Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6921796658F411F18C7063DECE1D38B0.roa
File: 6921796658F411F18C7063DECE1D38B0.roa (raw, json)
Hash identifier: kR9iFjr4F/pUV1eSz9i8P66ufyndy3iqNlKUzXqYp8c=
Subject key identifier: 9E:20:27:B5:70:CF:EB:51:B3:50:AF:5C:83:18:BB:BE:D7:07:31:0E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CFB7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6921796658F411F18C7063DECE1D38B0.roa
Signing time: Tue 26 May 2026 11:16:59 +0000
ROA not before: Tue 26 May 2026 11:16:54 +0000
ROA not after: Thu 02 Jul 2026 11:16:54 +0000
asID: 984
IP address blocks: 154.193.62.0/24 maxlen: 24
154.193.84.0/24 maxlen: 24
154.193.85.0/24 maxlen: 24
154.196.133.0/24 maxlen: 24
154.196.161.0/24 maxlen: 24
154.200.155.0/24 maxlen: 24
154.202.136.0/24 maxlen: 24
154.213.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118711 (0x1cfb7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 26 11:16:54 2026 GMT
Not After : Jul 2 11:16:54 2026 GMT
Subject: CN=6a15812b-0660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:76:4e:37:eb:00:3a:c2:66:69:8b:d2:5a:3b:
1a:42:2b:9a:11:29:f8:d7:31:57:78:5b:df:d7:e8:
29:c9:85:5b:9a:77:55:61:84:b7:9c:5d:84:81:28:
c5:ec:40:52:40:bb:0b:1e:23:17:a5:5d:48:db:fa:
0f:f5:d2:b0:b4:03:d5:8b:0c:59:93:74:58:66:70:
ba:35:3e:36:f2:f7:92:54:98:92:ad:81:8d:66:30:
9c:16:72:65:e1:2b:2e:2b:74:c7:f1:cd:bb:5a:11:
a7:73:16:73:3a:bd:1a:2c:ec:b7:a1:0a:40:84:58:
17:46:dc:66:99:27:89:4c:75:49:62:ba:b5:4c:ad:
36:85:2c:7f:2f:38:b4:55:89:5d:a2:e3:71:a9:a9:
2f:41:26:ee:3f:c9:f8:c5:ef:e0:6d:25:df:45:4e:
de:06:72:df:cb:8b:48:0a:ac:9b:87:6e:62:82:f8:
a3:45:08:26:29:5d:aa:3e:23:b8:81:23:1e:72:90:
2c:0a:7d:3b:ad:1d:e5:82:ff:8b:61:e9:99:6f:8e:
13:f3:c8:ee:9c:80:a9:85:46:b2:05:45:8d:6c:88:
6c:76:e5:f1:ea:3d:00:ac:0a:e2:12:d5:4e:cc:f9:
b9:01:a8:0e:81:b4:bc:e8:31:9d:fa:5f:40:22:ae:
a7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:20:27:B5:70:CF:EB:51:B3:50:AF:5C:83:18:BB:BE:D7:07:31:0E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6921796658F411F18C7063DECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.62.0/24
154.193.84.0/23
154.196.133.0/24
154.196.161.0/24
154.200.155.0/24
154.202.136.0/24
154.213.220.0/24
Signature Algorithm: sha256WithRSAEncryption
19:92:7f:da:bc:b6:5d:15:5f:3e:b8:6e:75:76:ed:1c:06:31:
a1:38:f1:d9:4c:9d:46:03:e1:3b:63:a5:e5:ff:2f:89:21:be:
96:e0:75:2b:e6:9a:f9:23:ae:dd:80:08:72:18:e5:a2:49:87:
8d:d6:40:01:65:e4:af:1c:50:a2:9a:cc:10:20:4e:83:cb:07:
71:0a:59:8d:ce:ce:4c:8c:cd:48:b3:27:97:35:81:47:f0:2a:
a7:ab:c3:78:d0:55:0c:60:65:42:e0:2d:19:41:ab:10:b4:5c:
4f:d7:89:4a:ca:d6:ef:a8:69:ed:68:1f:14:cd:55:06:a2:d7:
94:89:d9:fe:74:f3:84:12:da:4e:3f:39:96:0d:22:58:b0:65:
98:75:88:e9:87:1a:8d:db:03:70:ed:dc:cf:b0:95:f9:fd:1f:
56:17:fd:84:f1:3c:f7:0a:d6:d2:94:dd:1c:d8:b6:2b:f1:83:
d9:da:c1:b7:2a:0a:e3:ef:af:74:88:95:f4:61:41:21:8f:86:
01:9e:92:b7:e9:75:11:69:b3:9e:e5:b1:e9:3b:31:6e:c7:aa:
35:e9:f2:38:76:f4:5c:9c:c1:60:dd:22:04:04:42:fc:27:f9:
7e:de:f7:1e:7f:3b:9a:e3:99:0b:03:17:8e:36:e9:5f:77:10:
8b:81:f2:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:21:42 2026 by rpki-client