Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83921CD87C5311F1A6DB5FDACE1D38B0.roa
File: 83921CD87C5311F1A6DB5FDACE1D38B0.roa (raw, json)
Hash identifier: cQj21jaWckgFFj3YRRst6ELdXo1dY0BCoqiBBisAIK8=
Subject key identifier: 03:51:71:0C:8E:4F:CB:FD:83:EE:06:7A:45:9A:C3:3C:A2:69:EE:C8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D803
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83921CD87C5311F1A6DB5FDACE1D38B0.roa
Signing time: Fri 10 Jul 2026 11:35:56 +0000
ROA not before: Fri 10 Jul 2026 11:35:51 +0000
ROA not after: Tue 10 Jul 2029 11:35:51 +0000
asID: 17561
IP address blocks: 154.84.2.0/24 maxlen: 24
154.84.3.0/24 maxlen: 24
154.84.4.0/24 maxlen: 24
154.84.5.0/24 maxlen: 24
154.84.6.0/24 maxlen: 24
154.84.7.0/24 maxlen: 24
154.84.8.0/24 maxlen: 24
154.84.9.0/24 maxlen: 24
154.88.30.0/24 maxlen: 24
154.88.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 11:51:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120835 (0x1d803)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 10 11:35:51 2026 GMT
Not After : Jul 10 11:35:51 2029 GMT
Subject: CN=6a50d91c-2c80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:49:f2:95:a3:07:68:5b:70:9d:72:52:19:2c:
71:4f:de:02:7b:67:13:7e:b5:2c:28:b1:7d:bd:73:
24:9b:c7:8a:cd:f1:f2:6e:a6:b2:eb:f5:a9:82:73:
b1:71:f9:8b:85:a3:15:d6:f1:6c:8f:e6:66:fa:a5:
43:0b:0a:29:33:eb:53:50:99:ca:0a:a3:9a:73:a4:
04:e7:45:a6:78:82:61:ea:f4:f4:de:36:da:68:b3:
59:1a:8e:9f:54:52:8a:6d:e8:fd:c2:8d:c6:02:4b:
24:a4:64:f5:50:c3:61:c7:8d:95:c8:3e:2b:15:a9:
11:7a:29:cf:8b:23:c3:4f:72:51:ae:f1:2b:da:98:
e8:ea:b2:c6:27:d9:78:a6:82:15:d7:dd:47:ab:80:
c5:b0:75:db:e3:cc:16:75:83:82:84:1c:c7:63:7c:
9c:cf:22:05:4f:f9:b6:ca:5f:24:f6:5f:cb:9b:2d:
4b:a4:72:f0:98:87:5c:6d:74:15:0a:9a:3a:80:22:
2c:83:bd:d0:ad:8d:ae:79:30:6b:83:4f:b1:40:84:
f5:55:25:67:3b:75:b2:79:f0:1c:0e:f7:fd:1e:46:
c3:6a:10:1d:a3:98:e7:bf:9a:0b:d7:a8:27:5b:d0:
e8:7f:22:70:81:d7:42:ec:a6:1d:48:ff:37:8b:71:
d8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:51:71:0C:8E:4F:CB:FD:83:EE:06:7A:45:9A:C3:3C:A2:69:EE:C8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83921CD87C5311F1A6DB5FDACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.2.0-154.84.9.255
154.88.30.0/23
Signature Algorithm: sha256WithRSAEncryption
89:5a:5d:bb:c5:2b:94:2b:8e:1e:c6:a1:12:06:fe:77:9c:69:
70:e5:07:38:36:b5:23:0d:2e:81:9c:ad:66:82:04:9f:76:da:
2c:10:ba:3b:d5:1d:11:ce:91:81:ea:1a:91:d5:7b:49:fe:32:
ba:a3:9c:e8:f7:a7:e5:e3:92:3b:1f:3e:61:b4:0c:c7:06:cf:
63:f7:eb:22:cf:66:10:21:8a:80:00:d7:cb:03:cd:fc:bb:13:
fb:84:1e:43:c2:6e:d7:f9:08:3b:3f:49:da:32:b0:76:2b:b9:
a4:90:ec:c6:d6:ac:13:09:bc:c7:6a:59:e3:9f:3f:c5:db:df:
cf:10:e3:f5:22:e8:6b:2e:d2:70:e4:72:ac:c8:de:83:81:46:
bf:9e:1e:35:d1:5e:9f:70:37:1e:88:5b:39:7b:8a:af:91:eb:
c9:2d:c5:50:20:99:94:f6:c7:f8:18:94:41:99:e4:4a:e9:1c:
16:04:ce:78:e9:1f:12:ea:9a:06:22:cc:9b:66:31:0d:d6:a4:
36:2f:13:33:51:02:d3:9e:a0:bd:db:0b:e4:49:da:49:d6:e1:
86:7b:ae:4c:c3:d0:e1:be:58:ea:1f:57:e9:b5:b0:d6:b2:9d:
61:35:df:7f:fb:a0:18:26:b0:28:3a:3d:62:6d:bf:58:28:62:
48:8c:dc:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:45:51 2026 by rpki-client