Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E702C2C6FAD11F1B2C896BBCE1D38B0.roa
File: 5E702C2C6FAD11F1B2C896BBCE1D38B0.roa (raw, json)
Hash identifier: P2W1ntg5i89CJZYRiWVG7nQ5JgmzhRBuAVvpCQ/NGC4=
Subject key identifier: 7B:29:4B:56:3A:5D:B3:45:35:FF:3F:60:0A:6A:AC:7C:E2:04:3A:FA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D4AF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E702C2C6FAD11F1B2C896BBCE1D38B0.roa
Signing time: Wed 24 Jun 2026 09:16:23 +0000
ROA not before: Wed 24 Jun 2026 09:16:18 +0000
ROA not after: Sat 01 Aug 2026 09:16:18 +0000
asID: 62240
IP address blocks: 154.85.26.0/24 maxlen: 24
154.85.97.0/24 maxlen: 24
154.85.99.0/24 maxlen: 24
154.90.1.0/24 maxlen: 24
154.90.129.0/24 maxlen: 24
154.90.130.0/24 maxlen: 24
154.90.131.0/24 maxlen: 24
154.90.142.0/24 maxlen: 24
154.90.143.0/24 maxlen: 24
154.90.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 29 Jun 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119983 (0x1d4af)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 09:16:18 2026 GMT
Not After : Aug 1 09:16:18 2026 GMT
Subject: CN=6a3ba067-9378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fa:66:62:46:74:4d:28:39:6d:6c:2b:76:d8:
32:18:89:f5:f2:79:a9:fa:1b:e5:80:17:36:98:ee:
ce:b0:8f:a1:c2:46:b4:b6:aa:eb:3e:7b:76:ff:13:
bb:e0:2d:c5:77:06:09:37:78:ff:ae:ea:1a:b9:b5:
d3:11:04:ec:62:a6:7e:26:d2:55:ad:d2:26:41:97:
9f:53:58:b1:7d:a2:68:9c:31:47:92:bc:5b:1b:7d:
68:eb:fc:44:c7:7d:83:25:8e:e3:2a:42:10:c1:82:
3c:8b:8e:b9:25:4f:d1:1f:f0:c8:28:52:76:a3:4f:
e4:a3:cb:88:43:70:95:a5:cd:77:69:6d:8d:29:ce:
3e:e9:55:c1:11:67:94:3e:05:61:72:36:4f:10:33:
b3:8a:52:17:b5:f4:d5:a3:87:53:9c:f3:f5:2c:b4:
00:85:d7:c2:54:67:6e:87:4a:44:09:b2:34:01:51:
e9:20:db:82:2e:3d:38:df:fc:64:0d:b2:e7:84:5e:
4c:3d:fc:5a:a5:55:a1:db:66:60:0a:bc:8b:71:77:
b7:a9:a6:fb:a6:27:f2:34:a8:8e:c0:ff:19:7a:28:
ca:c7:89:50:82:88:8f:fb:ff:3b:ae:ef:1e:1f:e7:
a2:83:78:a9:35:be:47:71:81:ec:71:d9:ff:52:26:
c9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:29:4B:56:3A:5D:B3:45:35:FF:3F:60:0A:6A:AC:7C:E2:04:3A:FA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5E702C2C6FAD11F1B2C896BBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.26.0/24
154.85.97.0/24
154.85.99.0/24
154.90.1.0/24
154.90.129.0-154.90.131.255
154.90.142.0/23
154.90.172.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:83:8b:2a:b0:72:66:79:24:fd:92:df:35:a5:b0:6d:33:03:
df:3c:97:80:74:17:0f:6a:8b:e0:19:4c:df:d2:41:25:68:a1:
55:78:97:f5:0f:e2:94:38:23:a4:d2:7f:fd:69:22:5e:e5:57:
1c:60:1e:70:63:c5:67:59:d2:b3:33:bc:32:a0:7e:71:7c:73:
b3:51:8c:1c:b6:df:14:ba:a8:26:02:99:e5:8a:32:47:88:d9:
e1:af:a7:26:3c:32:ad:5b:01:76:20:53:97:e4:4d:4b:23:b6:
09:31:62:7d:0d:59:71:47:e9:e6:ac:cf:a6:f7:59:d5:75:f8:
f6:3a:ee:b4:c3:19:4a:95:e1:08:c7:c9:b3:d4:fe:34:5f:69:
6d:9d:ca:46:5f:48:78:08:df:11:fb:a3:a5:35:2b:06:af:f8:
a4:d5:21:73:76:01:12:7e:94:24:d5:3a:09:ad:c0:03:ad:7f:
7f:e2:a6:22:0b:60:61:ab:29:a2:fa:2f:d9:9f:ff:b0:c2:f5:
ae:cf:3f:3c:cf:2a:9c:0b:e4:f9:70:01:9c:38:7a:7f:47:d6:
f7:d1:8e:95:33:b7:f4:2e:f8:9b:db:6b:f5:53:71:c6:e3:b0:
29:62:78:0d:c0:2b:bf:6c:37:34:14:0e:42:d9:f1:52:25:33:
0a:35:12:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 17:40:07 2026 by rpki-client