Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/56814744739511F1AF7700FECE1D38B0.roa
File: 56814744739511F1AF7700FECE1D38B0.roa (raw, json)
Hash identifier: zJXldAKfsibUitpSgYFGVvZaUR6WZxtTYRUcSarFark=
Subject key identifier: 3E:A1:EE:80:88:68:DE:AB:80:AC:1B:FC:95:AA:26:83:A7:87:02:8D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D5E6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/56814744739511F1AF7700FECE1D38B0.roa
Signing time: Mon 29 Jun 2026 08:34:27 +0000
ROA not before: Mon 29 Jun 2026 08:34:22 +0000
ROA not after: Thu 06 Aug 2026 08:34:22 +0000
asID: 202656
IP address blocks: 154.218.31.0/24 maxlen: 24
154.219.217.0/24 maxlen: 24
154.219.218.0/24 maxlen: 24
154.219.219.0/24 maxlen: 24
154.219.220.0/24 maxlen: 24
154.219.221.0/24 maxlen: 24
154.219.223.0/24 maxlen: 24
154.219.224.0/24 maxlen: 24
154.219.225.0/24 maxlen: 24
154.219.226.0/24 maxlen: 24
154.219.227.0/24 maxlen: 24
154.219.228.0/24 maxlen: 24
154.219.229.0/24 maxlen: 24
154.219.231.0/24 maxlen: 24
154.219.233.0/24 maxlen: 24
154.219.234.0/24 maxlen: 24
154.219.235.0/24 maxlen: 24
154.219.236.0/24 maxlen: 24
154.221.62.0/24 maxlen: 24
154.221.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Jul 2026 17:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120294 (0x1d5e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 29 08:34:22 2026 GMT
Not After : Aug 6 08:34:22 2026 GMT
Subject: CN=6a422e13-dc66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:55:21:58:ef:a9:fc:44:12:3c:4a:6f:dc:47:
59:4d:dc:7a:b9:9c:d3:b4:ae:93:92:85:49:70:90:
27:30:38:8c:5a:21:a4:eb:35:9a:22:84:b4:fc:e8:
b9:20:72:3f:87:15:4f:af:47:df:c8:51:91:f3:35:
9d:1f:0a:82:33:f0:1f:53:75:2c:c8:ed:e2:c9:08:
99:f5:9d:e1:8a:21:3f:d5:b9:30:41:38:79:04:2e:
a3:91:9c:48:3a:1b:f0:f8:59:db:d4:36:a7:fe:2c:
9c:77:7f:8d:72:5d:03:df:23:da:c3:f1:ee:0e:d9:
fc:6d:af:02:ce:1b:05:37:8f:a8:72:60:89:a7:51:
9e:8a:ae:c7:60:96:a8:1c:79:01:14:a4:4b:ed:97:
81:6c:bb:5e:a9:ed:6f:28:da:45:b7:60:24:6c:01:
3b:9e:ec:7c:c7:33:af:96:26:db:59:0d:ca:a9:8f:
fb:c7:59:f4:d6:94:ec:a2:30:85:88:3c:6d:a9:8d:
06:41:99:bd:84:93:d4:56:d6:50:d0:ff:29:b2:3a:
7f:c6:73:72:fd:1a:fe:b9:5e:78:65:da:c9:97:4e:
12:53:90:7e:38:e9:52:bf:9c:78:ad:59:17:05:e7:
0c:50:a7:12:db:4c:91:6b:7b:2b:1c:31:80:97:a3:
29:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:A1:EE:80:88:68:DE:AB:80:AC:1B:FC:95:AA:26:83:A7:87:02:8D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/56814744739511F1AF7700FECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.31.0/24
154.219.217.0-154.219.221.255
154.219.223.0-154.219.229.255
154.219.231.0/24
154.219.233.0-154.219.236.255
154.221.62.0/23
Signature Algorithm: sha256WithRSAEncryption
7a:22:cf:cb:fb:07:99:e5:c4:c3:71:55:01:29:4d:18:d5:fe:
35:de:cf:89:eb:d2:7f:e7:c8:5e:57:d0:1c:8d:c5:9d:63:27:
ae:32:77:03:11:94:0d:af:0d:27:1c:e8:16:d9:48:18:5b:de:
5d:55:32:d3:f0:e8:2c:0d:c1:3a:68:68:8f:a9:7b:de:52:ca:
60:b2:da:a8:f2:54:26:e8:0c:7c:14:b4:63:02:b4:72:4d:cf:
ad:37:0c:6b:aa:fa:db:b2:0b:72:3d:2c:bc:9b:f9:82:6f:c8:
2f:69:b9:32:f4:d6:e2:b6:fe:bd:76:d9:d4:2c:d1:73:c7:ff:
ca:28:5d:2e:20:fd:46:5f:c7:3b:cb:ab:57:b6:c8:bb:5b:58:
82:1d:03:55:9d:8f:92:6c:66:d3:9f:aa:09:a5:6a:12:d1:34:
68:b0:e8:56:38:02:4d:63:ed:36:fb:2e:37:22:c0:1e:84:7b:
98:15:99:8f:04:d3:81:f3:de:21:b0:cf:29:be:1c:ad:96:c8:
47:29:7c:6a:a8:e4:43:59:52:bc:0e:ae:4a:5c:fa:4d:dc:4a:
37:c0:4f:cd:4f:0d:87:cf:c3:f5:c8:18:ff:0b:77:a1:21:8b:
97:d1:66:8c:ce:3b:68:0a:2b:1e:55:ae:b0:d4:69:68:5d:01:
a2:59:c9:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:41:51 2026 by rpki-client