Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E892271C76FA11F1959F961DCF1D38B0.roa
File: E892271C76FA11F1959F961DCF1D38B0.roa (raw, json)
Hash identifier: a7A5oYF71qeForRVk9PH8s/gCjTg0PosrZ2oyQ/CPTc=
Subject key identifier: 37:91:01:B5:52:BE:0C:AE:CE:5F:FE:4B:74:D6:65:79:85:60:86:B6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D6D2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E892271C76FA11F1959F961DCF1D38B0.roa
Signing time: Fri 03 Jul 2026 16:19:04 +0000
ROA not before: Fri 03 Jul 2026 16:18:59 +0000
ROA not after: Mon 10 Aug 2026 16:18:59 +0000
asID: 138915
IP address blocks: 154.90.46.0/23 maxlen: 24
154.93.32.0/24 maxlen: 24
154.93.33.0/24 maxlen: 24
154.93.34.0/23 maxlen: 24
154.93.36.0/23 maxlen: 24
154.93.38.0/23 maxlen: 24
154.93.40.0/23 maxlen: 24
154.93.42.0/23 maxlen: 24
154.93.44.0/24 maxlen: 24
154.93.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:08:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120530 (0x1d6d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 3 16:18:59 2026 GMT
Not After : Aug 10 16:18:59 2026 GMT
Subject: CN=6a47e0f8-8da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:54:65:f1:4d:6d:fb:c3:c7:0d:75:38:60:92:
db:06:db:d9:d8:ec:78:98:57:05:13:11:fc:af:89:
d5:95:19:2e:9f:80:1b:3c:b7:df:92:75:5a:ee:dd:
88:7b:97:b4:ff:78:51:90:88:a9:17:b6:51:70:76:
1b:f1:20:e6:cd:ec:7a:55:b1:21:fe:22:5d:72:dc:
f8:22:4b:0c:a5:06:91:fa:a4:9c:43:e7:77:28:ed:
b9:e6:93:a4:e6:75:1e:c5:1d:35:be:93:3b:44:8e:
8d:3d:82:c1:db:f9:79:06:d5:73:09:d0:de:0c:71:
97:47:d6:95:8f:6d:3a:f7:45:35:9a:cd:5e:68:85:
e1:b2:a3:bb:5c:43:e7:c5:e3:32:c8:a6:1e:b9:2d:
35:5e:4e:9c:c7:86:ff:b6:b8:56:72:18:30:67:72:
27:33:0c:53:d2:17:07:45:15:d7:ba:3d:85:59:03:
0b:1d:f4:56:50:73:72:7b:c0:6d:6d:8c:df:8f:42:
91:e9:25:b5:0f:b6:1e:4e:06:ca:a2:49:9f:03:62:
50:7d:8d:14:f0:2f:92:1c:c6:5b:31:18:76:72:b4:
01:4e:59:8a:af:f8:0a:39:7a:c3:05:09:9e:e7:79:
93:23:55:d3:6f:a2:e8:6f:5c:07:20:3a:22:16:52:
7e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:91:01:B5:52:BE:0C:AE:CE:5F:FE:4B:74:D6:65:79:85:60:86:B6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E892271C76FA11F1959F961DCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.46.0/23
154.93.32.0-154.93.45.255
Signature Algorithm: sha256WithRSAEncryption
28:14:7f:99:45:1c:3d:f5:b3:56:37:83:ae:d8:8b:b5:fa:ce:
72:c0:ff:4b:a3:4a:48:d1:32:aa:d4:75:c4:87:2c:94:a7:c0:
34:86:b6:35:ce:ed:1c:86:e7:51:fe:f1:30:09:a7:6a:f2:f3:
06:fe:28:5d:7e:75:28:64:64:92:49:6c:b8:37:87:9a:f8:b2:
b1:12:36:e8:76:75:5e:25:2b:2d:8d:6d:ad:4e:98:29:c9:b7:
e0:9c:67:b7:d7:a3:2e:f7:d1:59:bd:b3:03:90:6d:b1:fb:23:
71:2d:95:62:2f:db:47:10:21:78:9b:a1:4c:a9:ff:23:80:10:
04:d5:d0:64:18:7d:1e:99:4a:a7:33:95:20:63:19:0f:b8:63:
06:d0:c9:18:6c:74:2e:e6:31:e8:bc:7d:37:fd:54:ee:1b:bb:
4b:b6:aa:25:19:c0:91:1e:b6:db:44:10:07:6c:c5:8e:12:00:
d1:0f:60:f8:73:36:fe:af:e4:58:5c:dd:9b:47:d6:25:98:47:
08:ec:49:f4:36:bc:bd:05:0c:54:24:d3:6f:7a:91:29:9b:9f:
d9:05:0b:a7:1d:5e:ec:f9:08:20:69:d5:1e:e2:dd:d1:09:cb:
56:27:db:1d:b9:f7:c0:25:9f:b4:29:05:ea:70:cb:0f:59:a7:
ab:d8:47:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:35:05 2026 by rpki-client