Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/825181E08D8511F1918A18FBCE1D38B0.roa
File: 825181E08D8511F1918A18FBCE1D38B0.roa (raw, json)
Hash identifier: /11X6tW8wF1b8TSIOzbgJFdyE9QckgQEH/tixikAZRY=
Subject key identifier: F5:09:62:F3:99:71:83:1F:4A:E8:04:EE:47:E1:81:E4:E4:93:F4:A2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DC1E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/825181E08D8511F1918A18FBCE1D38B0.roa
Signing time: Sat 01 Aug 2026 08:46:38 +0000
ROA not before: Sat 01 Aug 2026 08:46:34 +0000
ROA not after: Sun 06 Sep 2026 08:46:34 +0000
asID: 202656
IP address blocks: 154.218.25.0/24 maxlen: 24
154.218.26.0/24 maxlen: 24
154.219.201.0/24 maxlen: 24
154.219.202.0/24 maxlen: 24
154.219.203.0/24 maxlen: 24
154.219.208.0/24 maxlen: 24
154.219.209.0/24 maxlen: 24
154.219.210.0/24 maxlen: 24
154.219.212.0/24 maxlen: 24
154.219.213.0/24 maxlen: 24
154.219.214.0/24 maxlen: 24
154.219.215.0/24 maxlen: 24
154.219.216.0/24 maxlen: 24
154.220.1.0/24 maxlen: 24
154.221.1.0/24 maxlen: 24
154.221.53.0/24 maxlen: 24
154.221.54.0/24 maxlen: 24
154.221.55.0/24 maxlen: 24
154.222.46.0/24 maxlen: 24
154.222.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121886 (0x1dc1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 1 08:46:34 2026 GMT
Not After : Sep 6 08:46:34 2026 GMT
Subject: CN=6a6db26e-18b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:6c:41:e9:b1:78:91:92:e3:30:9d:cb:f6:5b:
1b:14:d9:ea:95:33:6b:db:3e:b4:25:63:aa:e6:47:
ea:b9:0d:e0:52:76:46:4b:6d:d0:4f:68:67:c3:d7:
fa:df:2a:54:1a:b7:c5:51:c7:00:04:23:24:f3:9e:
2f:05:85:09:fe:2f:2a:7d:11:a2:01:91:c3:5c:ae:
93:d6:2c:68:b1:12:19:09:a0:ef:cd:a0:b6:f2:93:
58:31:56:f2:09:89:c6:1b:eb:dd:d2:a2:ca:12:2e:
82:b8:94:1c:f1:94:ef:de:16:94:01:0d:4d:87:7a:
29:6a:41:80:e2:64:ca:e6:ed:bf:db:36:f5:42:b4:
e2:cd:2b:da:f7:3e:88:20:f1:38:d5:fa:65:f4:97:
c7:bc:37:82:09:dd:40:57:e6:ee:41:68:44:55:24:
c6:25:9e:d5:a4:cc:4b:91:c3:7b:db:65:82:a4:ea:
75:3d:1a:10:39:47:a9:98:91:70:56:28:a5:67:60:
83:3c:d1:1f:b9:36:0b:07:20:c0:5d:31:f6:b7:6e:
16:e9:b7:48:5b:48:e2:ab:7e:3f:7d:1c:c4:e4:e0:
bd:2d:82:ed:55:da:f5:15:d6:48:af:0f:5e:cb:3a:
29:d3:39:62:5e:fc:dd:6d:c1:ff:75:3c:a6:28:d5:
df:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:09:62:F3:99:71:83:1F:4A:E8:04:EE:47:E1:81:E4:E4:93:F4:A2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/825181E08D8511F1918A18FBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.218.25.0-154.218.26.255
154.219.201.0-154.219.203.255
154.219.208.0-154.219.210.255
154.219.212.0-154.219.216.255
154.220.1.0/24
154.221.1.0/24
154.221.53.0-154.221.55.255
154.222.46.0/24
154.222.199.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:72:bf:96:4a:03:21:e5:90:96:1a:81:95:de:5d:e8:b0:dc:
76:eb:ba:49:45:60:20:80:dd:53:ac:2c:28:d5:ed:27:61:00:
e0:d9:81:9a:3e:f8:9b:10:4f:1b:d6:be:d1:21:fd:6c:c8:4d:
0a:67:a2:a6:38:39:af:12:3a:00:13:54:61:9c:45:0f:f1:64:
25:0a:59:0a:d8:6c:a4:6d:05:ee:77:97:51:0f:0a:84:35:fd:
35:8a:6d:5c:bb:40:40:23:c6:cf:70:6c:b3:2f:40:b6:09:43:
ac:5f:db:23:71:40:aa:07:67:3c:07:1e:c4:cf:00:3b:d8:26:
e0:72:ee:a5:25:db:59:45:d8:0c:55:7a:46:07:99:20:4a:f9:
49:c2:b9:fd:e8:57:32:e7:ae:59:2d:de:d4:95:1d:84:6c:b4:
52:34:2a:95:9b:91:73:82:4a:f3:25:aa:d4:f5:87:92:29:d0:
94:3b:b8:7f:03:4a:6c:e3:d9:a2:f4:44:e4:e8:9e:8f:d9:5b:
72:da:a5:cc:1d:fc:77:b4:75:ee:df:5f:49:44:32:91:ac:df:
60:a1:b5:e3:63:cf:6c:74:83:03:f4:36:1e:d4:25:89:3b:3c:
27:61:cd:be:a8:33:dd:9c:a6:d7:ca:27:b6:e1:8d:d8:74:ba:
56:dd:45:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:08:17 2026 by rpki-client