Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FC1EE128D8711F1A0473B05CF1D38B0.roa
File: 3FC1EE128D8711F1A0473B05CF1D38B0.roa (raw, json)
Hash identifier: TeWazXq2huNSJSQHFobXpuraZQIrc1PyVx/Y/5AZlls=
Subject key identifier: 10:5B:A4:60:72:E3:E2:44:50:F0:A3:F6:66:38:07:93:96:5D:6F:F3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DC22
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FC1EE128D8711F1A0473B05CF1D38B0.roa
Signing time: Sat 01 Aug 2026 08:59:06 +0000
ROA not before: Sat 01 Aug 2026 08:59:02 +0000
ROA not after: Sun 06 Sep 2026 08:59:02 +0000
asID: 44559
IP address blocks: 154.209.19.0/24 maxlen: 24
154.209.144.0/24 maxlen: 24
154.209.145.0/24 maxlen: 24
154.209.152.0/24 maxlen: 24
154.209.153.0/24 maxlen: 24
154.209.154.0/24 maxlen: 24
154.209.155.0/24 maxlen: 24
154.209.157.0/24 maxlen: 24
154.209.158.0/24 maxlen: 24
154.209.195.0/24 maxlen: 24
154.209.196.0/24 maxlen: 24
154.209.205.0/24 maxlen: 24
154.209.207.0/24 maxlen: 24
154.218.27.0/24 maxlen: 24
154.219.193.0/24 maxlen: 24
154.219.194.0/24 maxlen: 24
154.219.197.0/24 maxlen: 24
154.219.200.0/24 maxlen: 24
154.219.204.0/24 maxlen: 24
154.219.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121890 (0x1dc22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 1 08:59:02 2026 GMT
Not After : Sep 6 08:59:02 2026 GMT
Subject: CN=6a6db55a-b2f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:bc:a1:f4:1a:e8:6f:88:ab:47:cc:f5:f6:82:
f0:5f:27:46:17:23:dd:40:e1:98:9a:8d:c1:6b:f2:
31:1b:b7:18:c6:18:14:e3:b6:01:78:8d:2a:9c:c8:
b3:70:32:e2:8a:e5:b5:97:68:cb:a2:e5:21:e7:36:
43:b8:8b:45:34:b8:57:8f:c5:73:ab:bd:7a:be:13:
08:5a:84:a2:73:83:d1:0d:55:0a:66:9f:23:3c:01:
4f:84:3a:41:2e:98:79:83:3b:40:a1:ee:dd:33:08:
00:fc:f2:f0:88:25:de:e3:d5:76:c7:24:ed:e7:33:
36:7f:fb:7f:7b:28:86:5f:35:a3:c1:89:a3:f1:e4:
96:06:19:74:a7:d7:42:ad:48:26:b8:c3:6f:f3:a9:
1f:d6:3b:92:16:1e:83:02:a7:4e:f1:a6:55:d0:b1:
12:d6:c4:6a:67:7e:44:7a:9d:9a:c1:fc:d5:78:a0:
bd:08:06:9e:c7:ec:5c:cf:79:26:ff:45:a3:56:64:
43:cf:47:3a:4f:00:a2:e8:4d:7a:e9:42:f3:dd:7a:
7b:16:08:00:f9:97:4f:cd:6d:79:04:86:ef:8b:c9:
ca:38:a0:3c:50:02:e0:0f:b6:82:56:d8:4d:2c:54:
46:c3:fa:74:f6:b1:71:6e:69:c7:59:df:db:41:3a:
f1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:5B:A4:60:72:E3:E2:44:50:F0:A3:F6:66:38:07:93:96:5D:6F:F3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3FC1EE128D8711F1A0473B05CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.19.0/24
154.209.144.0/23
154.209.152.0/22
154.209.157.0-154.209.158.255
154.209.195.0-154.209.196.255
154.209.205.0/24
154.209.207.0/24
154.218.27.0/24
154.219.193.0-154.219.194.255
154.219.197.0/24
154.219.200.0/24
154.219.204.0/24
154.219.206.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:52:6f:a8:ac:6f:1c:12:14:2c:7b:dc:47:32:e9:9a:94:a7:
d4:5e:a6:c3:46:d9:d7:87:15:44:d2:e4:eb:c9:5d:42:df:4c:
91:5a:d1:94:da:b9:f6:d7:d5:ab:1e:70:0a:35:bc:b6:44:0c:
cc:0e:85:5a:6c:63:38:b6:89:4c:78:48:99:7d:aa:34:97:03:
1f:7f:84:ff:1b:e2:53:84:00:4d:ed:0a:94:db:06:ac:da:c2:
70:6e:fc:3f:c4:67:dc:76:0c:82:50:d3:c9:54:83:11:f0:9e:
80:55:7b:88:7f:0d:ca:71:ca:70:be:b7:14:2e:a2:b2:86:bc:
86:91:85:6b:cd:ec:dd:5b:21:5c:e8:5d:c0:6e:4f:aa:58:a2:
9e:e5:98:9d:9c:62:5a:ae:5e:3a:2c:d3:9f:af:b4:8d:d6:83:
fc:ab:c6:c3:f3:4a:17:18:98:c8:92:0a:5a:01:d7:2d:b4:4b:
6a:ab:01:42:f6:4a:ef:ce:70:ff:d5:96:35:50:dc:f9:b0:b6:
1c:63:13:9a:0f:23:f4:df:d1:41:40:c5:6a:46:9d:5a:4f:97:
4d:24:5f:16:52:5d:67:93:2d:5f:5a:47:aa:c2:fc:27:d3:dd:
dc:7e:16:3f:dd:8f:21:d0:43:95:b3:08:ed:18:50:a0:17:cf:
27:aa:6e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:07:38 2026 by rpki-client