Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8EE146C490A611F1B9047BFBCE1D38B0.roa
File: 8EE146C490A611F1B9047BFBCE1D38B0.roa (raw, json)
Hash identifier: 4I+4+vrNiNHolq1f/HNi+J5kbCe+EYshQUofsCfjiJw=
Subject key identifier: E7:B0:FB:A8:98:33:C2:84:B1:F5:16:FF:7E:17:46:29:89:48:41:D6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DCBD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8EE146C490A611F1B9047BFBCE1D38B0.roa
Signing time: Wed 05 Aug 2026 08:20:46 +0000
ROA not before: Wed 05 Aug 2026 08:20:42 +0000
ROA not after: Sun 15 Aug 2027 08:20:42 +0000
asID: 36898
IP address blocks: 154.198.2.0/24 maxlen: 24
154.198.168.0/24 maxlen: 24
154.198.170.0/24 maxlen: 24
154.198.171.0/24 maxlen: 24
154.201.48.0/24 maxlen: 24
154.201.49.0/24 maxlen: 24
154.214.194.0/24 maxlen: 24
154.214.197.0/24 maxlen: 24
154.214.198.0/24 maxlen: 24
154.214.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122045 (0x1dcbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 5 08:20:42 2026 GMT
Not After : Aug 15 08:20:42 2027 GMT
Subject: CN=6a72f25e-1301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ac:5a:72:4f:61:c5:a3:9e:db:a1:5c:69:61:
af:51:7f:a9:2d:fe:b1:bc:d5:a1:38:ed:a8:cb:2e:
f5:7c:f4:32:2c:30:64:3a:43:d6:72:49:d7:9e:d7:
66:c9:b0:9c:85:c8:27:f4:76:26:37:67:38:16:e2:
46:24:46:5a:67:f9:db:b4:4b:36:76:eb:e3:0e:0e:
08:c0:c2:57:bf:d4:74:c6:ab:6c:cc:60:02:89:69:
f4:37:40:13:78:40:df:00:b4:58:53:be:af:81:70:
42:6a:14:b9:7d:30:06:13:ac:00:ed:77:73:cc:f0:
bf:03:9f:77:fb:35:c9:58:c1:d3:8a:45:e4:67:09:
2c:43:8a:5a:0c:2f:7c:85:35:d8:e8:02:47:de:14:
97:ca:a2:d2:ec:80:f6:6f:f5:9a:fd:08:ea:7e:68:
62:9e:cf:69:35:15:3c:a3:3f:77:bb:3a:45:fd:5a:
cb:9b:7e:21:7a:d7:aa:f6:48:20:5c:cc:8d:c4:ea:
e3:91:6b:7b:89:b9:78:63:c2:53:6d:f9:23:8f:d7:
45:2b:fa:e9:93:9a:d8:33:8d:e2:fc:c9:a4:61:82:
40:9e:fb:05:b2:ff:1f:6f:ad:af:d9:58:e7:21:b8:
1c:61:6a:3b:e0:fa:90:b7:9a:60:e3:e2:52:92:5a:
35:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:B0:FB:A8:98:33:C2:84:B1:F5:16:FF:7E:17:46:29:89:48:41:D6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8EE146C490A611F1B9047BFBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.2.0/24
154.198.168.0/24
154.198.170.0/23
154.201.48.0/23
154.214.194.0/24
154.214.197.0-154.214.199.255
Signature Algorithm: sha256WithRSAEncryption
b2:37:d4:82:28:bc:cb:14:1c:b7:d3:c8:ee:1d:76:52:08:a9:
6a:ef:cd:30:4c:19:f3:27:68:92:85:0e:9f:ad:f0:54:58:c4:
5d:2a:86:e8:09:fe:98:6e:5c:0c:73:9c:b1:75:4c:f8:69:7e:
b2:8d:e8:f6:72:9a:cf:25:d5:30:1c:64:89:45:b6:a1:f7:f2:
13:d0:b2:2e:a0:6b:f3:aa:57:dc:51:48:cd:9b:80:ed:ef:a7:
1b:be:9f:21:9e:de:c3:d6:24:cd:fc:50:c1:cc:37:3c:b6:d1:
5e:0a:1e:02:fa:a5:9e:5b:11:3e:3d:cf:00:15:3d:7e:a5:8c:
d9:97:a9:94:17:49:f8:ea:c4:9e:c9:73:56:d1:40:ef:a0:a3:
94:97:ae:98:bd:7a:e9:91:b8:96:ac:64:8d:fe:b9:37:fa:51:
f9:32:9e:d0:f7:0d:13:05:1b:fd:79:bc:9b:2b:14:8c:0b:70:
60:5f:ac:b6:d2:49:a6:51:6e:e9:12:3b:b5:aa:e6:9d:d1:1e:
db:d4:66:dd:6f:5e:6c:e3:43:6d:1b:7a:32:cc:4a:a1:41:17:
b6:be:43:90:f7:d4:d1:b3:4e:cb:6d:7d:ec:de:df:f8:a8:e2:
08:a4:81:e5:03:5f:ab:7a:84:01:25:9b:9f:25:22:07:32:4d:
f4:0e:ea:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:08:48 2026 by rpki-client