Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1DCF7D54583C11F1BE429BFACE1D38B0.roa
File: 1DCF7D54583C11F1BE429BFACE1D38B0.roa (raw, json)
Hash identifier: 24K4Q3PHgCulKprHfA/GFSWonGz+dJhw1YRc0/7FIwY=
Subject key identifier: 0B:5B:DB:6B:A6:03:80:CD:FB:13:02:D1:77:64:F8:B2:15:6A:2D:04
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CF78
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1DCF7D54583C11F1BE429BFACE1D38B0.roa
Signing time: Mon 25 May 2026 13:17:45 +0000
ROA not before: Mon 25 May 2026 13:17:40 +0000
ROA not after: Fri 10 Jul 2026 13:17:40 +0000
asID: 401783
IP address blocks: 154.82.153.0/24 maxlen: 24
154.82.196.0/24 maxlen: 24
154.83.10.0/24 maxlen: 24
154.83.24.0/24 maxlen: 24
154.89.132.0/24 maxlen: 24
154.90.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Jun 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118648 (0x1cf78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 25 13:17:40 2026 GMT
Not After : Jul 10 13:17:40 2026 GMT
Subject: CN=6a144bf9-48be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:11:f2:0d:f5:3e:68:99:35:39:97:68:d0:8b:
ae:f2:c3:0d:69:4b:09:f5:46:d8:a7:1d:6b:9c:3b:
57:a8:05:04:b2:ae:c5:c3:30:ee:bf:00:d7:77:84:
e2:77:9e:44:37:33:e3:10:28:a6:b1:f7:32:89:be:
49:67:b5:6d:54:5d:12:f7:fa:57:c4:01:b9:90:c2:
3d:b8:21:da:58:79:1b:7e:a7:66:af:ca:eb:96:1f:
8b:de:fb:49:5d:13:32:b3:ff:b4:c8:90:f2:62:cc:
a9:bf:c4:b6:32:ff:d4:93:14:11:f8:38:26:f8:bb:
49:bc:de:10:df:bc:6f:62:46:2d:b7:ae:81:42:b4:
2f:20:94:4f:e7:7d:29:c3:49:7b:54:7c:69:81:de:
72:15:4f:32:07:0b:92:6b:dc:45:5e:95:6e:e0:c9:
88:10:f2:d4:14:14:e5:21:fd:b3:9b:64:7a:f8:ca:
90:e0:9d:79:49:2c:8a:0a:c2:ad:20:11:dc:24:5b:
1e:df:2a:83:e2:26:b8:43:be:88:bb:15:3c:56:b7:
d3:8c:2a:27:52:1b:6d:ef:01:00:71:bf:b5:f2:fd:
ae:54:64:f4:8b:38:c0:82:e5:62:5a:24:a6:04:8b:
01:f5:fb:db:d6:37:c9:3a:3e:04:0e:e0:d2:59:60:
22:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:5B:DB:6B:A6:03:80:CD:FB:13:02:D1:77:64:F8:B2:15:6A:2D:04
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1DCF7D54583C11F1BE429BFACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.153.0/24
154.82.196.0/24
154.83.10.0/24
154.83.24.0/24
154.89.132.0/24
154.90.65.0/24
Signature Algorithm: sha256WithRSAEncryption
92:d9:c9:a4:c4:62:be:4a:32:81:8e:a1:bf:12:e0:6d:96:68:
a0:15:e5:54:2b:45:36:cb:6a:66:bb:51:2a:a7:53:8d:2b:10:
a6:be:91:b5:81:d0:ab:87:d5:d8:5a:f8:c0:72:f1:a4:72:ea:
81:0d:19:60:e4:a7:bb:6f:71:d9:88:bc:84:fe:3e:32:4f:11:
95:52:81:4b:a0:6e:a9:58:b9:ea:35:86:f6:35:d7:8a:00:b1:
8d:01:7e:32:66:3c:4d:fa:8f:cf:ff:b9:c4:65:0a:f6:7c:2b:
77:73:45:b0:97:db:1f:c3:55:fa:7c:ae:4a:77:cd:8d:42:a4:
c1:75:a3:e1:04:a8:43:83:3a:0c:1e:b7:27:e5:83:60:93:bc:
86:ce:9d:1d:04:4a:a8:2b:fb:dd:e9:a0:b3:d7:e6:0b:c1:e2:
49:ec:9f:fa:91:cc:6d:17:8a:4a:a9:93:64:66:10:8c:7b:c1:
96:40:f0:05:c8:56:ea:51:26:65:ca:f4:44:f2:66:65:ba:8f:
91:c4:d1:b5:1b:13:5d:36:dd:8f:91:9d:2e:eb:85:a5:40:5b:
17:c6:fb:81:c3:63:39:32:f7:b8:51:99:e3:8f:d1:85:f8:58:
54:6a:04:89:4c:1c:8c:9d:a1:6a:aa:f8:7e:43:86:c8:8f:2b:
04:5f:3e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 03:14:29 2026 by rpki-client