43:19 2026 by rpki-client