Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65B522D4739611F18BF9EF05CF1D38B0.roa
File: 65B522D4739611F18BF9EF05CF1D38B0.roa (raw, json)
Hash identifier: Umaa16fuJFCS56TLv22isknF58IOOIrQ/BFFxgtN9Xc=
Subject key identifier: 61:E3:4F:0A:E9:6F:1D:92:54:C9:A9:48:9F:45:07:E4:BA:2D:C0:EA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D5E8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65B522D4739611F18BF9EF05CF1D38B0.roa
Signing time: Mon 29 Jun 2026 08:42:02 +0000
ROA not before: Mon 29 Jun 2026 08:41:57 +0000
ROA not after: Thu 06 Aug 2026 08:41:57 +0000
asID: 202656
IP address blocks: 154.219.237.0/24 maxlen: 24
154.219.238.0/24 maxlen: 24
154.219.239.0/24 maxlen: 24
154.219.240.0/24 maxlen: 24
154.219.241.0/24 maxlen: 24
154.219.242.0/24 maxlen: 24
154.219.243.0/24 maxlen: 24
154.219.244.0/24 maxlen: 24
154.219.248.0/24 maxlen: 24
154.219.249.0/24 maxlen: 24
154.221.50.0/24 maxlen: 24
154.221.51.0/24 maxlen: 24
154.221.52.0/24 maxlen: 24
154.222.197.0/24 maxlen: 24
154.222.200.0/24 maxlen: 24
154.222.201.0/24 maxlen: 24
154.222.202.0/24 maxlen: 24
154.222.203.0/24 maxlen: 24
154.222.204.0/24 maxlen: 24
154.222.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Jul 2026 17:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120296 (0x1d5e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 29 08:41:57 2026 GMT
Not After : Aug 6 08:41:57 2026 GMT
Subject: CN=6a422fda-219c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c8:24:91:8c:5b:e7:38:27:6d:5e:fe:fe:fc:
52:1f:b4:f4:95:39:0d:bf:4a:69:85:cd:1a:dc:03:
4a:da:09:37:a0:50:7a:37:49:e2:57:08:23:8d:a7:
87:7a:4d:11:cd:a2:22:1d:7a:79:3e:27:19:f7:5c:
09:9f:2b:19:fb:3b:59:77:5a:ee:aa:9f:bb:e6:d1:
ff:9f:0d:d4:6c:79:ec:92:7e:92:5f:0a:9d:b3:58:
2e:07:60:b2:39:32:74:22:50:3b:c1:b1:39:fd:eb:
bc:67:02:d3:01:98:ba:dc:0a:c2:00:3d:f1:97:8f:
92:3a:38:87:33:d7:1c:8b:40:a7:c3:69:11:4c:cf:
4f:3e:4d:7f:6d:be:67:11:2e:bf:9e:c8:ae:16:b4:
1b:93:22:b9:39:9f:42:34:b7:af:bc:ad:83:fe:0d:
42:9f:9e:42:99:d4:9a:f4:53:6e:50:bf:9a:54:8d:
e5:90:be:0e:86:db:54:27:07:7b:5b:a9:b7:e0:7c:
e9:59:13:66:13:c1:79:66:99:90:d0:0b:34:f3:d6:
1d:d3:13:77:9b:4e:71:d8:53:1a:2b:48:22:e2:1f:
93:99:bc:66:75:33:9f:8e:98:b0:cc:5c:80:79:d1:
14:29:8d:0d:79:63:36:b6:81:b5:81:ca:b4:55:2f:
13:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E3:4F:0A:E9:6F:1D:92:54:C9:A9:48:9F:45:07:E4:BA:2D:C0:EA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/65B522D4739611F18BF9EF05CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.237.0-154.219.244.255
154.219.248.0/23
154.221.50.0-154.221.52.255
154.222.197.0/24
154.222.200.0-154.222.205.255
Signature Algorithm: sha256WithRSAEncryption
9c:7a:22:21:34:ce:eb:18:ec:74:cf:71:2c:ea:e5:f3:e4:74:
85:16:82:b1:47:3d:b2:65:b8:50:de:ef:3a:c8:a3:40:d8:c8:
39:5e:07:2c:21:b4:53:50:ce:48:37:de:7e:fa:e1:b5:c3:54:
ef:7b:19:6e:0e:db:33:6f:f7:4e:6d:6f:d4:69:ff:11:65:83:
17:e1:5f:cb:9b:b0:b8:a6:d3:5a:2d:9f:9b:61:b6:5c:a4:df:
59:ee:10:8b:20:fe:9d:58:60:f7:94:31:10:cf:cf:6b:45:cf:
10:26:23:26:ad:ca:53:75:23:df:20:e1:c9:33:ec:ea:ce:f8:
fb:9a:a2:c6:26:5d:71:70:f1:c8:23:ed:7c:a2:a2:bc:82:0b:
f9:16:ef:6e:30:fc:41:3d:ba:ef:70:d1:f2:d5:75:bd:30:e8:
05:ec:66:7d:85:56:57:e2:d3:80:85:51:98:3d:b9:f7:77:2f:
71:d3:0f:c1:24:a0:8a:4b:84:0a:8f:95:46:fe:72:87:b7:32:
29:e0:56:01:bc:0c:6b:fe:87:5c:91:75:0c:72:f7:e6:db:9f:
dd:01:50:77:24:a3:a4:a4:0e:7e:e2:e6:e8:06:8b:23:4e:ae:
a8:2d:62:13:78:1a:e9:36:54:82:be:30:2e:d6:be:b8:66:80:
d2:05:28:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:42:02 2026 by rpki-client