Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52B833408B1711F19645FDA6CE1D38B0.roa
File: 52B833408B1711F19645FDA6CE1D38B0.roa (raw, json)
Hash identifier: KlIBsBEnYmMtKBtO/MW6Gm/0j3ft2YttA0pw5+GOxZ0=
Subject key identifier: A1:CC:D5:A0:1D:39:07:42:4D:4D:22:3F:70:8C:EC:7D:4D:C5:7C:3D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DBA3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52B833408B1711F19645FDA6CE1D38B0.roa
Signing time: Wed 29 Jul 2026 06:32:52 +0000
ROA not before: Wed 29 Jul 2026 06:32:47 +0000
ROA not after: Tue 01 Sep 2026 06:32:47 +0000
asID: 62240
IP address blocks: 154.194.36.0/24 maxlen: 24
154.194.59.0/24 maxlen: 24
154.194.67.0/24 maxlen: 24
154.194.207.0/24 maxlen: 24
154.223.218.0/24 maxlen: 24
154.223.219.0/24 maxlen: 24
154.223.220.0/24 maxlen: 24
154.223.221.0/24 maxlen: 24
154.223.222.0/24 maxlen: 24
154.223.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121763 (0x1dba3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 29 06:32:47 2026 GMT
Not After : Sep 1 06:32:47 2026 GMT
Subject: CN=6a699e94-37b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3f:32:b7:be:c1:6a:55:bf:b7:f0:34:b5:dd:
72:01:d9:94:97:9f:9e:4c:4b:25:a4:08:5c:99:fd:
66:c3:42:e2:f0:02:10:0e:c5:a5:34:ad:c6:0f:15:
c4:02:fe:b2:10:95:37:ea:5f:9f:ee:7a:3d:ab:79:
e1:7a:e1:60:a8:ef:13:27:f9:74:3f:9d:b5:25:f3:
d1:c7:21:a8:51:0f:81:d4:45:73:40:ff:ae:40:fb:
d3:cb:29:3d:c3:19:0e:2f:31:8d:de:6c:53:b2:fc:
cd:9e:36:ce:54:48:dd:63:4a:09:ee:f2:a3:61:98:
50:28:93:79:5b:61:b4:01:b6:6d:7b:5e:19:44:c9:
e1:cf:ed:3a:15:12:4f:0b:60:6b:7e:f9:f3:a9:8a:
87:db:fd:3e:ce:d7:92:95:1c:f7:58:ea:64:03:a6:
88:c7:0d:f3:6c:4c:51:df:e6:04:e9:44:ca:ce:69:
ab:62:a9:b4:28:82:aa:33:88:1e:a0:a9:ca:9f:ea:
1e:e6:f9:f1:f0:c9:e0:10:34:fd:3b:03:cb:ea:1e:
aa:fa:74:fd:10:73:14:76:1a:f9:45:92:65:cb:a6:
70:a3:c8:3c:a1:f0:43:dc:59:dd:66:5a:7d:99:f8:
92:e8:7d:66:ac:97:ec:3f:ea:18:61:29:fb:5d:60:
20:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:CC:D5:A0:1D:39:07:42:4D:4D:22:3F:70:8C:EC:7D:4D:C5:7C:3D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/52B833408B1711F19645FDA6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.36.0/24
154.194.59.0/24
154.194.67.0/24
154.194.207.0/24
154.223.218.0-154.223.223.255
Signature Algorithm: sha256WithRSAEncryption
32:26:b3:c9:8e:8d:03:c6:c6:d8:8a:3e:47:b3:d0:47:1f:cc:
c3:c5:60:20:42:4a:a2:d2:85:df:a1:db:9b:1c:3f:63:9e:b4:
90:cf:73:18:79:a7:ab:a2:f9:0c:d2:65:c5:8f:5f:88:fd:f8:
55:25:ea:3e:b1:02:a5:6f:ff:19:97:fb:ba:4b:19:c7:45:17:
a3:a9:13:5f:06:02:ff:56:ce:11:d7:02:4b:81:b7:71:ae:2b:
36:ca:bb:48:a7:12:39:dc:fb:bb:43:64:8a:2c:15:af:54:21:
89:69:cb:5e:19:40:ff:80:e6:4e:a9:db:af:40:d8:ae:83:ac:
2f:c3:32:43:23:f2:3d:59:2d:b1:87:ee:0b:37:dc:54:ff:ca:
a3:0c:48:41:0e:4a:8e:dc:bd:36:2d:74:22:b8:fe:16:0e:ad:
28:49:b1:bf:0b:1a:c6:35:72:a9:f5:c1:bc:75:4b:e7:31:87:
71:22:7d:a1:54:4b:db:0a:2f:31:86:2c:e0:b8:85:c0:ed:de:
36:7b:b6:3d:a8:61:6a:0d:9f:c7:c5:df:f4:64:a1:f5:4e:4b:
44:f5:c7:cd:a5:61:93:d2:30:77:00:65:70:51:ff:b5:c2:b0:
04:b5:70:cf:34:6a:08:fa:3a:f9:3c:28:29:50:de:13:be:c5:
6f:c4:cd:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:07:31 2026 by rpki-client