Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84F74DDA6FB211F19050E5DACE1D38B0.roa
File: 84F74DDA6FB211F19050E5DACE1D38B0.roa (raw, json)
Hash identifier: 5ICNBzq/58Cv77OVTamARZH1glij600JZmtIGOvwl/I=
Subject key identifier: 65:07:93:71:B7:AF:25:BC:EC:3C:ED:44:1E:6B:F1:5F:91:C3:F3:4F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D4BB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84F74DDA6FB211F19050E5DACE1D38B0.roa
Signing time: Wed 24 Jun 2026 09:53:15 +0000
ROA not before: Wed 24 Jun 2026 09:53:10 +0000
ROA not after: Fri 31 Jul 2026 09:53:10 +0000
asID: 62240
IP address blocks: 154.195.20.0/24 maxlen: 24
154.195.21.0/24 maxlen: 24
154.195.22.0/24 maxlen: 24
154.195.23.0/24 maxlen: 24
154.196.31.0/24 maxlen: 24
154.196.68.0/24 maxlen: 24
154.196.70.0/24 maxlen: 24
154.196.76.0/24 maxlen: 24
154.196.77.0/24 maxlen: 24
154.196.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 29 Jun 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119995 (0x1d4bb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 09:53:10 2026 GMT
Not After : Jul 31 09:53:10 2026 GMT
Subject: CN=6a3ba90b-2e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:4c:be:b0:97:60:d8:2d:3a:a4:d6:aa:ff:38:
51:d6:cc:1f:78:ec:d3:e2:8f:34:0d:26:57:b4:61:
ca:86:ba:7c:1c:77:b7:a2:e0:2d:cc:5b:d1:a6:de:
13:04:d8:18:bb:6e:e2:f3:d7:0a:b2:98:09:2a:4d:
93:07:f3:4b:34:ac:a1:56:06:2f:43:89:2b:3d:0e:
6b:93:9b:e2:16:8e:9e:cc:7a:07:a9:0e:d5:58:bc:
d3:1c:22:8a:5e:b2:c0:91:59:24:33:6c:58:de:a2:
41:66:bd:4b:f3:c8:e5:85:6a:e2:e5:fa:bc:d1:bd:
38:c4:0c:98:bc:dc:e3:29:76:f3:e0:e7:23:ca:7a:
2e:73:55:1b:a6:6b:a2:02:b3:cd:81:40:8a:72:bb:
85:fb:1a:d3:b4:92:6a:d2:39:44:04:60:34:ba:18:
ae:b1:04:d1:8e:be:3f:cf:a8:c0:54:86:78:c0:d8:
64:a1:a6:3d:6a:eb:c5:bc:76:5d:94:1b:72:86:84:
a5:e9:4d:93:c0:aa:63:7c:d6:02:6f:8a:f9:27:f3:
c0:3d:d3:4b:36:1a:b7:71:d2:c8:09:32:89:d7:61:
31:11:b5:cc:a7:1d:3f:4e:a3:0d:24:8c:f7:e9:37:
49:a8:6c:9a:1a:45:35:6c:1b:53:54:ef:d1:fd:c6:
c6:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:07:93:71:B7:AF:25:BC:EC:3C:ED:44:1E:6B:F1:5F:91:C3:F3:4F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/84F74DDA6FB211F19050E5DACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.20.0/22
154.196.31.0/24
154.196.68.0/24
154.196.70.0/24
154.196.76.0-154.196.78.255
Signature Algorithm: sha256WithRSAEncryption
45:15:74:1c:24:5d:7d:b7:cf:0f:e8:29:de:7c:e8:12:ce:f3:
f6:88:d0:21:05:71:2c:ff:1c:ae:27:62:3f:48:18:dd:8a:fc:
b5:b9:6f:ea:db:a6:50:27:a9:fc:e9:d0:37:16:fc:84:70:d7:
21:04:be:79:7f:94:34:56:36:23:bc:68:bc:94:79:87:d1:7c:
3f:bb:f0:b9:77:9b:bf:a6:86:2a:c8:99:78:2d:18:14:eb:1b:
01:ab:43:01:fe:20:9b:cf:51:d1:75:21:59:b7:ca:71:f4:4f:
03:7a:eb:43:d4:8c:92:c2:21:3e:b2:7a:13:e6:34:de:fe:a3:
21:4f:73:0a:aa:75:73:de:b8:1c:28:fb:38:d0:58:35:2c:27:
de:a1:22:fc:12:6f:b5:b1:dc:a9:21:a6:75:67:82:68:13:02:
5d:3d:63:0c:af:68:8a:2d:40:f8:2a:f6:63:45:5d:a3:f6:3a:
78:d6:f6:21:21:4d:63:42:a9:57:2e:8b:63:59:b5:79:9a:90:
87:2e:21:45:e4:a4:71:35:ad:64:b9:25:6b:8c:21:ec:a5:ea:
88:6d:9f:b3:0a:8c:79:e9:70:13:e7:ba:61:83:cb:32:67:34:
36:5d:42:69:2b:58:66:d4:02:a8:7f:77:14:52:99:86:42:c2:
99:22:a1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 17:40:21 2026 by rpki-client