Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD921E90745E11F1A523DDC9CE1D38B0.roa
File: AD921E90745E11F1A523DDC9CE1D38B0.roa (raw, json)
Hash identifier: CWC/atVSpN6mc0/9iTUSPBUbjaESNKVKsn+i+mSeeRs=
Subject key identifier: FC:D6:89:70:2E:CD:79:82:08:25:E3:FB:C1:63:05:85:AE:A9:ED:63
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D62F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD921E90745E11F1A523DDC9CE1D38B0.roa
Signing time: Tue 30 Jun 2026 08:35:42 +0000
ROA not before: Tue 30 Jun 2026 08:35:37 +0000
ROA not after: Thu 06 Aug 2026 08:35:37 +0000
asID: 44559
IP address blocks: 154.209.157.0/24 maxlen: 24
154.209.196.0/24 maxlen: 24
154.209.205.0/24 maxlen: 24
154.209.207.0/24 maxlen: 24
154.218.27.0/24 maxlen: 24
154.219.193.0/24 maxlen: 24
154.219.194.0/24 maxlen: 24
154.219.197.0/24 maxlen: 24
154.219.200.0/24 maxlen: 24
154.219.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 12:38:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120367 (0x1d62f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 30 08:35:37 2026 GMT
Not After : Aug 6 08:35:37 2026 GMT
Subject: CN=6a437fdd-f973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:68:cc:c2:0d:75:6c:97:61:5f:e6:0d:80:f5:
64:e5:01:d7:0d:16:6b:8a:a4:d9:2d:e6:f1:52:11:
ef:6c:df:77:d1:84:7c:35:25:91:d2:66:bb:1a:68:
2e:48:c8:0c:47:a6:ed:ed:4f:40:4b:0b:e6:e0:16:
41:35:68:8c:95:7f:8d:df:07:c6:90:f0:33:39:14:
ac:ed:80:5f:47:18:8d:85:85:16:0a:16:5a:d5:56:
3e:2a:71:18:d8:61:c1:40:1f:45:f0:f1:1b:5c:25:
ca:a3:13:46:6a:80:25:81:2c:3b:6d:7e:c3:63:e1:
4b:0f:15:40:09:c0:14:95:a1:8d:d6:19:33:53:db:
b6:47:26:32:73:8c:5f:49:a8:a2:5f:aa:c5:94:4c:
66:bb:24:cb:4f:f0:27:64:7f:b6:5c:22:5b:70:5b:
2d:5d:fa:31:0c:9a:96:ef:a4:ec:88:ac:30:c4:c4:
29:6e:eb:ae:4b:85:5f:5b:27:83:26:56:ff:40:8b:
c8:7d:5a:48:e4:70:3e:60:e6:de:59:15:61:e9:50:
bd:6a:d2:0b:6b:e5:a0:be:57:4a:c0:7f:4b:3b:71:
a0:0e:be:9c:01:47:80:ff:c6:2b:b8:4b:6b:85:a8:
14:b9:63:cb:7b:d2:94:06:31:03:6a:7d:dc:27:91:
1d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D6:89:70:2E:CD:79:82:08:25:E3:FB:C1:63:05:85:AE:A9:ED:63
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AD921E90745E11F1A523DDC9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.157.0/24
154.209.196.0/24
154.209.205.0/24
154.209.207.0/24
154.218.27.0/24
154.219.193.0-154.219.194.255
154.219.197.0/24
154.219.200.0/24
154.219.206.0/24
Signature Algorithm: sha256WithRSAEncryption
75:59:a4:28:37:76:8b:e1:f4:16:82:3b:ce:ba:c7:b9:50:e1:
12:f8:8b:7e:89:94:6e:b7:44:43:d6:16:59:55:e2:1c:8b:99:
4c:93:36:0c:13:e3:ab:f5:4c:fb:40:fb:2a:ca:18:79:c5:67:
f7:07:a9:ce:87:73:44:ec:2c:68:ad:fa:ca:83:73:78:07:e0:
50:28:76:81:22:f3:e0:41:01:ab:34:84:8a:e9:7c:7c:7a:8f:
0b:19:9a:bc:83:e0:a5:dc:07:0a:76:98:64:a2:2c:f4:cf:72:
df:fd:c9:68:e8:66:72:87:75:a3:eb:62:c3:2b:93:3d:18:33:
08:16:d7:be:ae:c7:14:77:f4:29:bc:d3:9e:36:c0:80:52:0a:
4d:92:99:8e:12:7f:0d:ce:29:50:f2:cc:8e:99:8d:e2:6a:cb:
96:15:39:b3:7f:fb:84:c4:ca:4e:1b:33:8f:1f:a3:3c:e7:36:
c0:d2:7c:9b:a4:3d:64:1a:59:af:61:a8:03:40:88:d6:22:4c:
a8:71:e7:37:2f:7a:27:84:fb:3a:00:7b:8f:f1:3e:5c:d9:1d:
f6:5f:26:da:4c:01:35:d4:87:38:fc:0c:73:a9:d7:eb:54:67:
14:4d:69:d3:d4:53:fd:0c:2b:9c:78:05:c0:7a:bd:39:bb:ad:
e6:fa:bf:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:01:45 2026 by rpki-client