Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/299CC67C5FE011F1B0C506F1CE1D38B0.roa
File: 299CC67C5FE011F1B0C506F1CE1D38B0.roa (raw, json)
Hash identifier: quQdv9/OfPd+aEnE8DExXh1TVsNCJhxWdEkd7tVpnt4=
Subject key identifier: 59:66:6B:28:E8:5C:7A:67:27:B3:C8:1E:50:A2:24:9E:D7:1E:56:81
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D182
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/299CC67C5FE011F1B0C506F1CE1D38B0.roa
Signing time: Thu 04 Jun 2026 06:39:40 +0000
ROA not before: Thu 04 Jun 2026 06:39:35 +0000
ROA not after: Sun 16 Aug 2026 06:39:35 +0000
asID: 9294
IP address blocks: 154.196.96.0/19 maxlen: 24
154.199.192.0/20 maxlen: 24
154.204.16.0/20 maxlen: 24
154.205.32.0/20 maxlen: 24
154.206.224.0/20 maxlen: 24
154.208.176.0/20 maxlen: 24
154.210.32.0/19 maxlen: 24
154.210.64.0/19 maxlen: 24
154.210.240.0/20 maxlen: 24
154.220.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 13 Jun 2026 00:07:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119170 (0x1d182)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 4 06:39:35 2026 GMT
Not After : Aug 16 06:39:35 2026 GMT
Subject: CN=6a211dac-d3a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:50:95:61:fd:5e:1f:ff:ff:4e:6b:1e:98:e2:
3d:bb:31:92:2e:04:54:e3:da:fb:a2:e4:b1:d3:1d:
f1:9c:d6:34:14:13:a6:d5:23:9b:f3:a1:30:70:01:
3d:f7:93:8d:b7:ff:69:93:6e:aa:0e:ee:94:1c:9f:
31:b2:ad:bd:43:44:04:3a:56:ef:b8:2f:de:fb:1e:
4c:ed:42:7f:a7:49:3b:fd:8b:6e:5d:6b:e7:47:fa:
32:54:f0:4c:fd:ec:b6:91:9b:40:c5:21:43:99:ad:
00:fc:0d:10:12:66:ad:04:4b:56:a2:2a:30:35:9d:
3b:a0:a2:2c:b0:69:f8:0c:03:89:e1:bc:11:fe:d3:
8a:90:0d:3e:95:93:65:74:a5:47:55:b7:9d:33:b5:
9c:a3:87:b0:1b:81:c8:77:62:c6:f9:4d:75:4b:a3:
d6:2f:e5:4f:e8:8e:1b:8d:23:92:51:27:fe:ed:2e:
c3:a3:2e:7e:7d:42:d7:cb:fe:87:92:79:d9:f4:1f:
cb:ee:1a:f4:a2:d6:10:54:e7:0c:24:45:15:98:9d:
d4:e1:4a:ae:48:71:f1:8f:a7:f2:54:69:df:65:4e:
43:28:ec:38:66:55:c2:84:0f:e7:ec:17:a6:9b:f6:
65:51:92:2e:56:26:1a:e3:ee:d9:06:67:7a:3d:a5:
79:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:66:6B:28:E8:5C:7A:67:27:B3:C8:1E:50:A2:24:9E:D7:1E:56:81
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/299CC67C5FE011F1B0C506F1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.96.0/19
154.199.192.0/20
154.204.16.0/20
154.205.32.0/20
154.206.224.0/20
154.208.176.0/20
154.210.32.0-154.210.95.255
154.210.240.0/20
154.220.224.0/19
Signature Algorithm: sha256WithRSAEncryption
35:9f:14:6b:26:fa:f5:20:e1:c1:27:a2:b7:f0:c4:bf:eb:4a:
64:15:09:69:59:ae:7b:c6:fd:d7:2d:52:61:d7:6f:e1:93:5b:
8e:e9:12:cf:75:0c:f3:cf:03:f9:93:31:23:a5:d9:ce:d2:d0:
b2:a8:ed:7c:26:c2:8b:70:42:81:44:ed:0e:1f:ce:66:f0:56:
68:b3:91:46:9a:2d:f5:52:b2:df:8d:fa:24:fe:87:54:b4:b3:
a9:bc:f2:5e:83:b0:ff:fc:e9:fa:78:0a:47:b9:63:c3:e1:e4:
4a:5c:3e:1e:ac:2c:7a:0c:60:2e:9a:72:82:1d:ed:4b:a5:1f:
a2:cd:fe:f8:a1:ed:f4:07:f6:ef:d0:a2:82:5b:df:39:65:1c:
f9:7e:d2:0a:1d:7e:91:05:8e:ad:40:d3:bc:af:80:46:e7:a4:
2e:76:c0:f6:fa:1d:a4:4c:6c:6e:06:2e:1c:5a:e7:1b:03:e9:
4b:39:60:18:64:17:a1:d0:95:e4:0f:76:20:db:94:25:48:e3:
8a:93:c4:06:1e:d4:91:b6:42:a5:37:59:d4:21:17:10:69:eb:
66:4f:fa:66:76:a7:22:d3:3c:f7:20:22:94:25:6c:95:ac:8a:
60:34:4e:c4:af:a3:94:7d:e8:04:c3:8d:44:20:f4:6a:34:35:
73:a4:5e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:49:20 2026 by rpki-client