Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6CA22A7A6FFD11F187D5A915CF1D38B0.roa
File: 6CA22A7A6FFD11F187D5A915CF1D38B0.roa (raw, json)
Hash identifier: 1OkLKZEZ9Ce6EayBN7ibdAIs6Sd/yDS58UKRRU97fB4=
Subject key identifier: 89:73:77:A9:64:B9:E4:A2:AE:8D:A0:8B:A7:54:F0:93:84:50:A1:A6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D4ED
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6CA22A7A6FFD11F187D5A915CF1D38B0.roa
Signing time: Wed 24 Jun 2026 18:49:27 +0000
ROA not before: Wed 24 Jun 2026 18:49:22 +0000
ROA not after: Fri 31 Jul 2026 18:49:22 +0000
asID: 62240
IP address blocks: 154.194.112.0/24 maxlen: 24
154.194.113.0/24 maxlen: 24
154.195.16.0/24 maxlen: 24
154.195.17.0/24 maxlen: 24
154.195.18.0/24 maxlen: 24
154.195.19.0/24 maxlen: 24
154.195.148.0/24 maxlen: 24
154.195.149.0/24 maxlen: 24
154.195.150.0/24 maxlen: 24
154.195.151.0/24 maxlen: 24
154.195.164.0/24 maxlen: 24
154.195.165.0/24 maxlen: 24
154.195.166.0/24 maxlen: 24
154.195.167.0/24 maxlen: 24
154.195.168.0/24 maxlen: 24
154.195.169.0/24 maxlen: 24
154.195.170.0/24 maxlen: 24
154.195.171.0/24 maxlen: 24
154.195.172.0/24 maxlen: 24
154.196.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 29 Jun 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120045 (0x1d4ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 18:49:22 2026 GMT
Not After : Jul 31 18:49:22 2026 GMT
Subject: CN=6a3c26b7-9fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6a:e4:6e:08:a2:67:f7:60:f3:59:94:f7:1a:
3e:57:2a:ea:72:eb:24:d2:7d:c5:82:66:68:7f:81:
a9:76:94:03:da:c6:40:d8:ef:ac:6d:1e:05:56:3a:
aa:8a:6f:17:d5:2e:e6:9c:87:33:09:5a:01:29:35:
40:46:5c:13:f3:46:b0:b6:41:93:d7:9f:c1:6e:97:
8e:71:79:3e:05:c8:5d:e6:d1:45:f9:54:28:a3:c4:
2f:79:41:b3:b3:a8:11:71:a4:35:4a:99:0d:20:35:
31:9d:25:90:ff:e5:1a:50:d4:62:fb:ae:59:62:56:
15:63:4f:d5:8d:74:84:62:31:c3:0c:cf:f8:a2:c1:
96:5a:2f:48:e4:a7:aa:bd:fa:25:ab:d8:f9:93:cf:
80:73:3a:51:6b:f5:0e:7b:f9:06:8a:98:09:b1:7a:
4c:2e:be:70:62:52:73:3a:89:6f:70:33:e3:ef:99:
b3:51:de:4b:14:49:ec:07:22:cf:e3:02:5e:99:bb:
7b:35:ea:49:51:a8:87:69:69:1a:3f:3a:6c:f4:92:
a2:47:b9:c7:d4:9b:7b:61:da:68:c8:9a:f6:fb:3d:
e3:9a:e4:7a:a3:2e:cc:aa:ad:9a:68:51:eb:77:19:
6a:03:8c:e7:71:d4:68:65:c7:47:2c:5b:0a:1c:33:
75:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:73:77:A9:64:B9:E4:A2:AE:8D:A0:8B:A7:54:F0:93:84:50:A1:A6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6CA22A7A6FFD11F187D5A915CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.112.0/23
154.195.16.0/22
154.195.148.0/22
154.195.164.0-154.195.172.255
154.196.30.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:d2:69:ad:54:f3:91:1f:9d:a3:44:89:2b:52:67:56:31:48:
64:88:d6:dc:82:f9:a3:9f:21:92:20:99:06:d0:7e:cc:a8:37:
41:f2:ab:9d:ca:8b:4a:31:1d:7b:41:77:fe:f7:8f:6c:07:27:
8e:7d:cf:d4:83:f4:dc:37:80:4a:12:b4:d3:cc:67:95:24:08:
2c:e2:60:9a:f9:3d:58:c2:38:0c:51:3e:ab:6c:f6:a2:ab:df:
3c:61:3a:90:d3:77:48:bd:b1:df:72:2e:1f:ed:44:50:31:68:
ca:a9:78:31:36:96:af:1d:87:fc:fc:03:48:5d:4d:62:af:a9:
b8:80:2c:89:c2:fa:68:0c:0b:98:40:69:61:4d:78:64:0e:d5:
21:40:79:61:2d:34:f8:65:6d:ba:25:5c:ef:41:74:01:1a:85:
72:a4:b0:d7:fb:46:c8:8e:16:7e:af:f3:8c:98:df:f9:00:e8:
5a:42:37:cc:73:d4:ff:d3:d8:9d:90:8c:10:d2:02:6f:14:41:
af:6e:d4:0d:70:04:95:26:be:76:e9:2e:e8:b0:91:72:aa:c3:
21:34:db:7f:60:fa:8c:3e:c5:1a:e1:c1:de:42:15:6d:ab:e4:
54:6b:a6:f8:58:35:c1:32:26:e1:fd:1e:4e:68:bf:75:a3:00:
b3:fc:41:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 17:43:53 2026 by rpki-client