Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9CDB15C744F11F192AF79F1CE1D38B0.roa
File: F9CDB15C744F11F192AF79F1CE1D38B0.roa (raw, json)
Hash identifier: YsGkNOht37YJjh0mP0BHpI3d79QBJK4OusIVzNEmO9o=
Subject key identifier: 5A:76:D5:0B:CC:14:8F:F2:42:89:13:80:0E:B4:7C:C5:8D:EA:A5:23
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D62B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9CDB15C744F11F192AF79F1CE1D38B0.roa
Signing time: Tue 30 Jun 2026 06:50:27 +0000
ROA not before: Tue 30 Jun 2026 06:50:21 +0000
ROA not after: Thu 06 Aug 2026 06:50:21 +0000
asID: 44559
IP address blocks: 154.209.144.0/24 maxlen: 24
154.209.145.0/24 maxlen: 24
154.209.152.0/24 maxlen: 24
154.209.153.0/24 maxlen: 24
154.209.154.0/24 maxlen: 24
154.209.155.0/24 maxlen: 24
154.209.157.0/24 maxlen: 24
154.209.158.0/24 maxlen: 24
154.209.195.0/24 maxlen: 24
154.209.196.0/24 maxlen: 24
154.209.205.0/24 maxlen: 24
154.209.207.0/24 maxlen: 24
154.218.27.0/24 maxlen: 24
154.219.193.0/24 maxlen: 24
154.219.194.0/24 maxlen: 24
154.219.197.0/24 maxlen: 24
154.219.200.0/24 maxlen: 24
154.219.204.0/24 maxlen: 24
154.219.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 24 Jul 2026 12:26:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120363 (0x1d62b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 30 06:50:21 2026 GMT
Not After : Aug 6 06:50:21 2026 GMT
Subject: CN=6a436733-5748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8d:d5:72:82:22:77:48:76:29:76:60:51:2f:
8b:8d:49:c5:42:87:ea:e2:c5:c4:6f:36:41:a4:2f:
ba:f8:07:15:01:e8:b6:b7:40:a0:b3:ab:23:b5:12:
ce:9f:07:fd:60:63:d4:18:44:1b:d8:99:88:cb:d0:
59:4c:dc:42:b0:9a:62:42:0f:ae:ff:25:72:7f:96:
0d:b1:00:01:a0:bc:19:18:28:7f:bc:96:59:b7:80:
65:bc:06:df:31:b4:c6:ad:b9:b9:9e:7e:30:4d:4b:
13:66:69:09:89:1d:f3:3b:8e:82:1c:ac:43:1b:6a:
e7:25:25:e7:60:fb:6e:6e:13:f4:77:a1:74:ab:be:
3f:b3:a0:84:38:71:d4:2c:83:a5:f9:5b:fe:99:f0:
21:3a:0b:40:14:d6:47:4d:ee:c2:26:b5:b3:d3:8c:
d7:c1:0e:a3:52:1d:23:6b:74:54:0c:87:e2:0a:f8:
de:8a:36:ad:9e:a6:c1:90:36:eb:88:1e:99:c9:d0:
7b:3b:5c:58:4a:05:ee:7b:4c:ce:34:4d:73:b4:38:
83:30:e5:9f:64:cf:36:61:be:59:5e:26:e5:5f:a2:
b1:9d:1d:45:d1:6a:ae:55:7b:95:56:bf:8b:d4:28:
4e:f9:9f:14:be:60:2e:ab:39:f3:68:a9:ad:00:d4:
6d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:76:D5:0B:CC:14:8F:F2:42:89:13:80:0E:B4:7C:C5:8D:EA:A5:23
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F9CDB15C744F11F192AF79F1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.144.0/23
154.209.152.0/22
154.209.157.0-154.209.158.255
154.209.195.0-154.209.196.255
154.209.205.0/24
154.209.207.0/24
154.218.27.0/24
154.219.193.0-154.219.194.255
154.219.197.0/24
154.219.200.0/24
154.219.204.0/24
154.219.206.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:b8:31:d1:0a:a9:80:1a:22:04:cd:58:eb:67:94:13:bc:41:
0e:11:3d:fe:7f:c1:13:40:96:6b:31:81:5b:a6:b4:cd:99:5e:
1a:30:cb:71:af:27:36:6f:62:64:93:5e:a5:d1:64:c2:e8:c4:
7a:ea:8a:2a:b2:53:19:82:e6:c4:e9:35:b7:43:11:dc:37:0b:
67:29:b4:d4:bc:66:7f:7d:3e:00:37:d3:4b:a3:6c:0f:ff:09:
53:4f:96:30:4c:e4:32:b8:52:99:f0:0a:be:26:6e:39:d5:79:
88:bd:9e:8b:59:f8:0c:d5:39:d1:0c:0e:d4:a1:55:26:61:2a:
b5:9a:bd:f0:60:c8:ba:61:d4:d3:f8:59:71:21:02:42:12:05:
90:fa:52:1f:a0:14:d6:80:8f:06:61:7c:bb:11:d5:a4:2c:59:
00:16:18:6b:36:47:8d:e3:46:5e:cb:d9:85:ff:db:97:3c:53:
fd:5d:75:05:71:d1:c7:37:06:5b:52:94:27:f7:41:03:6a:b7:
a7:12:e3:7b:f3:c5:9a:fb:50:62:ae:a5:47:cd:97:78:d1:0e:
54:9a:b5:3b:7e:7d:1e:a1:8d:ac:b1:01:ea:0c:35:42:47:07:
d7:23:e6:bb:49:a8:67:12:11:97:9e:d8:af:f1:a9:6f:0e:22:
7e:07:61:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 21:14:39 2026 by rpki-client