Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DD74D4A574A11F1800A03C5CE1D38B0.roa
File: 8DD74D4A574A11F1800A03C5CE1D38B0.roa (raw, json)
Hash identifier: cCgTAZAyGUaf/48bDakBkEWHgMeVn28+75H8vuNPlUg=
Subject key identifier: F8:7B:A5:AF:42:A1:DB:60:83:F4:64:77:57:80:7F:AF:17:11:F4:08
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CEB9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DD74D4A574A11F1800A03C5CE1D38B0.roa
Signing time: Sun 24 May 2026 08:28:35 +0000
ROA not before: Sun 24 May 2026 08:28:30 +0000
ROA not after: Tue 30 Jun 2026 08:28:30 +0000
asID: 9304
IP address blocks: 154.193.2.0/24 maxlen: 24
154.193.35.0/24 maxlen: 24
154.194.195.0/24 maxlen: 24
154.196.134.0/24 maxlen: 24
154.196.160.0/24 maxlen: 24
154.196.179.0/24 maxlen: 24
154.196.180.0/24 maxlen: 24
154.199.4.0/24 maxlen: 24
154.200.1.0/24 maxlen: 24
154.200.26.0/24 maxlen: 24
154.200.43.0/24 maxlen: 24
154.200.51.0/24 maxlen: 24
154.200.52.0/24 maxlen: 24
154.200.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118457 (0x1ceb9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 24 08:28:30 2026 GMT
Not After : Jun 30 08:28:30 2026 GMT
Subject: CN=6a12b6b3-1b97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:77:f8:45:ba:0f:48:84:68:a1:58:67:30:aa:
8a:99:90:af:5a:35:d3:cf:bc:74:c3:b4:1d:8c:13:
a9:38:64:05:be:12:79:fa:b3:3c:79:47:02:0c:0b:
f3:26:33:9a:c0:ab:61:30:f3:fe:eb:f7:48:3f:fa:
dc:c6:0b:52:14:be:4c:da:69:fd:6b:6a:25:e9:5f:
90:b7:a9:ba:d3:14:be:dd:ab:24:6e:76:20:67:fd:
6d:7e:2f:a9:d8:e7:97:bc:f1:d3:ad:69:eb:e9:d5:
b2:c8:e8:de:b1:4a:e3:22:ac:9b:f2:29:d6:06:1e:
25:bd:5e:b2:77:f0:90:5a:9d:5c:44:6d:bd:73:a7:
6b:17:05:1b:d3:6c:8f:3f:19:63:a9:fd:6f:e3:07:
ce:d2:22:a1:36:2e:24:4d:80:4b:cc:58:6c:50:8c:
cc:30:1a:52:21:3e:3d:63:e7:5d:87:0f:56:3c:4a:
c8:22:14:08:01:b3:ca:56:00:9d:3e:d1:93:e0:4a:
ce:b9:3e:6f:4f:60:51:21:f7:56:2b:58:c9:b7:9d:
9a:e5:3d:47:90:cf:cb:09:3e:21:41:55:07:fe:cf:
ec:2b:28:d2:9f:c8:a4:20:e3:4a:6d:8e:d0:4d:68:
11:89:58:57:0f:bd:f2:f5:9e:ae:29:57:70:1a:df:
4b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:7B:A5:AF:42:A1:DB:60:83:F4:64:77:57:80:7F:AF:17:11:F4:08
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8DD74D4A574A11F1800A03C5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.2.0/24
154.193.35.0/24
154.194.195.0/24
154.196.134.0/24
154.196.160.0/24
154.196.179.0-154.196.180.255
154.199.4.0/24
154.200.1.0/24
154.200.26.0/24
154.200.43.0/24
154.200.51.0-154.200.52.255
154.200.129.0/24
Signature Algorithm: sha256WithRSAEncryption
05:8a:dd:ad:b6:28:91:72:df:5b:e8:82:a0:42:89:ed:78:8f:
3b:c4:72:7e:ab:3b:a9:f7:e9:bc:c9:ec:4d:6c:68:46:cd:75:
6d:3f:9c:91:af:50:07:3f:ac:3d:12:e3:82:8c:cd:8d:01:5f:
78:80:0f:91:82:0a:7e:96:9a:60:fa:33:de:28:24:ca:d3:24:
dc:c8:ec:83:4e:fe:61:62:e7:c3:a0:20:9c:9a:53:e8:9f:55:
3e:52:57:79:0d:0f:97:da:38:23:03:06:c3:ec:ef:98:b8:52:
b2:31:27:ec:8a:9c:a3:83:92:d6:92:0a:b6:1e:82:e7:e4:d8:
cd:4f:48:0b:95:74:88:68:2d:12:4e:d1:de:92:f4:24:71:0d:
3c:02:ee:f0:59:00:48:da:e9:5b:65:d0:07:54:10:ab:bd:95:
53:4a:a1:4b:46:ea:35:6c:99:04:2d:95:40:31:16:7c:fb:3b:
4e:d1:3d:99:e8:e0:e1:48:48:8b:1a:14:b8:ab:07:b3:8c:1b:
42:20:10:bd:69:54:cb:c4:03:a0:66:f5:ae:b2:9b:5e:48:24:
1c:de:40:02:5b:7b:c4:9f:56:9c:13:30:d0:2e:42:63:ec:4c:
1a:1c:21:eb:86:ce:e2:aa:5d:a6:13:ff:f5:e1:b9:77:7d:98:
b0:a8:97:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 20:51:08 2026 by rpki-client