Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8FDD1E845B9C11F1B810D8F4CE1D38B0.roa
File: 8FDD1E845B9C11F1B810D8F4CE1D38B0.roa (raw, json)
Hash identifier: ttS3bb8UFnKU0f4yTSwtiHlZLnPEdWSmrDnpXZB7kpU=
Subject key identifier: D1:65:44:15:28:46:23:73:05:A2:52:A4:29:6E:DE:0F:22:1B:DB:93
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D077
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8FDD1E845B9C11F1B810D8F4CE1D38B0.roa
Signing time: Fri 29 May 2026 20:25:42 +0000
ROA not before: Fri 29 May 2026 20:25:37 +0000
ROA not after: Tue 07 Jul 2026 20:25:37 +0000
asID: 202656
IP address blocks: 154.203.230.0/24 maxlen: 24
154.203.231.0/24 maxlen: 24
154.203.250.0/24 maxlen: 24
154.203.251.0/24 maxlen: 24
154.210.237.0/24 maxlen: 24
154.218.30.0/24 maxlen: 24
154.219.16.0/24 maxlen: 24
154.219.64.0/24 maxlen: 24
154.219.65.0/24 maxlen: 24
154.219.66.0/24 maxlen: 24
154.219.67.0/24 maxlen: 24
154.219.68.0/24 maxlen: 24
154.219.69.0/24 maxlen: 24
154.219.70.0/24 maxlen: 24
154.219.76.0/24 maxlen: 24
154.219.77.0/24 maxlen: 24
154.219.78.0/24 maxlen: 24
154.219.80.0/24 maxlen: 24
154.219.81.0/24 maxlen: 24
154.219.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Jun 2026 00:07:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118903 (0x1d077)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 29 20:25:37 2026 GMT
Not After : Jul 7 20:25:37 2026 GMT
Subject: CN=6a19f645-a4b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7d:f1:44:49:8f:80:50:67:db:b4:b7:45:8f:
92:bb:e2:cb:8a:0d:4a:17:47:6f:e3:5f:0b:e4:f5:
55:93:f5:ea:48:8e:62:08:96:3a:73:e1:54:ce:20:
48:38:18:a6:14:b5:9c:c1:2f:23:f4:49:f2:ee:3a:
b3:07:d0:ea:30:fe:b1:d2:6f:33:e2:47:57:5a:83:
9a:5a:95:fb:8f:1d:77:cb:db:f0:14:a3:76:58:da:
20:8a:9d:cd:de:10:c8:d5:be:a0:7a:ca:6d:51:ad:
4a:25:aa:52:e7:52:77:71:d0:68:86:0e:15:83:23:
82:fe:ac:2b:aa:d2:4f:ea:f6:fa:0e:e9:d5:a8:59:
aa:b8:7e:74:36:57:49:3b:07:aa:7d:bd:1a:83:7a:
53:da:7d:21:52:ef:45:6d:42:6b:2d:ac:67:c0:0e:
61:d5:3b:9c:f3:1f:b0:79:80:7a:33:c1:a6:76:1e:
d8:36:43:f4:b5:5d:5f:40:ea:73:eb:ce:7b:c7:74:
96:c7:c7:70:3d:7c:82:6c:44:35:a9:90:55:93:45:
dd:8d:09:89:33:b9:97:7d:99:cc:10:23:96:d9:83:
13:c3:8b:bd:c3:e9:27:51:d8:db:54:61:8a:26:cd:
fa:77:7a:11:e7:a9:13:a7:e2:15:c8:9b:7a:f0:15:
61:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:65:44:15:28:46:23:73:05:A2:52:A4:29:6E:DE:0F:22:1B:DB:93
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8FDD1E845B9C11F1B810D8F4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.230.0/23
154.203.250.0/23
154.210.237.0/24
154.218.30.0/24
154.219.16.0/24
154.219.64.0-154.219.70.255
154.219.76.0-154.219.78.255
154.219.80.0-154.219.82.255
Signature Algorithm: sha256WithRSAEncryption
d1:bf:5a:20:cb:44:2a:84:21:9b:5f:6d:52:67:31:e7:34:5d:
e4:e7:cd:d9:e7:4c:31:fd:09:26:09:be:8f:23:32:a7:88:5e:
b3:d6:62:21:bb:da:41:8b:68:09:fe:56:93:4c:22:90:0b:3b:
0f:da:2d:1c:98:67:92:3c:ba:e1:19:18:34:69:19:42:64:e9:
34:f4:bb:d8:10:15:2b:c3:84:5d:73:fc:40:df:72:6c:94:b0:
b9:9c:7e:64:f1:b5:fc:0d:87:0c:fd:09:6f:1b:2e:53:aa:86:
ea:8a:c8:b4:2c:b2:49:15:5e:6f:d4:ea:1c:a1:70:83:c8:95:
43:d3:58:ff:11:05:c1:46:be:5a:c5:b3:9d:33:57:44:07:bf:
23:57:88:2d:ad:bc:9f:c8:bd:8e:3f:9e:9f:85:56:94:e0:59:
d3:eb:57:a3:1a:14:3c:af:cf:40:8d:e1:b0:ab:05:bc:2a:0e:
ae:d5:82:cc:14:9a:78:59:46:0f:6d:4f:9b:40:f7:f3:c4:11:
72:05:c9:8a:cf:4a:cb:38:55:cb:ad:a0:d2:21:e8:50:7a:b4:
62:2a:c5:ca:7e:13:73:d2:d5:f9:04:32:2f:69:41:ff:5e:95:
ba:d2:bf:3d:9a:48:35:6a:41:2d:68:31:50:f1:0d:33:b9:40:
77:82:51:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 07:55:54 2026 by rpki-client