Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92933AC87C4411F191AA1302CF1D38B0.roa
File: 92933AC87C4411F191AA1302CF1D38B0.roa (raw, json)
Hash identifier: C4Rhclp7fjZ7BtnD/0JkOAhnCUVOdhP5X/5mrIcWgSA=
Subject key identifier: 5B:FE:39:BA:FF:C9:FF:4A:4A:62:7C:78:F6:5A:49:EA:34:66:A2:EE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D7F1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92933AC87C4411F191AA1302CF1D38B0.roa
Signing time: Fri 10 Jul 2026 09:48:59 +0000
ROA not before: Fri 10 Jul 2026 09:48:54 +0000
ROA not after: Tue 10 Jul 2029 09:48:54 +0000
asID: 17561
IP address blocks: 154.208.2.0/24 maxlen: 24
154.208.3.0/24 maxlen: 24
154.208.4.0/24 maxlen: 24
154.208.5.0/24 maxlen: 24
154.208.6.0/24 maxlen: 24
154.208.7.0/24 maxlen: 24
154.208.8.0/24 maxlen: 24
154.208.9.0/24 maxlen: 24
154.208.10.0/24 maxlen: 24
154.208.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120817 (0x1d7f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 10 09:48:54 2026 GMT
Not After : Jul 10 09:48:54 2029 GMT
Subject: CN=6a50c00b-fc07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:05:12:4e:d8:3d:da:f5:24:32:43:92:95:65:
25:9a:d5:01:02:78:9f:56:5d:0d:59:d9:fa:ff:63:
c7:a0:6e:a5:f5:51:61:2a:30:50:8e:53:a5:ec:18:
41:90:f3:dc:c1:79:e4:f1:1b:43:b4:21:ce:42:6e:
6f:73:2a:bb:0d:de:55:80:89:6e:8e:5b:f5:81:b9:
8c:5d:be:3e:a6:d8:b4:be:c1:e6:93:e3:8e:4e:0f:
49:5d:a8:04:65:6e:c2:ce:59:d2:55:66:c1:17:ed:
c2:5c:74:97:b0:45:52:3c:6d:23:99:74:1f:a8:85:
a4:bb:e8:5d:58:e5:c4:81:0d:89:37:ff:dc:df:bd:
b4:ed:8a:24:a1:49:82:09:31:5d:a3:8d:fc:35:72:
20:4f:84:72:89:d5:28:8b:89:c2:43:e8:f1:27:c4:
d2:57:43:13:05:a4:ec:76:01:f5:f8:2f:29:b6:bc:
45:2e:d7:d3:b3:ef:59:97:78:a2:20:1f:b5:56:e1:
8a:61:0c:43:a5:26:d9:05:a4:86:50:c0:9f:42:ac:
9f:8b:f7:0d:ca:7b:37:72:38:24:0e:52:54:d2:3b:
17:d6:76:46:55:ae:0d:28:68:0a:7e:b7:d6:11:0f:
4a:c8:38:6d:8e:32:1d:78:4d:14:f8:a4:f9:f1:e8:
57:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:FE:39:BA:FF:C9:FF:4A:4A:62:7C:78:F6:5A:49:EA:34:66:A2:EE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92933AC87C4411F191AA1302CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.2.0-154.208.11.255
Signature Algorithm: sha256WithRSAEncryption
8d:60:de:a5:fc:b5:66:6b:b3:8d:10:87:84:b1:a2:82:a6:2c:
69:13:a1:08:5b:14:7e:b5:f2:3c:28:26:79:bf:9a:da:00:5d:
7e:f4:a2:72:8e:1b:bd:b5:e7:54:d3:72:13:b1:01:32:82:19:
62:71:5c:d4:c3:ff:1b:53:6f:61:4d:1f:ab:60:ee:94:38:35:
1e:69:05:26:ec:1a:f3:1f:9f:0d:e8:12:fb:19:c4:87:3c:95:
a8:4b:44:cb:eb:6c:82:4f:ef:1b:28:b5:3b:88:44:72:a9:bc:
6a:fb:f7:a6:fc:ab:32:da:95:af:e9:60:76:0b:11:61:b6:56:
3b:0d:94:71:11:76:ff:b3:65:d8:9a:e4:d4:f0:42:59:cc:f3:
a5:6b:8f:cd:c9:bd:30:26:f7:85:d0:45:1b:43:ae:93:37:ca:
c2:f1:e8:a6:fb:4a:78:2f:5a:43:71:a0:8f:9a:06:e3:ff:61:
92:04:38:58:00:75:3f:73:b2:77:0d:18:7a:d6:5b:92:b6:4e:
58:3c:d9:a0:37:e4:bf:53:a2:20:7e:fd:f3:32:dc:6a:4f:20:
36:9b:2b:49:a7:c8:24:d0:78:c7:22:cf:31:bb:65:43:24:a9:
83:87:a2:75:9e:a7:f7:60:27:ef:29:79:d3:24:6d:16:c8:73:
90:11:89:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:27 2026 by rpki-client