Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/620B58DE6EB811F184EA6AE9CE1D38B0.roa
File: 620B58DE6EB811F184EA6AE9CE1D38B0.roa (raw, json)
Hash identifier: O4p6PP7pZ09uedSAJ0t2zRLc0Ab+Mg8xjXhRt7v6XZQ=
Subject key identifier: 45:3B:44:63:ED:FD:C5:B9:68:7C:C7:68:11:C7:3C:B7:46:D6:40:B9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D468
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/620B58DE6EB811F184EA6AE9CE1D38B0.roa
Signing time: Tue 23 Jun 2026 04:02:43 +0000
ROA not before: Tue 23 Jun 2026 04:02:38 +0000
ROA not after: Tue 30 Jun 2026 04:02:38 +0000
asID: 399077
IP address blocks: 154.91.81.0/24 maxlen: 24
154.91.82.0/24 maxlen: 24
154.91.83.0/24 maxlen: 24
154.91.84.0/24 maxlen: 24
154.91.85.0/24 maxlen: 24
154.91.86.0/24 maxlen: 24
154.91.87.0/24 maxlen: 24
154.91.88.0/24 maxlen: 24
154.91.89.0/24 maxlen: 24
154.91.90.0/24 maxlen: 24
154.91.91.0/24 maxlen: 24
154.91.92.0/24 maxlen: 24
154.91.93.0/24 maxlen: 24
154.91.94.0/24 maxlen: 24
154.91.95.0/24 maxlen: 24
154.91.96.0/24 maxlen: 24
154.91.97.0/24 maxlen: 24
154.91.98.0/24 maxlen: 24
154.91.99.0/24 maxlen: 24
154.91.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119912 (0x1d468)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 23 04:02:38 2026 GMT
Not After : Jun 30 04:02:38 2026 GMT
Subject: CN=6a3a0562-c2af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a0:dc:33:c4:d5:0d:e0:3b:e3:08:ae:24:ad:
05:a8:3a:78:12:f3:f0:c9:ef:8d:0f:13:ce:4c:b2:
30:46:18:a8:68:45:ba:df:aa:c0:c2:b7:4b:fb:2b:
70:99:13:30:3b:0a:d8:4b:02:ac:9d:3d:03:d0:c4:
d0:18:e3:ab:7f:e2:12:e8:d1:bd:55:c7:21:bc:3e:
31:da:71:52:54:65:c0:aa:54:d3:de:62:25:8f:c9:
48:1c:77:5f:06:4e:3f:4b:a4:38:46:40:94:13:07:
ee:13:7b:9b:72:5b:f0:b0:29:7e:37:97:74:69:ca:
f7:2c:26:9d:cb:84:ff:17:83:16:d7:d5:db:95:ed:
3f:7a:ac:de:8e:fe:d7:aa:4e:11:d3:73:70:1f:77:
ca:41:f1:37:8a:2d:8d:8f:3e:3d:14:f2:9f:35:33:
a6:5c:45:52:06:17:8f:6b:15:67:95:3d:db:e3:fe:
6f:f1:06:db:e5:3a:65:7d:db:5b:62:43:b6:23:55:
02:8e:f4:0e:97:59:06:ee:bc:95:b8:0f:fd:47:c3:
5b:eb:e2:ad:14:28:91:7c:69:c0:a7:b4:5f:b5:d1:
17:5b:21:73:97:5e:03:71:05:3d:ae:88:41:a8:ac:
b1:c3:c1:7b:a6:9b:ed:54:d1:8e:54:3e:42:95:ef:
ce:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:3B:44:63:ED:FD:C5:B9:68:7C:C7:68:11:C7:3C:B7:46:D6:40:B9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/620B58DE6EB811F184EA6AE9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.81.0-154.91.100.255
Signature Algorithm: sha256WithRSAEncryption
64:c8:b6:4b:1f:78:0d:3b:8b:25:f8:3e:e5:6f:a2:84:cc:90:
48:1e:20:b2:8c:eb:c7:96:3b:01:9c:2b:12:c7:96:58:25:08:
cb:21:71:19:f5:74:63:d3:62:b4:4a:32:88:0c:77:6b:70:5f:
f0:f4:b1:49:90:d1:ba:75:48:dd:2f:43:86:57:06:b5:f5:a3:
25:17:f9:e1:ff:b0:b1:fe:aa:1a:ab:3f:d9:da:4b:ef:c3:fa:
04:21:a5:fe:35:f6:a4:7b:19:d3:3f:84:e9:07:5f:2b:4a:22:
b6:90:af:7b:fb:83:79:45:8a:f0:e4:6e:26:fe:96:0d:7a:c6:
81:e8:c2:f0:28:26:b6:7a:ca:3c:c0:83:83:18:68:00:77:37:
7e:f6:60:e4:e2:0b:25:ce:8e:09:22:4a:92:16:5a:dc:f9:3b:
21:b1:c8:33:61:ff:78:d0:79:ae:fd:ec:eb:01:3b:ee:52:84:
8b:59:31:1f:5a:64:49:5a:4c:f8:7e:e6:5d:48:1f:ec:f5:67:
56:ab:7f:19:94:84:7f:bd:9a:00:66:8b:49:f8:f4:1a:ed:85:
0b:85:3a:28:5a:97:ac:52:b3:7f:81:7f:8e:78:85:ca:ad:6f:
92:81:8b:d6:43:d7:30:10:ac:f8:1d:1a:b6:54:13:c0:82:d4:
18:e3:d6:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:54:55 2026 by rpki-client