Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6DD24C24575011F19688BDE5CE1D38B0.roa
File: 6DD24C24575011F19688BDE5CE1D38B0.roa (raw, json)
Hash identifier: zAHryUwHrBB+6fYNt1td26DQGKgLW/QLzP7TEhUkHdk=
Subject key identifier: 12:BD:9C:14:A3:A6:3D:3F:0F:E8:F3:C6:E6:1F:4C:A4:73:4B:C2:73
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CEBD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6DD24C24575011F19688BDE5CE1D38B0.roa
Signing time: Sun 24 May 2026 09:10:38 +0000
ROA not before: Sun 24 May 2026 09:10:33 +0000
ROA not after: Tue 30 Jun 2026 09:10:33 +0000
asID: 9304
IP address blocks: 154.82.134.0/24 maxlen: 24
154.82.148.0/24 maxlen: 24
154.82.153.0/24 maxlen: 24
154.82.158.0/24 maxlen: 24
154.82.196.0/24 maxlen: 24
154.82.197.0/24 maxlen: 24
154.82.198.0/24 maxlen: 24
154.82.199.0/24 maxlen: 24
154.83.65.0/24 maxlen: 24
154.83.67.0/24 maxlen: 24
154.89.132.0/24 maxlen: 24
154.90.65.0/24 maxlen: 24
154.90.67.0/24 maxlen: 24
154.90.128.0/24 maxlen: 24
154.90.134.0/24 maxlen: 24
154.90.136.0/24 maxlen: 24
154.90.137.0/24 maxlen: 24
154.90.140.0/24 maxlen: 24
154.90.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118461 (0x1cebd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 24 09:10:33 2026 GMT
Not After : Jun 30 09:10:33 2026 GMT
Subject: CN=6a12c08e-0ece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:99:b3:7b:17:23:4f:0a:40:ec:17:18:ef:be:
3d:0a:83:65:ef:ee:26:c5:0a:97:50:e5:ef:d4:69:
73:4e:d3:27:ef:26:b7:10:b8:fe:87:f6:e6:96:57:
ba:1c:f3:95:97:dd:5f:d9:49:a7:80:ba:7f:09:23:
dd:0d:a6:cf:b5:a7:f6:06:76:9a:47:07:a9:0d:96:
03:ee:9d:70:17:23:e4:89:ea:14:96:23:4a:be:f5:
f1:80:25:0a:4f:07:8e:7b:f7:f8:33:6a:e5:6e:c8:
c6:0f:9b:de:d4:4d:18:7c:dd:de:c6:5e:20:71:94:
18:51:dc:10:63:67:ee:0d:e1:70:95:69:8e:40:bc:
f8:e3:8b:10:40:aa:78:9c:3c:e7:da:01:e3:81:a2:
d2:67:48:1e:0b:7c:5e:c4:9e:92:3d:93:23:a0:1c:
26:8c:50:f3:73:e8:77:f8:d5:ff:62:b8:22:bc:79:
21:2d:83:0f:18:3a:ad:dc:04:99:99:e0:79:28:36:
0a:e6:00:04:45:07:a3:73:00:5a:d9:60:65:25:17:
20:89:30:f6:69:f6:f9:4d:5b:62:d4:20:d2:82:3d:
1e:6e:da:2f:93:23:14:66:2b:df:8c:7f:fa:58:5d:
3b:c9:f8:32:34:f4:87:75:74:75:0f:93:27:a8:07:
2d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:BD:9C:14:A3:A6:3D:3F:0F:E8:F3:C6:E6:1F:4C:A4:73:4B:C2:73
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6DD24C24575011F19688BDE5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.134.0/24
154.82.148.0/24
154.82.153.0/24
154.82.158.0/24
154.82.196.0/22
154.83.65.0/24
154.83.67.0/24
154.89.132.0/24
154.90.65.0/24
154.90.67.0/24
154.90.128.0/24
154.90.134.0/24
154.90.136.0/23
154.90.140.0/24
154.90.189.0/24
Signature Algorithm: sha256WithRSAEncryption
26:ce:b3:c3:77:13:1f:86:c8:5b:64:a3:e7:6f:51:84:d0:0c:
da:d5:11:06:02:f9:52:cf:c5:e9:e1:11:24:7d:d5:57:1d:01:
17:e6:3b:28:32:65:7a:ee:31:2b:ef:35:c8:51:f3:54:db:5f:
a7:8d:7f:5e:5d:b2:3b:24:36:1d:9b:c9:a1:db:d2:91:22:89:
33:50:72:16:7e:22:1f:f7:f4:dc:f1:2b:5e:76:b4:67:c8:b1:
36:dc:2d:f9:ac:aa:86:d6:3c:95:e2:a9:c8:0a:18:6b:86:41:
49:df:87:64:f5:10:6c:8a:e9:c2:cb:f5:39:72:3c:75:86:07:
ec:2e:e7:27:4c:ac:56:54:44:06:21:3b:00:43:a5:92:9b:27:
87:56:4f:b3:31:8a:0a:49:53:9c:9e:e3:07:e3:23:aa:b8:ff:
db:36:7d:a0:01:b7:14:f0:39:84:2e:78:e8:03:18:d6:7b:3c:
10:e3:55:8b:a5:fa:2c:7b:5f:47:e5:17:bb:0a:9c:df:e7:4e:
7e:81:20:5d:40:92:de:80:4b:0a:2d:3a:c9:fe:29:e0:18:c3:
82:32:a1:3d:f7:c8:4a:94:9f:7f:3b:cd:1b:46:46:96:52:7f:
dd:66:d0:5e:ad:06:b9:35:a3:f1:0b:85:b9:54:bb:da:e3:8b:
d8:14:70:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 20:51:11 2026 by rpki-client