Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35F7C658568311F1B3660405CF1D38B0.roa
File: 35F7C658568311F1B3660405CF1D38B0.roa (raw, json)
Hash identifier: tFNYtAvpOnImX6okqg76PkKiIgRz9KvQl3yn+8kYQaw=
Subject key identifier: 3A:6C:20:23:9E:3B:2D:64:12:EA:95:31:93:7F:5E:7A:99:8B:FC:88
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CE73
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35F7C658568311F1B3660405CF1D38B0.roa
Signing time: Sat 23 May 2026 08:41:37 +0000
ROA not before: Sat 23 May 2026 08:41:32 +0000
ROA not after: Fri 10 Jul 2026 08:41:32 +0000
asID: 395793
IP address blocks: 154.81.50.0/24 maxlen: 24
154.82.162.0/23 maxlen: 24
154.82.164.0/22 maxlen: 24
154.83.8.0/24 maxlen: 24
154.83.9.0/24 maxlen: 24
154.83.10.0/24 maxlen: 24
154.83.11.0/24 maxlen: 24
154.83.24.0/24 maxlen: 24
154.83.104.0/21 maxlen: 24
154.91.152.0/24 maxlen: 24
154.91.153.0/24 maxlen: 24
154.91.154.0/24 maxlen: 24
154.91.155.0/24 maxlen: 24
154.91.156.0/24 maxlen: 24
154.92.205.0/24 maxlen: 24
154.92.207.0/24 maxlen: 24
154.93.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118387 (0x1ce73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 23 08:41:32 2026 GMT
Not After : Jul 10 08:41:32 2026 GMT
Subject: CN=6a116841-a9a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ba:3f:57:a3:c6:45:b5:4f:93:98:b7:4d:25:
dc:a9:08:00:e2:6c:64:ef:d3:d0:17:28:88:f3:52:
78:ad:b0:13:92:c7:7a:db:6c:08:5f:17:ca:76:72:
64:56:6f:0d:a3:f1:83:be:0e:bd:7d:fb:7e:ee:ed:
74:fb:f5:6f:42:29:38:e5:bf:96:0d:10:9a:f4:e9:
ee:88:7e:11:dc:bb:62:fb:33:39:7f:dd:cf:f1:dd:
7d:33:06:24:d7:ad:07:52:4d:a8:93:b2:e7:85:b7:
18:de:da:1e:b5:96:4c:ad:5b:c1:fb:fc:db:73:82:
e8:dd:59:14:12:9a:d0:08:76:20:1b:1a:8b:cf:97:
54:e8:0c:4c:33:f6:b2:09:85:49:cc:ca:68:d9:64:
1e:a9:4d:ac:af:d0:12:a4:86:27:bc:47:ec:f1:72:
05:bd:bf:5e:bb:54:d4:7d:a9:ce:9a:4e:89:9f:4c:
25:2a:2a:c7:1f:d2:9f:9a:c3:31:fd:0c:55:66:4f:
a0:d2:d7:9f:61:73:6c:c9:20:7d:dc:ba:d7:88:fb:
3f:70:f7:4e:ba:b9:da:3f:b9:37:08:0d:50:66:8f:
91:7e:c1:bb:de:82:68:7c:be:49:a3:87:3c:d3:b3:
eb:e5:f8:43:b6:42:14:ad:94:a9:0e:c5:8f:f9:42:
11:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:6C:20:23:9E:3B:2D:64:12:EA:95:31:93:7F:5E:7A:99:8B:FC:88
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/35F7C658568311F1B3660405CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.50.0/24
154.82.162.0-154.82.167.255
154.83.8.0/22
154.83.24.0/24
154.83.104.0/21
154.91.152.0-154.91.156.255
154.92.205.0/24
154.92.207.0/24
154.93.0.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:56:e9:be:93:ce:94:62:f5:93:38:ae:35:7c:6f:29:b4:66:
9f:5d:45:c4:38:c1:1a:b2:e4:47:fe:ca:7c:0c:e4:cb:4c:4e:
98:cc:ba:f7:3f:a8:68:b5:4f:3c:92:f4:ae:b0:54:d1:7e:88:
5c:b3:2c:c7:6b:71:6c:8a:d7:51:8c:d1:c7:27:6a:9e:80:a1:
7d:db:30:18:ab:14:bd:d7:95:41:0c:55:cd:24:b8:24:52:56:
93:b3:b7:a3:68:19:63:30:04:c0:6c:d2:e4:b3:0c:75:da:f7:
a7:4e:52:cc:8f:e1:e9:9c:c6:2d:e1:6f:49:4b:5c:c9:76:55:
0d:ae:c0:20:04:29:33:45:40:09:ad:94:b9:d1:44:a9:aa:9b:
cb:be:c3:4b:10:6f:9f:db:ef:81:ca:84:8f:22:7d:af:ff:f2:
94:16:b6:3c:76:38:3e:24:e2:f0:11:ad:f0:05:70:a5:e2:dc:
29:c5:af:ba:48:85:2d:bc:bf:f4:75:80:40:41:29:c5:5f:34:
b2:99:f0:30:41:e5:89:cb:bd:df:85:01:2a:56:2b:6a:a4:7d:
04:29:95:37:85:50:b8:2e:f7:55:33:e1:52:6b:c0:ad:36:52:
0e:f0:85:45:79:4a:32:a9:1c:5c:24:c0:ed:35:98:82:64:a8:
db:4c:fd:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:30:53 2026 by rpki-client