Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C832EC4760F11F1B1FA1F0ACF1D38B0.roa
File: 5C832EC4760F11F1B1FA1F0ACF1D38B0.roa (raw, json)
Hash identifier: 7PnImrk8liWh4WNTB0i7O9jKKg+NGGHWNPYVil5RwbM=
Subject key identifier: B6:20:A0:AA:11:FD:44:59:68:09:2B:39:2B:DE:DF:F3:C9:8A:B5:83
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D68E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C832EC4760F11F1B1FA1F0ACF1D38B0.roa
Signing time: Thu 02 Jul 2026 12:12:58 +0000
ROA not before: Thu 02 Jul 2026 12:12:53 +0000
ROA not after: Sat 25 Jul 2026 12:12:53 +0000
asID: 9304
IP address blocks: 154.200.130.0/24 maxlen: 24
154.200.131.0/24 maxlen: 24
154.200.140.0/24 maxlen: 24
154.200.142.0/24 maxlen: 24
154.200.154.0/24 maxlen: 24
154.200.156.0/24 maxlen: 24
154.200.157.0/24 maxlen: 24
154.200.158.0/24 maxlen: 24
154.200.159.0/24 maxlen: 24
154.200.160.0/24 maxlen: 24
154.200.161.0/24 maxlen: 24
154.200.162.0/24 maxlen: 24
154.200.191.0/24 maxlen: 24
154.211.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120462 (0x1d68e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 2 12:12:53 2026 GMT
Not After : Jul 25 12:12:53 2026 GMT
Subject: CN=6a4655ca-8b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:62:bc:33:7d:f4:d0:b6:04:1f:c9:d8:d6:aa:
ae:04:1d:cf:73:a4:d2:3c:75:4f:9e:0b:59:d0:61:
93:70:b7:41:7e:6a:86:17:57:42:b3:65:f5:1c:a4:
7f:8b:a7:6b:34:29:3d:d1:b1:2c:e8:31:32:ff:36:
1b:eb:a2:e3:14:7b:ec:bf:7e:b1:c7:4b:14:9c:89:
d9:7a:96:fa:1b:a6:12:06:09:29:61:8d:50:0e:c7:
a5:9d:c8:f2:8b:31:98:f2:1c:fe:a4:58:c8:40:a7:
f4:1d:3b:fa:a9:cf:0d:36:65:49:de:b4:20:87:38:
51:ba:73:37:09:85:2a:1f:c4:2f:7c:72:1c:77:81:
7f:06:16:85:b0:4d:a1:96:7b:93:20:77:6c:81:a0:
4f:54:79:98:1c:dd:79:1c:d0:ea:eb:80:3b:5d:8d:
48:7e:14:b2:c1:f1:f6:5e:b2:94:0f:4a:c3:7a:62:
39:37:60:65:7e:e8:2e:84:ee:44:f4:1d:b5:c2:a4:
b7:36:5a:7f:50:30:72:86:fd:6b:5a:90:f9:97:b3:
07:3e:ca:4e:ea:b2:a0:e3:34:fa:53:58:70:72:2f:
95:06:4c:b7:f4:46:f6:b8:b6:62:c0:ac:59:5f:1c:
93:b5:e3:6d:83:b0:3a:f4:e6:e0:64:4d:91:cf:84:
53:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:20:A0:AA:11:FD:44:59:68:09:2B:39:2B:DE:DF:F3:C9:8A:B5:83
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C832EC4760F11F1B1FA1F0ACF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.130.0/23
154.200.140.0/24
154.200.142.0/24
154.200.154.0/24
154.200.156.0-154.200.162.255
154.200.191.0/24
154.211.211.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:d6:5b:5d:e2:0a:bf:d5:fa:8b:0f:75:9d:69:0a:29:a6:2c:
3d:aa:ad:3c:d3:1f:5d:66:25:eb:c8:30:3e:49:e1:cd:55:dc:
5e:a1:5e:66:3b:07:c8:b9:7c:6e:49:69:af:ff:62:91:77:e1:
6c:df:af:ce:18:de:f2:12:cb:81:59:b7:a5:dd:00:6a:e0:bc:
05:3b:69:f6:5b:bc:05:cf:49:7f:6d:57:56:77:a1:1c:e0:a9:
60:a4:4c:67:14:83:f3:5f:e4:02:b5:43:69:50:eb:8f:c2:bd:
f0:1b:79:3c:e7:28:bf:f2:76:6d:61:c7:00:28:9a:98:81:ad:
fd:06:50:06:f0:c0:76:da:fc:21:f5:3f:71:dc:77:05:c9:0f:
c4:c7:29:29:92:06:d4:ca:5a:b5:55:60:f3:0a:02:d7:5a:11:
fe:d0:57:04:a0:24:13:30:68:75:3b:4b:d4:8e:b9:88:5d:f0:
99:13:01:5f:12:38:ca:74:89:d8:7c:f6:f7:ed:44:cb:14:9a:
6f:a6:8f:62:42:2b:be:26:04:e4:ff:c5:7e:f9:05:72:e3:7a:
dc:49:11:07:ad:44:a0:61:36:06:ee:ea:c4:76:ac:b8:f0:60:
66:70:50:3c:76:40:89:46:8e:9c:df:ae:e4:1d:4b:90:7f:7c:
d7:39:5d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:29 2026 by rpki-client