Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C8C5894949311F1B7B251C0CE1D38B0.roa
File: 5C8C5894949311F1B7B251C0CE1D38B0.roa (raw, json)
Hash identifier: olRHyjEATJq2PwIX8s3CNjyIXMe4ifx0D0jplvj3Cfc=
Subject key identifier: 04:85:60:57:DB:44:EB:E7:0E:70:A1:1F:7A:67:4C:93:34:D7:9A:CD
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DDD4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C8C5894949311F1B7B251C0CE1D38B0.roa
Signing time: Mon 10 Aug 2026 08:13:26 +0000
ROA not before: Mon 10 Aug 2026 08:13:22 +0000
ROA not after: Thu 17 Sep 2026 08:13:22 +0000
asID: 22773
IP address blocks: 154.198.30.0/24 maxlen: 24
154.202.80.0/24 maxlen: 24
154.202.81.0/24 maxlen: 24
154.202.82.0/24 maxlen: 24
154.202.83.0/24 maxlen: 24
154.202.84.0/24 maxlen: 24
154.202.85.0/24 maxlen: 24
154.202.88.0/24 maxlen: 24
154.202.108.0/24 maxlen: 24
154.202.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Aug 2026 00:07:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122324 (0x1ddd4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 10 08:13:22 2026 GMT
Not After : Sep 17 08:13:22 2026 GMT
Subject: CN=6a798826-e9b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ba:3d:2a:23:7b:3d:5f:00:19:fa:4f:7b:0a:
50:28:f5:51:55:fe:9d:7b:a5:fa:17:3f:ea:1c:27:
d6:38:12:6b:1c:16:9f:45:7b:ac:ec:6b:80:67:64:
61:d8:bd:68:64:9e:77:07:e8:ad:7a:0e:7b:49:6b:
1c:f6:99:15:4f:a9:b4:7b:38:d4:3c:16:f7:72:13:
05:22:89:59:4d:a5:9f:40:87:3b:12:1b:ed:93:f2:
ec:67:81:8d:3e:cd:ea:86:fa:92:d2:cf:42:c9:ea:
c6:82:96:6e:33:b2:3c:92:01:5a:08:94:49:e7:ef:
5d:09:e4:55:87:76:14:55:f0:18:0c:6f:aa:6f:0e:
40:87:28:fb:4d:52:90:0b:d0:53:21:e9:82:3a:c6:
72:d0:49:44:56:22:e1:87:02:20:c0:da:81:d9:9a:
01:6c:7a:63:83:da:38:be:c1:3d:93:78:38:85:ee:
b6:22:d1:af:fe:ac:a2:18:0c:7b:54:db:5f:70:ec:
bb:0b:74:09:72:55:2c:7b:03:96:b1:ae:36:7d:1e:
e1:40:5e:aa:43:ca:ca:71:4e:33:70:11:e2:61:6d:
9a:57:a1:83:a3:47:5f:4b:27:b1:a7:50:d6:1a:f2:
06:e0:78:25:d0:a9:e0:a6:8f:bd:a0:1b:a6:f1:2c:
7f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:85:60:57:DB:44:EB:E7:0E:70:A1:1F:7A:67:4C:93:34:D7:9A:CD
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C8C5894949311F1B7B251C0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.30.0/24
154.202.80.0-154.202.85.255
154.202.88.0/24
154.202.108.0/24
154.202.111.0/24
Signature Algorithm: sha256WithRSAEncryption
59:1a:77:90:dd:65:0a:13:d3:2d:a9:13:db:44:5a:69:11:8f:
fa:8d:76:5b:25:6b:3a:7f:d4:93:ba:8f:c1:cb:67:3a:30:94:
47:6d:f5:00:3d:ba:fd:60:51:77:c0:67:86:22:bc:77:bd:d6:
89:59:f7:35:40:55:f3:ee:1c:1f:d9:23:64:50:7d:e0:fe:80:
b8:ab:7e:18:56:5f:b9:5e:5e:f8:c2:c8:84:43:d8:b8:af:b1:
15:fd:f9:dc:6c:ff:1e:9b:73:ef:d5:76:f0:1f:72:48:9c:41:
e6:b5:d5:fb:d6:a2:72:4c:69:13:cf:6a:72:29:71:cc:c9:40:
6f:e4:f5:d9:55:af:31:76:85:70:8f:38:c4:54:c6:2b:df:f0:
9f:99:a1:a7:0c:f7:fb:19:20:5d:61:6f:62:85:6e:94:04:d9:
27:59:7f:d8:ab:16:18:0c:7a:53:79:3e:01:37:5d:d4:4d:6f:
c3:33:d5:30:5d:1c:b9:18:bd:9d:81:d6:b4:ce:99:04:e0:72:
3f:1e:0d:01:76:1b:6f:1c:43:54:ac:e5:0a:f0:b6:36:a5:a0:
b4:2c:c3:ca:1b:72:b5:19:3b:e4:4a:39:54:85:fa:9e:f1:c3:
1f:e2:e3:e4:06:64:ba:be:c7:ac:90:d2:2f:3d:89:90:fc:7a:
e3:28:1b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 05:14:38 2026 by rpki-client