Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F925ED87D7111F1A0985919CF1D38B0.roa
File: 4F925ED87D7111F1A0985919CF1D38B0.roa (raw, json)
Hash identifier: bXsEIsYUy+WuWZybWDiRYQ4Bhubf3XKKc3IFFGErV0c=
Subject key identifier: 11:02:59:8C:83:78:B3:34:43:41:08:E8:D3:B7:B3:45:72:46:5A:7B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D85A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F925ED87D7111F1A0985919CF1D38B0.roa
Signing time: Sat 11 Jul 2026 21:41:45 +0000
ROA not before: Sat 11 Jul 2026 21:41:40 +0000
ROA not after: Tue 10 Jul 2029 21:41:40 +0000
asID: 17561
IP address blocks: 154.198.208.0/24 maxlen: 24
154.198.209.0/24 maxlen: 24
154.198.210.0/24 maxlen: 24
154.198.211.0/24 maxlen: 24
154.198.212.0/24 maxlen: 24
154.198.213.0/24 maxlen: 24
154.198.214.0/24 maxlen: 24
154.198.215.0/24 maxlen: 24
154.198.216.0/24 maxlen: 24
154.198.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120922 (0x1d85a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 11 21:41:40 2026 GMT
Not After : Jul 10 21:41:40 2029 GMT
Subject: CN=6a52b899-72da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:61:d0:b7:cf:a6:02:8e:af:b8:75:27:12:72:
5c:c9:fb:a4:26:1c:53:98:32:37:0a:d0:3a:e2:cf:
39:21:61:0c:7d:4f:97:e9:c2:36:ba:b8:c3:0a:39:
26:73:3d:09:48:91:d6:ca:bf:7d:03:01:28:0b:a3:
fe:a2:f5:6a:94:c5:dc:4e:cc:9b:01:a0:9c:2b:7a:
5f:bd:db:23:70:35:23:db:2e:eb:06:98:98:7b:9e:
c9:eb:28:5b:6c:9f:57:d8:1e:89:67:6c:33:0d:d3:
3f:1c:12:4e:f6:5a:06:26:95:5e:68:14:ab:af:6f:
68:dd:86:90:f8:e3:b3:8e:3e:32:76:45:d9:a8:5a:
2e:b8:6b:1c:e0:1a:a3:05:f8:67:52:bf:52:a5:f6:
13:b7:77:2d:7f:40:f1:9d:76:c2:4e:b4:fa:02:de:
d3:4a:62:20:10:a3:82:df:6b:88:1c:2a:cc:5d:ad:
87:34:d0:c2:6b:ad:37:8a:72:3e:ad:ac:e4:87:57:
75:29:bf:8c:73:9a:c0:67:f3:f9:b6:8a:c8:68:25:
21:11:74:eb:e4:fd:4b:77:a2:2e:b8:24:dc:fd:32:
d2:70:02:7d:c4:14:a2:84:30:72:2f:21:b5:ce:d9:
e6:91:79:3e:d4:72:66:1c:ef:a0:5d:e6:74:02:fd:
eb:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:02:59:8C:83:78:B3:34:43:41:08:E8:D3:B7:B3:45:72:46:5A:7B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4F925ED87D7111F1A0985919CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.208.0-154.198.217.255
Signature Algorithm: sha256WithRSAEncryption
c0:d9:a9:51:6e:d8:4b:6b:65:38:8c:5f:70:93:e7:28:48:fa:
33:a0:e5:80:62:37:4e:0b:ec:26:c3:ef:c2:ad:75:3c:2e:cf:
1c:fe:16:0f:ca:51:33:aa:d2:68:01:0a:a1:18:b5:b5:2d:4f:
88:a9:67:af:38:ad:6a:4e:4f:4f:fb:e8:0b:62:1a:42:ac:56:
1d:59:d5:3d:2c:13:01:89:bc:b9:4b:9f:6d:db:81:9c:a9:b0:
21:d6:12:d6:0a:bb:13:25:2f:2c:2a:7f:e0:ce:7b:61:d2:f2:
0c:dd:a4:b2:32:71:32:b3:32:5c:7a:ab:e7:a1:0a:fb:dd:f1:
f0:2a:2f:83:4e:c2:10:03:37:69:cd:c8:b0:43:65:64:2f:06:
a2:be:21:8d:39:41:05:57:0d:2e:31:39:32:aa:3a:8b:23:cf:
67:0d:5a:61:ef:20:6d:5e:aa:05:03:42:37:4b:0c:b2:19:d4:
a6:7b:7a:73:71:3f:ab:b8:5c:96:b2:92:17:aa:38:c7:7e:b5:
8d:33:23:da:52:b2:8d:be:48:c3:49:35:e0:92:71:c7:e2:19:
da:c0:8e:86:41:21:76:8e:4b:2c:34:3c:05:ad:26:51:7e:d3:
59:5d:04:82:37:98:56:e2:9f:fa:80:0b:cf:9b:b9:e2:6d:11:
27:26:f6:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:28 2026 by rpki-client