Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84A4BEA85BF311F1891C9316CF1D38B0.roa
File: 84A4BEA85BF311F1891C9316CF1D38B0.roa (raw, json)
Hash identifier: aL2u9iVhQSqwPiGwpKG8p4cdizrdTNEFeqT9wF1Gpfc=
Subject key identifier: 23:E5:69:83:00:68:4F:8C:A1:D6:DA:44:92:70:40:35:03:FE:6D:9D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D0DE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84A4BEA85BF311F1891C9316CF1D38B0.roa
Signing time: Sat 30 May 2026 06:48:09 +0000
ROA not before: Sat 30 May 2026 06:48:04 +0000
ROA not after: Tue 07 Jul 2026 06:48:04 +0000
asID: 202656
IP address blocks: 154.219.192.0/24 maxlen: 24
154.219.195.0/24 maxlen: 24
154.219.201.0/24 maxlen: 24
154.222.14.0/24 maxlen: 24
154.222.15.0/24 maxlen: 24
154.222.43.0/24 maxlen: 24
154.222.44.0/24 maxlen: 24
154.222.45.0/24 maxlen: 24
154.222.46.0/24 maxlen: 24
154.222.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Jun 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119006 (0x1d0de)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 30 06:48:04 2026 GMT
Not After : Jul 7 06:48:04 2026 GMT
Subject: CN=6a1a8829-255f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:22:24:ff:2e:fd:78:b7:d8:5f:92:b2:f7:05:
63:4f:39:0c:b6:30:d8:b8:79:22:4d:ad:a2:0e:5e:
98:98:48:ca:b0:74:62:9e:8a:fd:99:70:ea:b7:2b:
c8:12:62:2d:b7:4b:3c:31:16:1b:d6:9a:71:b8:89:
ab:66:87:fe:61:10:63:f0:95:3a:f4:63:1c:97:8c:
6b:e1:ae:00:35:40:9c:94:7a:a3:b3:d5:30:f5:f7:
34:dd:c9:63:5e:4f:47:11:82:c5:70:53:8c:30:e0:
dc:fb:a5:08:c6:77:64:28:bf:36:90:0a:3b:71:9f:
ec:6e:a3:d8:a8:eb:2b:09:f9:3c:c4:b8:53:ab:dd:
ea:72:a0:de:b9:8f:54:99:45:37:6a:3f:4d:42:00:
c2:de:61:56:d3:b1:6f:58:b5:a7:68:d8:62:94:53:
99:1b:da:7e:2e:46:e9:31:a8:11:55:76:11:8e:b3:
eb:3a:2f:ef:e5:1a:88:98:60:21:b5:f8:c3:09:98:
4a:c8:78:e5:bc:59:f4:fc:fd:b6:a1:bc:3a:32:4c:
2e:63:30:b8:2d:9f:87:07:06:e4:df:34:c2:b1:1c:
f0:40:a1:05:74:38:65:f1:9e:8a:84:3e:4c:be:d0:
04:ff:a6:1a:8e:e1:09:53:a6:f1:8b:20:5d:ac:88:
b6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E5:69:83:00:68:4F:8C:A1:D6:DA:44:92:70:40:35:03:FE:6D:9D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84A4BEA85BF311F1891C9316CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.219.192.0/24
154.219.195.0/24
154.219.201.0/24
154.222.14.0/23
154.222.43.0-154.222.47.255
Signature Algorithm: sha256WithRSAEncryption
0d:ab:b5:4a:24:a8:c0:f0:8a:16:d8:91:9a:1b:05:ad:d3:a3:
52:ec:bb:f8:04:89:de:22:e6:90:9b:79:b5:ac:e9:23:94:51:
98:d2:18:0d:29:c7:79:10:81:be:54:83:6d:a7:5b:b3:19:ee:
ed:a7:43:3a:56:88:1a:da:b1:b6:21:1e:d3:eb:ef:c1:49:a8:
cd:d1:6a:79:4a:2b:c1:fb:b5:a0:eb:3d:ee:95:43:b8:61:7c:
6d:d5:f0:e3:bd:0a:9a:f7:86:7d:b4:98:68:3e:3a:b5:d7:c3:
8c:5d:01:0b:6d:3b:4c:ba:86:eb:25:97:6a:9e:f7:d6:51:0a:
81:e9:b8:fd:33:d7:86:a1:e5:82:c1:48:e3:8f:d7:02:60:7c:
fc:2c:e2:0f:ad:71:c3:75:c5:00:48:d7:6d:ad:97:5e:d5:df:
e1:2d:9a:57:89:26:bf:91:e5:0d:7d:96:9d:a9:6f:28:c9:78:
68:c0:30:d4:4a:c4:41:52:bb:f2:e8:42:ab:06:92:01:64:27:
c9:eb:61:2b:45:e8:16:85:8e:74:3b:37:14:71:0b:41:8b:de:
f6:06:e4:2a:c1:23:67:01:70:69:af:15:7f:78:1a:cc:10:c3:
a8:b9:05:34:9d:3b:23:f2:fe:e0:7b:40:38:e8:ca:af:04:9a:
f3:9f:6a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 07:56:31 2026 by rpki-client