Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/598E7D5E6FFC11F1BFA96B11CF1D38B0.roa
File: 598E7D5E6FFC11F1BFA96B11CF1D38B0.roa (raw, json)
Hash identifier: FH47kjoria9yuGLpfajKnojNMrYKODnkoWeiie1GolI=
Subject key identifier: C4:12:57:CF:7A:B9:37:D3:7F:21:77:CD:6C:BB:ED:9E:93:CE:60:CC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D4EB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/598E7D5E6FFC11F1BFA96B11CF1D38B0.roa
Signing time: Wed 24 Jun 2026 18:41:45 +0000
ROA not before: Wed 24 Jun 2026 18:41:40 +0000
ROA not after: Fri 31 Jul 2026 18:41:40 +0000
asID: 62240
IP address blocks: 154.194.33.0/24 maxlen: 24
154.195.6.0/24 maxlen: 24
154.195.7.0/24 maxlen: 24
154.195.139.0/24 maxlen: 24
154.195.145.0/24 maxlen: 24
154.195.146.0/24 maxlen: 24
154.195.147.0/24 maxlen: 24
154.195.158.0/24 maxlen: 24
154.195.159.0/24 maxlen: 24
154.195.160.0/24 maxlen: 24
154.195.161.0/24 maxlen: 24
154.195.162.0/24 maxlen: 24
154.195.163.0/24 maxlen: 24
154.196.55.0/24 maxlen: 24
154.196.56.0/24 maxlen: 24
154.196.57.0/24 maxlen: 24
154.196.58.0/24 maxlen: 24
154.196.59.0/24 maxlen: 24
154.196.60.0/24 maxlen: 24
154.196.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 29 Jun 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120043 (0x1d4eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 18:41:40 2026 GMT
Not After : Jul 31 18:41:40 2026 GMT
Subject: CN=6a3c24e9-c036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ee:83:79:57:94:99:bd:0c:57:b5:46:b4:9a:
5f:34:40:f7:8b:88:d2:c2:b4:e6:91:47:60:6f:99:
dc:e0:ee:d6:58:d2:60:55:1c:5f:8d:99:ee:93:45:
ad:61:43:5f:54:60:63:4c:29:5b:46:92:4c:92:af:
dc:af:23:2f:35:88:fc:d5:f0:ec:5e:80:13:68:2a:
3e:31:fc:01:cf:02:62:42:db:f5:2a:94:d5:81:6b:
6a:3c:af:12:14:3d:e8:d5:ce:de:8d:54:16:7b:0a:
29:98:23:05:4f:1d:b4:7c:11:08:7c:7a:a8:ad:52:
e2:54:84:05:a7:bf:05:26:93:79:c2:6a:32:d9:41:
78:5f:88:c9:08:2e:b1:3f:bc:4b:55:59:c8:d1:35:
ab:27:fe:25:80:5f:3a:81:cd:3c:2d:2b:bb:98:b7:
e2:bd:e9:40:eb:1d:b0:00:d9:2e:ac:f9:6e:f4:13:
6a:c9:7d:6c:21:60:03:31:db:b7:a1:92:f6:3b:74:
38:73:05:2f:40:f0:bd:64:d8:c0:88:6f:25:4b:1a:
cc:8c:52:71:77:bb:ce:d9:f7:b9:42:23:bd:f0:64:
b9:77:b6:4e:84:0a:b8:72:8b:20:dc:6d:f9:96:60:
d2:36:c6:d3:cd:ba:ff:e6:56:7a:ff:6c:54:a2:6e:
48:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:12:57:CF:7A:B9:37:D3:7F:21:77:CD:6C:BB:ED:9E:93:CE:60:CC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/598E7D5E6FFC11F1BFA96B11CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.33.0/24
154.195.6.0/23
154.195.139.0/24
154.195.145.0-154.195.147.255
154.195.158.0-154.195.163.255
154.196.55.0-154.196.61.255
Signature Algorithm: sha256WithRSAEncryption
a4:aa:d5:ef:77:7d:bf:80:e9:cd:7c:06:2f:42:5d:99:d4:c2:
9f:c0:88:e7:62:19:73:df:73:8f:d5:17:a8:1c:82:db:c5:6d:
b2:d0:52:9c:ee:04:ed:d6:2d:30:73:4e:cb:c5:85:ef:3d:0a:
51:f9:69:d6:1c:8b:63:08:f4:14:2e:a6:55:b6:5d:68:9b:09:
30:a3:e4:7f:99:a0:b7:aa:c9:fd:73:10:c1:dc:17:d5:70:d3:
7f:bc:fc:2d:22:11:c4:26:80:af:be:5b:18:cd:3f:30:89:53:
60:a6:33:53:fc:70:9f:b6:d8:eb:45:4f:76:e8:a1:28:77:f3:
76:6e:04:12:bd:83:f5:a2:d1:a3:8d:73:eb:9c:68:ba:66:0e:
a8:66:0a:c3:27:ed:f0:aa:39:5f:17:fd:5e:c8:d4:9a:03:f5:
88:e2:96:f1:aa:f1:81:46:30:66:b2:0f:ac:b1:25:77:df:12:
c2:31:b3:f4:48:df:56:cc:9e:83:19:f1:09:9a:f3:66:41:f9:
6d:4b:5c:9e:cf:be:46:c0:a9:43:2e:27:c5:a8:dc:0f:69:e0:
c4:b1:14:ca:30:37:da:f3:1c:e3:8d:7e:9d:f0:52:69:81:5a:
5b:e3:8c:cc:de:97:93:6d:43:87:d6:2d:22:62:f8:bd:fc:16:
7f:65:fc:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 17:41:16 2026 by rpki-client