Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6854ADE04AE511F1AAA99DCECE1D38B0.roa
File: 6854ADE04AE511F1AAA99DCECE1D38B0.roa (raw, json)
Hash identifier: AUz1l9yuuhLli1Ja76/jDZtuZnDgUUknACt0CL5vg+g=
Subject key identifier: 4E:28:7B:06:A4:0C:15:CC:DA:7E:88:68:9C:11:2A:D3:2E:0E:88:23
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CA85
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6854ADE04AE511F1AAA99DCECE1D38B0.roa
Signing time: Fri 08 May 2026 13:54:19 +0000
ROA not before: Fri 08 May 2026 13:54:14 +0000
ROA not after: Tue 09 Jun 2026 13:54:14 +0000
asID: 32043
IP address blocks: 154.200.55.0/24 maxlen: 24
154.200.56.0/24 maxlen: 24
154.200.57.0/24 maxlen: 24
154.200.58.0/24 maxlen: 24
154.200.59.0/24 maxlen: 24
154.200.80.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 11 May 2026 00:07:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117381 (0x1ca85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 8 13:54:14 2026 GMT
Not After : Jun 9 13:54:14 2026 GMT
Subject: CN=69fdeb0b-cdad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ba:f6:22:8b:30:f0:5e:f4:41:ea:28:6f:0e:
a6:61:92:67:f5:55:9d:19:a3:1a:e8:21:d8:4d:61:
ac:a8:ce:ec:ef:26:cd:c9:a1:44:b2:33:31:52:14:
f1:f0:c3:d1:2a:bd:f5:3f:3c:3c:cd:0d:5a:28:e2:
a9:cf:6a:f5:ab:9e:9a:f2:3d:16:2a:aa:c7:0a:aa:
4b:71:52:35:5a:ca:82:01:34:38:35:2d:26:e6:49:
e6:6e:e1:2b:69:e1:06:e4:70:e3:83:af:b1:0d:6f:
bc:16:c2:1d:f0:4f:d1:ab:d5:59:d6:5a:c9:d7:a0:
b1:92:18:1c:ed:94:aa:1c:b2:32:54:ce:61:6d:c5:
da:fb:4d:2d:80:6a:16:e7:9b:86:b8:07:6a:3a:65:
7e:66:e2:4f:2a:8b:58:b1:14:a4:fe:50:26:6c:25:
49:5b:18:4c:0d:cc:04:11:e3:31:4f:df:3d:e1:4a:
df:0e:17:89:d1:40:7f:05:fa:e6:e3:a1:94:1f:2b:
6a:70:b3:f2:05:1d:8a:e3:34:db:17:ec:cc:9f:07:
6b:9e:0d:be:dd:5a:b5:7b:18:97:fe:db:f6:2b:0c:
6d:90:0b:42:f3:ec:d1:b9:08:75:1a:8b:af:82:5d:
ef:7b:73:6b:32:2c:81:07:3d:4a:4f:fb:eb:66:9e:
f2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:28:7B:06:A4:0C:15:CC:DA:7E:88:68:9C:11:2A:D3:2E:0E:88:23
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6854ADE04AE511F1AAA99DCECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.55.0-154.200.59.255
154.200.80.0/21
Signature Algorithm: sha256WithRSAEncryption
77:7e:31:9f:07:38:bc:d2:4d:0f:cb:a7:80:41:b9:b7:1e:1c:
97:fe:5f:c6:0a:9d:2e:0e:16:78:25:fc:72:26:15:10:67:7c:
6b:b5:6c:fd:44:24:46:e2:2d:ae:7c:0f:b4:97:86:f2:6a:a3:
db:ae:7c:2b:1a:01:3f:96:1c:0e:ce:a1:53:0f:41:0b:e4:2e:
a3:d1:92:97:83:e2:c1:ba:fb:b1:3d:d1:87:64:6c:5f:e2:3d:
3c:12:47:45:eb:ee:1d:ec:eb:28:17:d3:87:d1:44:e7:99:d5:
4e:0b:21:cc:03:f8:fc:ec:d3:fd:45:e3:f9:6a:51:0b:43:d9:
4e:2d:21:bd:42:4e:61:c0:10:0d:53:e4:93:09:25:22:4f:0e:
90:c2:c6:32:3d:92:a8:2b:8f:a1:96:66:5a:2c:9e:e3:78:f7:
7f:44:59:36:ed:66:3a:99:29:f3:4a:fe:e4:93:d5:d7:69:a0:
7e:41:20:91:31:2d:80:98:98:54:0e:d1:59:12:a3:6c:f0:e1:
ea:39:5c:02:b4:71:ed:6a:58:c2:b5:6d:3c:9c:41:cc:aa:f4:
a8:4c:76:d7:c0:24:5e:2d:06:ce:c9:4d:84:4e:0b:db:7d:ec:
d6:6b:8e:95:b0:65:9a:fe:53:c1:6f:8a:c8:e8:1b:6d:d1:a6:
56:11:3c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 10:59:58 2026 by rpki-client