Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B8000566FB511F1A9A312EBCE1D38B0.roa
File: 1B8000566FB511F1A9A312EBCE1D38B0.roa (raw, json)
Hash identifier: PkU3GAracImVABPQelmJp0hVqYyJ7ed15gaFcJeoaVE=
Subject key identifier: C6:41:2A:4B:57:C7:30:A5:98:F5:E9:A5:83:32:FE:08:1E:4A:4B:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D4C1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B8000566FB511F1A9A312EBCE1D38B0.roa
Signing time: Wed 24 Jun 2026 10:11:47 +0000
ROA not before: Wed 24 Jun 2026 10:11:42 +0000
ROA not after: Fri 31 Jul 2026 10:11:42 +0000
asID: 62240
IP address blocks: 154.195.28.0/24 maxlen: 24
154.195.29.0/24 maxlen: 24
154.195.30.0/24 maxlen: 24
154.195.31.0/24 maxlen: 24
154.195.186.0/24 maxlen: 24
154.195.187.0/24 maxlen: 24
154.196.36.0/24 maxlen: 24
154.196.40.0/24 maxlen: 24
154.196.41.0/24 maxlen: 24
154.196.42.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 29 Jun 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120001 (0x1d4c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 10:11:42 2026 GMT
Not After : Jul 31 10:11:42 2026 GMT
Subject: CN=6a3bad63-601d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e3:97:f9:70:0f:1d:63:e8:4d:8a:fb:bf:7c:
bc:93:d8:0e:69:35:0e:d6:b5:28:ac:4d:b3:e1:ce:
90:e1:6d:ae:c4:14:0f:ac:60:1c:11:d1:7f:1e:eb:
5c:00:15:3e:f7:db:7d:e4:d5:11:db:29:d4:42:4b:
82:f6:88:71:e8:73:c5:26:ef:41:b9:0e:18:8c:e4:
b9:bc:5d:64:7a:76:bb:92:c2:fd:0e:39:22:3b:40:
43:b3:75:0e:d9:be:8f:0b:4f:14:72:10:46:71:42:
87:91:6d:1a:5e:9d:50:78:9d:ee:dd:de:36:57:89:
9a:db:b2:07:dd:82:31:b8:d3:51:91:ce:23:49:d4:
02:14:de:52:f6:28:b8:d7:32:7a:a1:3a:09:d9:aa:
77:c4:1b:b5:8b:8a:99:d3:a5:16:52:0b:10:33:51:
56:94:31:c4:38:80:1f:65:dc:c8:dc:47:87:75:7f:
6b:f9:76:dd:24:22:b6:37:7e:2f:c7:eb:7c:8d:b8:
ec:0b:65:7e:42:31:c7:e0:d8:31:2e:ad:97:0f:f5:
74:44:ac:96:9d:43:ff:5d:78:c6:56:96:cb:e9:67:
c6:1e:10:c1:9a:f2:93:03:53:07:67:52:65:46:19:
cc:0d:ae:fc:32:66:92:cc:c3:a1:52:5b:d6:a6:f4:
b3:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:41:2A:4B:57:C7:30:A5:98:F5:E9:A5:83:32:FE:08:1E:4A:4B:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1B8000566FB511F1A9A312EBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.28.0/22
154.195.186.0/23
154.196.36.0/24
154.196.40.0-154.196.42.255
Signature Algorithm: sha256WithRSAEncryption
b4:67:e7:95:7f:00:48:77:02:b0:da:c7:b3:92:b9:f1:52:59:
e6:1a:3c:cb:9a:eb:f4:f9:c9:c5:04:a4:62:d3:b6:0b:85:24:
24:6e:2f:77:da:bd:90:ff:0a:96:55:c3:20:f1:2a:9e:e8:84:
50:f3:79:9c:33:90:4b:8a:b3:f0:fe:77:6c:1b:f7:cc:41:91:
16:19:63:8c:ad:68:90:cb:a0:15:55:0f:69:9d:49:f1:cd:a4:
dc:10:df:b9:65:a4:44:ea:65:82:49:d7:52:d8:11:b9:3e:17:
f1:e3:81:a1:d9:7e:04:7d:68:b0:49:d7:67:05:25:f4:e4:57:
22:7c:82:b5:2f:91:48:07:06:3d:fb:fa:cf:3d:ec:11:a0:c5:
89:02:54:cf:82:8a:6f:3d:6b:27:d9:7f:1b:9c:a5:33:d6:8e:
14:cb:fe:65:af:53:18:87:02:a6:ae:36:a2:11:84:1f:dd:38:
15:71:43:82:c6:8d:31:8d:aa:47:d5:76:d1:6a:7d:49:e1:68:
ca:6f:f4:6f:76:80:ad:7b:78:ee:09:de:af:5b:30:67:2a:df:
4f:80:32:53:ad:3f:a7:c4:3c:f1:3b:ad:f5:18:80:79:1d:f9:
f9:38:ef:c6:99:ad:eb:0a:b4:2c:32:dc:61:3d:5c:93:2c:37:
c4:03:cb:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 17:42:23 2026 by rpki-client