Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1FEE02126EB811F189AA99E5CE1D38B0.roa
File: 1FEE02126EB811F189AA99E5CE1D38B0.roa (raw, json)
Hash identifier: H6cfqBxJtvzapOHmegesrf/Fw2QzJMVJ4q9pRBeFYpI=
Subject key identifier: 76:E5:E0:AE:45:41:CB:EC:65:73:5A:FE:36:93:EE:29:38:98:19:8B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D466
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1FEE02126EB811F189AA99E5CE1D38B0.roa
Signing time: Tue 23 Jun 2026 04:00:52 +0000
ROA not before: Tue 23 Jun 2026 04:00:46 +0000
ROA not after: Tue 30 Jun 2026 04:00:46 +0000
asID: 399077
IP address blocks: 154.91.64.0/24 maxlen: 24
154.91.65.0/24 maxlen: 24
154.91.66.0/24 maxlen: 24
154.91.67.0/24 maxlen: 24
154.91.68.0/24 maxlen: 24
154.91.69.0/24 maxlen: 24
154.91.70.0/24 maxlen: 24
154.91.71.0/24 maxlen: 24
154.91.72.0/24 maxlen: 24
154.91.73.0/24 maxlen: 24
154.91.74.0/24 maxlen: 24
154.91.75.0/24 maxlen: 24
154.91.76.0/24 maxlen: 24
154.91.77.0/24 maxlen: 24
154.91.78.0/24 maxlen: 24
154.91.79.0/24 maxlen: 24
154.91.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119910 (0x1d466)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 23 04:00:46 2026 GMT
Not After : Jun 30 04:00:46 2026 GMT
Subject: CN=6a3a04f4-90ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:7d:d9:6a:45:39:69:0c:24:d0:09:25:89:f4:
6d:45:a0:08:78:d6:a4:e0:58:76:87:92:de:18:f7:
4f:25:25:b6:1d:56:5a:0a:95:0a:d3:4a:0c:0b:29:
38:04:fa:31:f0:12:b9:95:a4:61:50:56:a8:5a:83:
ac:f8:31:bf:65:be:95:28:e7:f2:e3:d6:74:28:5d:
57:63:6d:e1:d4:26:f8:30:dd:36:31:64:03:9b:36:
0c:d3:1e:f9:e9:c9:6a:7f:65:06:ab:f6:76:55:72:
59:32:89:40:ab:eb:83:fd:13:21:df:43:7c:c7:9d:
a7:b3:41:90:a7:ff:06:bd:a9:60:4a:25:ed:62:00:
06:2a:c7:4f:d7:a1:71:c5:b8:2e:07:cc:5d:5f:e4:
0a:94:f9:3a:21:32:09:04:b2:f3:9c:78:45:5d:fd:
2c:28:98:95:97:91:1d:9f:e6:77:ea:7f:18:7c:00:
43:5b:22:50:e6:55:b9:bb:03:03:02:19:73:b7:e0:
f4:b4:bc:a2:fc:d3:c0:72:9f:a8:0f:6a:6a:19:44:
bb:f3:1e:80:03:25:d2:2f:e5:54:88:73:08:8e:f7:
a7:4c:73:09:de:73:71:72:56:f3:33:e1:02:eb:43:
b5:25:7c:84:34:b8:cd:61:da:b0:ec:57:da:8f:de:
83:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E5:E0:AE:45:41:CB:EC:65:73:5A:FE:36:93:EE:29:38:98:19:8B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1FEE02126EB811F189AA99E5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.64.0-154.91.80.255
Signature Algorithm: sha256WithRSAEncryption
c5:8e:fe:45:aa:f4:bb:09:e9:4b:48:c9:c9:ea:aa:2e:46:96:
36:8b:be:fc:70:b0:5f:66:6a:46:2d:ba:55:9c:f7:b9:6c:83:
c9:c9:95:52:71:f9:f2:6a:cf:b7:2f:3c:bc:8f:ae:e1:8b:e8:
b1:66:22:a5:28:2f:7c:da:c7:66:73:42:9d:d5:0b:b7:a0:ca:
53:b0:bf:f0:0d:50:e8:20:40:9d:5c:1b:42:6f:8a:ea:34:9a:
b6:e6:f7:87:d1:d8:29:d0:83:af:3b:8b:49:87:39:75:1d:53:
e7:6a:9e:9b:06:23:9e:da:09:e5:60:20:ba:e3:28:5f:22:ea:
d7:57:52:a6:27:e7:1f:34:de:fd:54:df:57:2f:69:0c:20:3c:
27:f3:0d:5e:01:e8:96:28:51:68:cd:bc:87:8a:7a:bc:d5:99:
be:95:89:6f:2d:83:d6:89:91:2e:0e:9c:ea:18:a2:1c:50:ab:
d3:2a:a3:3a:ad:d2:be:28:9b:01:3e:da:75:c5:25:ea:0b:69:
39:cb:d9:ff:c8:b5:70:de:45:61:f1:8e:26:90:2d:54:4e:62:
27:e9:cc:60:de:75:e2:2e:b7:d6:b5:49:4a:44:dd:e9:1f:2c:
8f:50:aa:73:63:23:d0:65:8d:1a:18:97:95:50:60:a2:2e:2f:
dc:bf:ef:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:51:37 2026 by rpki-client