Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83DC249A714011F19FAC09D2CE1D38B0.roa
File: 83DC249A714011F19FAC09D2CE1D38B0.roa (raw, json)
Hash identifier: /SkiN9JR2y0zhO4KhZTmRcwk8j083YMfZSwSVR2QEEw=
Subject key identifier: B0:CE:32:70:CE:71:BC:36:6D:B2:6B:C7:DF:F0:64:27:CB:BC:4C:0B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D55D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83DC249A714011F19FAC09D2CE1D38B0.roa
Signing time: Fri 26 Jun 2026 09:22:13 +0000
ROA not before: Fri 26 Jun 2026 09:22:08 +0000
ROA not after: Thu 30 Jul 2026 09:22:08 +0000
asID: 401783
IP address blocks: 154.200.26.0/24 maxlen: 24
154.200.51.0/24 maxlen: 24
154.200.52.0/24 maxlen: 24
154.200.131.0/24 maxlen: 24
154.200.158.0/24 maxlen: 24
154.200.159.0/24 maxlen: 24
154.200.160.0/24 maxlen: 24
154.200.161.0/24 maxlen: 24
154.200.162.0/24 maxlen: 24
154.200.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:08:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120157 (0x1d55d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 26 09:22:08 2026 GMT
Not After : Jul 30 09:22:08 2026 GMT
Subject: CN=6a3e44c5-738e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1c:e9:2c:48:ff:aa:28:5e:db:05:37:78:74:
5d:c4:4d:5f:51:ef:04:98:51:6f:1e:f8:77:d5:03:
0d:98:a0:74:e8:43:e7:75:9a:a5:d1:cd:46:5f:be:
ff:ad:12:e7:f5:6e:84:4f:34:37:47:2e:ad:07:5e:
3a:41:cb:3f:4b:30:ab:46:24:0a:59:04:8a:9d:16:
af:e6:6e:b4:56:90:73:32:b1:2b:ae:4f:57:9e:71:
63:83:b0:fe:12:c2:88:0d:ac:c0:89:e5:8e:2f:b9:
29:c5:89:2d:00:01:08:f3:e5:6a:33:78:c9:23:4a:
78:cf:4b:6d:7d:f2:3f:0f:70:66:80:47:2d:2b:22:
8c:6c:af:4d:9a:d1:a8:18:92:7a:4a:05:aa:d5:75:
30:89:c0:35:cc:af:d3:4d:fb:c6:44:5c:b9:88:90:
16:52:c1:29:03:70:8a:73:09:ef:2f:e2:9d:6d:5d:
c5:55:d2:06:fd:5f:e8:70:44:43:07:79:c9:bd:a8:
15:04:be:27:29:7d:72:f7:04:50:64:4d:9e:27:8a:
15:b5:5a:6a:14:42:fb:02:52:4a:fa:5c:18:82:39:
3d:34:e2:ee:b4:a3:8f:11:09:e3:9a:ae:8c:aa:39:
11:45:ca:af:4f:91:2a:91:bb:37:69:b8:b6:e4:d5:
00:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:CE:32:70:CE:71:BC:36:6D:B2:6B:C7:DF:F0:64:27:CB:BC:4C:0B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83DC249A714011F19FAC09D2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.26.0/24
154.200.51.0-154.200.52.255
154.200.131.0/24
154.200.158.0-154.200.162.255
154.200.191.0/24
Signature Algorithm: sha256WithRSAEncryption
42:ed:64:3f:43:2b:6b:25:f3:09:fa:62:58:21:98:00:16:c1:
f4:c9:74:18:df:75:f0:1b:8d:61:1a:af:d9:6e:50:6e:3c:50:
c4:89:af:be:54:4f:65:b6:12:15:f3:21:92:81:26:b8:52:bc:
a7:d6:80:16:53:a1:16:a6:87:22:8d:37:04:68:ce:2c:50:de:
ef:0d:90:1e:e6:38:8e:56:65:b2:f6:78:79:fa:24:68:c9:b1:
5d:3d:6a:ef:66:f1:55:62:3b:13:33:9d:e8:22:b6:d5:0a:6a:
4a:ec:fc:21:af:09:52:df:2e:54:7b:d5:e7:15:e2:da:e7:22:
79:57:81:5f:c8:05:ca:4d:d4:87:0e:1e:9a:97:b7:52:5e:31:
40:cf:c9:8f:32:3a:e5:49:4c:f1:83:b5:d5:29:65:f1:38:9d:
1e:2a:1a:49:bd:f5:ef:dd:73:79:64:5a:ee:da:cb:03:b1:00:
50:e5:3f:61:95:4a:b8:bd:bb:47:de:e9:89:44:21:29:69:3d:
b2:36:e4:a9:06:bd:69:20:84:04:c0:2a:01:a3:fa:72:49:e0:
99:10:af:fd:b1:c0:40:e8:28:5f:53:98:70:54:fe:e4:af:05:
24:dc:46:62:4c:58:2d:42:c1:74:4b:60:da:36:37:e7:29:84:
38:54:e0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:43:14 2026 by rpki-client