Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D01C065C7D4F11F1A77BE3D3CE1D38B0.roa
File: D01C065C7D4F11F1A77BE3D3CE1D38B0.roa (raw, json)
Hash identifier: AKBiRtTNgII2dJxd1sATKmJVdA+9aswJ8Ifuuuo62kk=
Subject key identifier: FA:9E:A6:F7:DA:D8:1D:20:89:78:2F:8C:9E:7D:50:49:76:CC:0F:8B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D84A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D01C065C7D4F11F1A77BE3D3CE1D38B0.roa
Signing time: Sat 11 Jul 2026 17:41:58 +0000
ROA not before: Sat 11 Jul 2026 17:41:50 +0000
ROA not after: Tue 18 Aug 2026 17:41:50 +0000
asID: 400619
IP address blocks: 154.193.192.0/18 maxlen: 24
154.193.192.0/20 maxlen: 24
154.193.208.0/21 maxlen: 24
154.193.216.0/21 maxlen: 24
154.193.224.0/20 maxlen: 24
154.193.240.0/20 maxlen: 24
154.204.8.0/21 maxlen: 24
154.204.128.0/18 maxlen: 24
154.204.183.0/24 maxlen: 24
154.210.2.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 12:38:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120906 (0x1d84a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 11 17:41:50 2026 GMT
Not After : Aug 18 17:41:50 2026 GMT
Subject: CN=6a528066-e0bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:97:bf:50:f1:ec:f2:19:56:4b:d6:1e:c8:c9:
05:e3:f1:22:ba:ce:d5:05:49:7b:3f:38:6d:88:1d:
5d:9e:14:b2:3b:2c:07:b2:90:09:a4:2d:a3:af:4d:
1b:5a:da:58:7f:56:3e:5b:35:9e:0e:63:e9:27:f0:
3b:52:7f:45:06:9e:11:55:e1:91:72:d7:d5:be:da:
44:44:6c:94:53:fe:ac:99:2b:d4:53:f0:5a:49:06:
45:80:19:ad:9d:96:18:02:ce:54:24:91:53:a0:1f:
02:82:d3:35:4a:fd:6d:85:81:76:a1:e9:ef:00:57:
a0:8d:f7:4c:0f:32:42:fe:2c:c9:17:08:96:4d:e2:
71:51:1e:ec:1e:26:0c:8f:e0:7c:e5:cb:16:f8:2b:
55:49:32:f1:5c:92:89:80:29:d7:9d:15:25:13:95:
2f:24:9b:67:64:70:89:f9:a3:8d:85:d2:c3:3b:3f:
40:16:8f:54:4d:f7:9e:fc:34:be:f7:a7:1e:ce:71:
2d:1b:14:f6:8d:91:d0:f6:06:71:fd:3c:2d:7a:61:
5c:2d:b9:41:70:bd:72:18:c8:0c:d6:6d:dc:a4:09:
88:39:06:a3:51:1e:7c:0a:eb:48:f8:8f:e8:50:a1:
f6:97:4c:e1:b9:84:e5:70:0c:b3:b0:23:6e:7d:6d:
ee:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:9E:A6:F7:DA:D8:1D:20:89:78:2F:8C:9E:7D:50:49:76:CC:0F:8B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D01C065C7D4F11F1A77BE3D3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.192.0/18
154.204.8.0/21
154.204.128.0/18
154.210.2.0/24
Signature Algorithm: sha256WithRSAEncryption
00:17:38:21:48:60:6c:77:c5:a4:6a:87:a9:e1:58:4e:4f:cb:
87:7b:97:d0:06:97:14:fe:23:d9:97:13:39:e3:55:63:97:d6:
6b:d2:1b:97:63:95:02:b3:8d:a5:d3:27:d8:16:89:65:0a:a7:
34:da:30:69:01:ff:0f:e7:09:7e:60:03:d2:7f:b8:a3:9c:3a:
15:8b:92:50:4b:2a:8f:57:ee:05:bf:fb:da:a3:bb:0b:cd:20:
02:33:fe:30:be:27:8d:49:62:7d:e1:ae:eb:a7:49:e4:bc:ea:
70:35:8c:36:39:52:03:5a:08:5c:fa:3d:4f:77:08:17:cd:df:
ba:33:43:90:85:55:52:8c:fc:fa:a6:a5:c6:94:d0:a0:09:c7:
76:86:c6:9d:dc:34:88:bb:a1:cb:a0:68:11:6e:14:86:d0:7e:
b8:e4:70:49:7a:a5:53:ea:ae:f1:f4:3e:e2:01:c5:6b:b4:df:
bf:e6:f4:c9:7e:2d:28:24:42:4a:dc:86:89:be:e8:05:16:47:
af:f6:1d:26:fd:23:ff:0a:22:4f:36:4e:de:da:6b:1b:a3:a6:
01:2d:30:d3:42:ea:7c:68:dc:97:22:ea:5c:6a:ed:97:06:93:
90:b0:fe:9e:bc:cb:8d:94:65:cb:ac:12:cd:8b:25:a0:77:84:
3b:f4:c6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:09:24 2026 by rpki-client