Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A444F2A73E011F18AF5A9BCCE1D38B0.roa
File: 0A444F2A73E011F18AF5A9BCCE1D38B0.roa (raw, json)
Hash identifier: 3PVJqsjlvP4S+WfdAGWO9MjrQjGLxNLhMFkrLR5vtb0=
Subject key identifier: 9A:1C:F8:3D:A8:D2:1A:40:AC:93:85:67:A8:31:01:B5:0D:54:32:F1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D606
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A444F2A73E011F18AF5A9BCCE1D38B0.roa
Signing time: Mon 29 Jun 2026 17:29:11 +0000
ROA not before: Mon 29 Jun 2026 17:29:06 +0000
ROA not after: Thu 06 Aug 2026 17:29:06 +0000
asID: 202656
IP address blocks: 154.218.25.0/24 maxlen: 24
154.218.26.0/24 maxlen: 24
154.219.201.0/24 maxlen: 24
154.219.202.0/24 maxlen: 24
154.219.203.0/24 maxlen: 24
154.219.208.0/24 maxlen: 24
154.219.209.0/24 maxlen: 24
154.219.210.0/24 maxlen: 24
154.219.212.0/24 maxlen: 24
154.219.213.0/24 maxlen: 24
154.219.214.0/24 maxlen: 24
154.219.215.0/24 maxlen: 24
154.219.216.0/24 maxlen: 24
154.220.1.0/24 maxlen: 24
154.221.1.0/24 maxlen: 24
154.221.53.0/24 maxlen: 24
154.221.54.0/24 maxlen: 24
154.221.55.0/24 maxlen: 24
154.222.46.0/24 maxlen: 24
154.222.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Jul 2026 17:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120326 (0x1d606)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 29 17:29:06 2026 GMT
Not After : Aug 6 17:29:06 2026 GMT
Subject: CN=6a42ab67-79be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8a:e9:7e:0e:b3:70:f0:c2:36:4a:d8:d9:6b:
f4:d2:19:a4:9a:82:1f:96:97:80:5b:62:2d:b9:37:
21:c6:07:5b:31:e1:5c:ea:8d:df:8f:fb:c4:9c:df:
67:4f:da:6a:50:8f:fb:6c:76:d7:ad:bf:7c:c4:49:
c0:3b:90:1e:f4:59:4c:b8:14:98:33:b8:0d:de:48:
93:97:68:5c:fb:bd:9e:06:bf:42:bf:7f:ad:45:b3:
4d:6a:79:1f:81:8d:92:97:d6:6b:d3:78:66:50:ca:
9c:ca:a7:2b:58:43:dc:f7:73:df:84:33:5d:be:29:
a8:46:4e:41:2d:73:59:0f:36:cb:9a:d1:24:76:b3:
f5:0a:9d:3f:06:c5:86:a9:1f:ea:1e:a6:41:70:3c:
35:d4:b4:07:ae:7d:f5:c2:51:f2:33:5a:f3:83:7a:
dd:31:d8:c0:a8:ff:52:72:eb:5f:2b:a2:83:13:ec:
2f:2d:aa:44:d4:c7:34:48:0a:4d:6f:f0:6b:bb:92:
22:25:80:41:71:ff:0c:01:30:81:65:5a:3c:a4:7c:
5b:7d:c4:9b:a4:a3:ac:05:4f:34:4a:dc:08:e5:1c:
f1:f2:13:0b:b6:88:c0:78:9b:76:d8:99:9d:e8:05:
53:75:21:57:50:e0:00:9c:cd:9b:b4:6c:c5:64:1a:
d5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:1C:F8:3D:A8:D2:1A:40:AC:93:85:67:A8:31:01:B5:0D:54:32:F1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0A444F2A73E011F18AF5A9BCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.25.0-154.218.26.255
154.219.201.0-154.219.203.255
154.219.208.0-154.219.210.255
154.219.212.0-154.219.216.255
154.220.1.0/24
154.221.1.0/24
154.221.53.0-154.221.55.255
154.222.46.0/23
Signature Algorithm: sha256WithRSAEncryption
96:5d:4d:5c:f5:3c:b8:cd:93:2c:9c:19:75:f2:68:80:17:57:
3f:37:8a:81:f2:1c:be:eb:84:d8:04:6c:7a:3e:58:32:ab:fd:
a6:04:3c:bb:fc:ff:61:56:04:83:2b:12:4e:cd:92:ab:59:46:
67:5f:40:d8:dd:8f:0a:7a:4c:66:ad:97:31:5a:91:f0:74:75:
61:51:51:0f:6f:c0:9b:99:c7:ae:2a:da:23:6b:64:2d:de:c5:
18:e1:5d:6f:9c:e9:61:74:0c:da:e5:09:79:13:e5:ff:04:c3:
ec:f8:46:0d:38:84:fa:07:75:ca:ea:53:20:f8:9c:63:cd:be:
0d:4e:6b:ac:e4:e8:95:01:be:29:c1:d4:9d:3f:48:5a:d5:7d:
6b:e3:db:2c:60:e7:30:ea:7a:17:cf:9e:9b:b0:e3:40:a0:f5:
0e:76:04:48:fa:2a:02:06:58:5d:7f:39:23:61:15:f8:5b:a6:
0f:8f:28:a5:d3:89:2f:ff:13:b5:dd:39:ed:3f:bf:4c:a2:41:
8b:e0:2b:28:6c:8f:ba:38:e0:c8:e1:a4:df:e0:f8:85:c1:c3:
06:3c:95:23:64:e6:33:aa:55:1f:7d:0b:f0:a9:62:9e:f2:6b:
7c:72:8a:44:cd:37:cb:a0:7b:e2:15:7b:2e:14:ae:bf:21:ff:
4f:53:49:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:41:52 2026 by rpki-client