Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9EDFFF36760511F1B73FFDD0CE1D38B0.roa
File: 9EDFFF36760511F1B73FFDD0CE1D38B0.roa (raw, json)
Hash identifier: 5sSk3KKHn/F0rBNzbLV3Ct7rZwzuBQsh9w+XUuQD8yg=
Subject key identifier: 55:BA:A9:E1:99:A6:C6:C8:54:52:0E:F0:F2:71:85:8D:BC:2A:FB:06
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D67C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9EDFFF36760511F1B73FFDD0CE1D38B0.roa
Signing time: Thu 02 Jul 2026 11:03:14 +0000
ROA not before: Thu 02 Jul 2026 11:03:09 +0000
ROA not after: Sat 25 Jul 2026 11:03:09 +0000
asID: 401783
IP address blocks: 154.193.2.0/24 maxlen: 24
154.193.35.0/24 maxlen: 24
154.194.195.0/24 maxlen: 24
154.196.134.0/24 maxlen: 24
154.200.37.0/24 maxlen: 24
154.200.43.0/24 maxlen: 24
154.200.46.0/24 maxlen: 24
154.200.48.0/24 maxlen: 24
154.200.51.0/24 maxlen: 24
154.200.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:08:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120444 (0x1d67c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 2 11:03:09 2026 GMT
Not After : Jul 25 11:03:09 2026 GMT
Subject: CN=6a464572-4f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:68:17:ce:9e:71:6f:0c:58:ea:4a:5d:28:0f:
be:b9:11:de:a1:20:bf:57:01:e8:96:0b:d0:d4:f0:
86:3b:50:22:23:12:20:f5:b1:22:20:5c:7d:89:56:
8f:fc:28:1e:b5:51:ae:b2:88:66:cd:93:97:a1:3f:
6b:41:3b:54:b3:ae:cf:24:a4:c5:cc:f1:ae:3a:ee:
98:38:b1:85:08:2d:e8:f1:06:84:4d:a8:99:89:92:
70:3b:73:e2:c4:60:46:31:2d:1a:fc:55:d4:b3:5c:
a1:e2:b8:7c:e8:47:4e:ac:e7:80:f8:ef:fd:ba:54:
4a:40:37:53:52:86:e4:2b:e5:df:b7:df:94:82:e2:
af:b8:5a:d4:92:27:8d:b0:e1:6e:8f:8b:73:99:ca:
2b:85:a1:82:7a:67:88:14:a2:12:15:97:cf:d9:da:
c6:c3:41:18:47:be:e3:49:a2:b4:5f:16:61:01:d5:
0a:6c:0e:af:2e:79:40:77:f0:15:41:3f:66:51:0a:
66:ec:ab:f8:72:0c:80:a2:4b:de:a4:af:0e:4b:fd:
f3:31:78:bc:3f:f1:6d:c8:0a:bd:5b:00:80:a6:99:
d4:35:d2:91:de:ca:13:d2:12:8c:9d:91:08:05:92:
6e:94:62:88:06:24:80:54:1a:91:da:c8:cc:f8:ac:
40:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:BA:A9:E1:99:A6:C6:C8:54:52:0E:F0:F2:71:85:8D:BC:2A:FB:06
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9EDFFF36760511F1B73FFDD0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.2.0/24
154.193.35.0/24
154.194.195.0/24
154.196.134.0/24
154.200.37.0/24
154.200.43.0/24
154.200.46.0/24
154.200.48.0/24
154.200.51.0-154.200.52.255
Signature Algorithm: sha256WithRSAEncryption
29:30:85:aa:61:f7:f0:9d:25:bd:87:9e:70:a6:02:1a:0f:e0:
d8:78:c1:65:a3:f2:90:70:11:38:a3:7f:d4:1f:79:9b:bd:cc:
ce:e3:ec:9c:a6:d1:c1:36:eb:92:c5:32:76:79:84:dc:7f:64:
d2:e2:7e:84:54:69:1a:e5:06:77:53:50:b7:73:9e:c5:51:8f:
93:90:ee:cb:2e:bf:94:2f:9a:67:b0:3d:b9:36:0f:f5:2a:43:
75:b5:0e:21:32:55:15:e6:d2:ef:65:01:a5:ca:ce:6b:a3:9d:
14:cc:b2:5f:ac:4e:80:5c:2d:82:68:89:77:b3:54:39:ed:72:
d1:83:70:77:31:df:ec:01:2f:d4:7e:ac:f5:83:a0:3d:49:64:
91:8d:d1:e4:ba:bc:78:80:b5:47:8d:8f:a9:38:b7:2c:4a:42:
8e:0c:d5:81:66:a8:4c:69:ba:bc:b7:60:2f:76:38:35:4b:4d:
b6:8a:48:18:f8:3c:62:0a:df:f4:ff:46:69:85:95:30:22:4d:
40:40:6d:f6:ae:2f:67:22:57:d1:d5:85:10:7a:25:1e:d0:e6:
0a:73:50:2a:48:c8:22:57:08:e9:1d:60:49:e5:b4:b4:6c:28:
f9:78:3c:35:db:c7:d2:7f:d4:25:fe:ba:e8:ab:2d:10:d8:5e:
0a:5a:e5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:43:13 2026 by rpki-client