Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26AD7BDA5BD211F1A63893C0CE1D38B0.roa
File: 26AD7BDA5BD211F1A63893C0CE1D38B0.roa (raw, json)
Hash identifier: 0KeceKMmJ7MIqOtpN2YC8KxhCvFZwn6J7H+FwvCITbk=
Subject key identifier: 6B:30:6C:73:16:BA:9A:03:DE:25:41:96:F7:DB:FF:7D:2A:14:99:BC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D0D8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26AD7BDA5BD211F1A63893C0CE1D38B0.roa
Signing time: Sat 30 May 2026 02:49:18 +0000
ROA not before: Sat 30 May 2026 02:49:13 +0000
ROA not after: Tue 07 Jul 2026 02:49:13 +0000
asID: 49505
IP address blocks: 154.209.208.0/24 maxlen: 24
154.209.209.0/24 maxlen: 24
154.209.210.0/24 maxlen: 24
154.209.211.0/24 maxlen: 24
154.209.212.0/24 maxlen: 24
154.209.213.0/24 maxlen: 24
154.209.214.0/24 maxlen: 24
154.209.215.0/24 maxlen: 24
154.209.216.0/24 maxlen: 24
154.209.217.0/24 maxlen: 24
154.209.218.0/24 maxlen: 24
154.209.219.0/24 maxlen: 24
154.209.220.0/24 maxlen: 24
154.209.221.0/24 maxlen: 24
154.209.222.0/24 maxlen: 24
154.209.223.0/24 maxlen: 24
154.211.9.0/24 maxlen: 24
154.211.10.0/24 maxlen: 24
154.211.11.0/24 maxlen: 24
154.211.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 13 Jun 2026 00:07:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119000 (0x1d0d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 30 02:49:13 2026 GMT
Not After : Jul 7 02:49:13 2026 GMT
Subject: CN=6a1a502e-f8bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:47:ae:bb:4e:92:a1:74:b3:03:2a:42:6a:32:
20:86:74:34:8e:ea:14:74:22:36:b2:38:72:23:e4:
79:d1:c4:77:9a:46:98:48:2a:e6:e0:4d:01:2f:3c:
3b:67:3e:92:78:14:4f:63:7e:93:da:72:35:33:38:
65:0e:b0:01:1b:88:94:24:7d:9e:be:7e:b0:b6:20:
f7:13:5c:d5:16:65:1b:9c:61:f6:c8:61:d0:64:92:
f2:0d:ab:91:94:30:de:ea:fd:75:97:c8:a7:2c:85:
3d:91:98:14:4f:d7:7f:5b:c3:4e:98:7e:89:7d:f0:
1e:74:1d:e3:e5:d8:53:34:82:fb:42:f7:e3:0f:4a:
61:e0:b6:55:c1:dd:71:ea:08:bd:e4:aa:2c:00:66:
69:ab:1d:0a:2b:2c:52:0f:bd:60:c2:c3:18:29:fb:
72:5b:b7:24:68:b1:9f:70:7a:ef:94:88:2b:0e:7f:
7c:e5:ed:52:54:f0:33:96:d7:41:1f:e4:6e:4d:b9:
87:44:04:08:4c:cf:50:d2:03:da:6d:3d:4f:2f:f4:
8f:f3:ad:df:09:c5:f5:a5:d6:2a:d7:90:49:43:ec:
5a:0d:62:39:75:17:2d:53:9e:c5:b2:db:cf:6a:34:
16:e8:d3:94:3f:6f:9a:9f:6a:3f:d0:17:86:48:a0:
af:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:30:6C:73:16:BA:9A:03:DE:25:41:96:F7:DB:FF:7D:2A:14:99:BC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/26AD7BDA5BD211F1A63893C0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.208.0/20
154.211.9.0-154.211.11.255
154.211.16.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:aa:3a:59:18:03:c8:4f:26:72:b8:03:20:56:78:ed:fd:1e:
06:cd:28:c8:b9:ca:89:1e:c9:30:40:28:79:4b:ec:c9:50:ad:
38:4e:cd:88:6c:c3:4e:76:a6:d7:92:2f:33:46:6a:dc:09:0c:
84:0d:15:ce:93:90:18:30:02:cf:35:89:20:3c:32:3f:ae:07:
c0:e8:9c:b3:f6:5c:5a:6b:8f:04:a4:54:85:9a:ce:c4:a6:bb:
ce:67:57:7a:86:d6:b3:82:c0:13:73:37:ae:df:6f:d8:57:21:
d9:79:2c:91:e8:a3:96:02:5f:16:8d:1c:3b:3c:f8:b4:c0:60:
57:03:9c:d3:05:77:1b:9a:73:a2:fb:5e:c6:66:a8:ad:f8:77:
a1:59:34:f0:3e:02:4a:11:6a:f9:9d:26:f0:28:74:ce:d2:5a:
3e:be:d5:de:4f:fa:dd:3c:33:f5:35:93:81:d3:d1:1c:0a:0f:
06:d0:ab:00:2f:85:43:8f:79:6c:7f:58:5c:31:cb:76:92:ed:
54:fb:bd:0f:ed:d7:57:ad:d0:1d:7e:31:a1:06:cb:97:b4:da:
88:dc:08:ce:ae:41:b5:7a:e2:f2:28:b0:c1:eb:0e:95:a9:d0:
fa:2d:72:5d:bd:71:fa:f1:10:d6:b0:7e:46:9a:4f:23:4a:c1:
65:61:13:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:51:49 2026 by rpki-client