Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AAF2C12739111F19BDBC2E5CE1D38B0.roa
File: 1AAF2C12739111F19BDBC2E5CE1D38B0.roa (raw, json)
Hash identifier: COsG8UkvHy7o6ZdUD5ZUu9JMzZll0DNkv/cxHkn6Wo8=
Subject key identifier: C6:4B:20:13:EC:D6:ED:42:36:44:BB:60:BC:92:20:FD:49:44:BD:51
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D5E2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AAF2C12739111F19BDBC2E5CE1D38B0.roa
Signing time: Mon 29 Jun 2026 08:04:08 +0000
ROA not before: Mon 29 Jun 2026 08:04:03 +0000
ROA not after: Thu 06 Aug 2026 08:04:03 +0000
asID: 202656
IP address blocks: 154.218.30.0/24 maxlen: 24
154.219.1.0/24 maxlen: 24
154.219.4.0/24 maxlen: 24
154.219.16.0/24 maxlen: 24
154.219.24.0/24 maxlen: 24
154.219.28.0/24 maxlen: 24
154.219.207.0/24 maxlen: 24
154.219.211.0/24 maxlen: 24
154.219.222.0/24 maxlen: 24
154.219.230.0/24 maxlen: 24
154.219.232.0/24 maxlen: 24
154.219.245.0/24 maxlen: 24
154.219.246.0/24 maxlen: 24
154.219.247.0/24 maxlen: 24
154.219.250.0/24 maxlen: 24
154.219.251.0/24 maxlen: 24
154.219.252.0/24 maxlen: 24
154.219.253.0/24 maxlen: 24
154.219.254.0/24 maxlen: 24
154.219.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Jul 2026 17:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120290 (0x1d5e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 29 08:04:03 2026 GMT
Not After : Aug 6 08:04:03 2026 GMT
Subject: CN=6a4226f8-fb31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3b:c2:ab:28:59:8f:e8:4e:cc:00:2f:27:de:
c0:af:d9:e7:b5:c2:25:17:90:be:0a:dc:75:83:b1:
a4:87:e3:a1:d3:6a:56:a6:c7:f8:a5:51:5c:09:17:
70:6c:95:53:d4:5b:2c:80:84:7e:d4:3a:cd:a4:b3:
d9:c4:4c:4a:14:d5:e5:b3:2f:d9:59:cb:bd:17:05:
86:c4:11:a1:2d:32:20:40:8b:f0:35:1a:5c:f2:2d:
bd:42:63:ed:96:0c:94:40:7a:5d:2d:3e:db:e4:5c:
cf:b0:99:9d:68:0a:db:4b:5f:b5:0d:40:50:fc:80:
f9:8a:ab:15:df:5f:1b:48:78:a7:87:36:1a:4a:28:
e5:c6:2c:0f:c7:95:0f:60:16:00:b6:a0:86:7e:2e:
13:79:22:71:24:b1:96:bb:9c:e0:db:51:81:3b:6a:
88:cd:a7:3f:b6:f2:e8:f6:c6:60:87:17:a3:17:bb:
ff:07:09:35:3f:b1:0e:0c:07:58:88:79:54:41:39:
85:87:8d:6e:8a:ae:89:ef:7c:57:6b:ac:ca:39:15:
19:2e:2d:ad:09:6f:2c:e5:63:b2:5f:c5:5f:1f:1d:
18:b7:f5:69:59:a3:73:c6:bb:ab:3b:39:ff:ac:94:
4d:10:5b:e3:c5:4c:3c:e1:b0:55:48:53:2e:53:8c:
8d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:4B:20:13:EC:D6:ED:42:36:44:BB:60:BC:92:20:FD:49:44:BD:51
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1AAF2C12739111F19BDBC2E5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.30.0/24
154.219.1.0/24
154.219.4.0/24
154.219.16.0/24
154.219.24.0/24
154.219.28.0/24
154.219.207.0/24
154.219.211.0/24
154.219.222.0/24
154.219.230.0/24
154.219.232.0/24
154.219.245.0-154.219.247.255
154.219.250.0-154.219.255.255
Signature Algorithm: sha256WithRSAEncryption
65:77:72:de:42:f5:67:59:bd:29:ab:75:58:79:be:2d:2b:fe:
20:f2:4c:c6:f7:de:8d:b6:e3:50:fe:79:8a:e0:03:05:5f:a3:
8d:61:ca:94:7f:ca:9b:39:5a:b0:b3:ce:fc:65:e6:cb:51:fe:
19:82:04:87:f4:78:3a:da:07:c0:e5:0a:a0:34:be:1e:17:56:
9a:ad:3b:1b:2b:fc:1b:9b:16:d8:f3:69:59:d3:28:9b:19:e8:
a3:86:3d:61:76:b9:79:e2:30:9d:19:76:ba:89:a9:0e:7c:7a:
95:21:8b:e3:61:29:b1:97:65:7a:cf:cb:6c:45:03:2d:3b:eb:
b8:ec:f9:24:c2:2b:6d:05:2c:88:24:e9:c7:03:e4:42:38:93:
04:08:48:18:3d:bb:f6:42:e2:8c:42:24:a8:09:29:e4:a2:09:
0a:a0:dd:5b:c8:35:4a:d4:08:13:57:83:a8:85:e7:97:28:d3:
b9:1b:df:f7:9b:6f:6e:2c:6d:ef:1c:25:db:82:d0:42:ab:83:
d5:81:c6:36:40:77:1c:98:54:7e:91:bd:e5:72:d9:41:bf:eb:
31:6e:73:1c:fc:25:b3:9a:8a:55:4d:96:f6:85:8e:23:69:b6:
16:d8:6d:11:c1:11:75:9d:3f:0f:58:e3:24:d2:ee:9a:6c:32:
95:86:d3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:41:52 2026 by rpki-client