Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92AF7F72568C11F18E3D47BFCE1D38B0.roa
File: 92AF7F72568C11F18E3D47BFCE1D38B0.roa (raw, json)
Hash identifier: vdZhj+IttcDmIhDSEQepd6mjiOlqz91S7VvbwEMkOSc=
Subject key identifier: 33:7D:17:EF:3B:21:0A:F2:39:33:F4:30:02:05:B9:55:B3:24:14:6A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CE7B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92AF7F72568C11F18E3D47BFCE1D38B0.roa
Signing time: Sat 23 May 2026 09:48:38 +0000
ROA not before: Sat 23 May 2026 09:48:33 +0000
ROA not after: Fri 10 Jul 2026 09:48:33 +0000
asID: 32043
IP address blocks: 154.193.99.0/24 maxlen: 24
154.193.100.0/22 maxlen: 24
154.193.104.0/22 maxlen: 24
154.193.108.0/23 maxlen: 24
154.193.110.0/24 maxlen: 24
154.200.55.0/24 maxlen: 24
154.200.56.0/24 maxlen: 24
154.200.57.0/24 maxlen: 24
154.200.58.0/24 maxlen: 24
154.200.59.0/24 maxlen: 24
154.200.80.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 11 Jun 2026 00:07:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118395 (0x1ce7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 23 09:48:33 2026 GMT
Not After : Jul 10 09:48:33 2026 GMT
Subject: CN=6a1177f6-bc4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6a:55:db:c3:c2:c8:76:d9:e5:9d:f0:28:35:
ef:e0:7c:bc:ea:4c:f8:a9:98:38:fc:4f:58:33:c4:
55:e9:97:df:f0:d8:c6:81:75:09:15:b5:67:bb:b0:
a2:2b:e7:65:30:67:33:94:14:0c:b1:ac:44:fe:db:
6a:64:d8:98:1d:70:74:c5:86:89:a6:88:41:3e:f2:
70:2e:13:a9:4b:96:ab:eb:19:15:62:e6:43:dc:18:
fd:62:ad:6c:10:87:78:8f:eb:76:0a:e5:99:87:a7:
2b:90:82:d1:92:56:cb:d8:88:e1:a1:36:48:9e:fa:
31:bf:5a:3e:cd:41:dd:e9:54:7d:ec:0b:c9:11:84:
f2:c0:84:6d:f4:4b:ea:26:5d:dd:7b:5a:95:cd:de:
a6:0f:88:b9:0e:04:ee:f3:05:bc:8d:26:60:ab:12:
5a:88:f2:91:0e:70:3b:c5:82:93:05:f7:95:b3:75:
a3:39:a0:1d:08:19:fc:2e:a5:34:b3:53:e7:8a:98:
07:db:49:be:7a:08:a8:e0:df:f8:19:ba:60:dc:44:
12:a4:e2:7f:cc:c2:74:25:fe:5a:32:e9:f9:d7:2d:
72:f6:38:61:4c:5a:69:fd:0f:fc:57:81:2d:b9:20:
31:4d:22:bb:65:70:6e:74:1e:6a:79:f4:7a:e2:ef:
62:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:7D:17:EF:3B:21:0A:F2:39:33:F4:30:02:05:B9:55:B3:24:14:6A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/92AF7F72568C11F18E3D47BFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.99.0-154.193.110.255
154.200.55.0-154.200.59.255
154.200.80.0/21
Signature Algorithm: sha256WithRSAEncryption
b1:db:7c:4b:75:fc:cc:bb:ae:72:94:15:83:ea:03:30:1c:0d:
77:cd:1a:94:9a:c9:ba:64:41:a0:f8:c4:fc:a5:5b:a1:e4:cd:
51:e5:a1:8d:1e:1c:70:bc:0d:37:73:5b:eb:86:74:2a:3d:f0:
1e:b8:ca:7a:88:31:74:a5:bd:d5:04:98:2c:7e:d1:e9:ec:83:
fa:d1:54:ac:f3:09:02:2b:6e:cc:bb:ea:3d:2d:f6:08:a1:41:
e9:75:87:ee:61:bb:2f:d0:1f:98:eb:e7:11:1e:96:5d:72:a1:
33:fb:32:58:1a:31:1d:51:0d:5d:43:4a:13:d8:99:f0:45:5c:
8b:fb:78:0e:d6:28:c2:b6:58:be:7f:6a:80:a5:54:72:4a:4d:
1b:3d:3a:c0:a5:cc:5a:fe:0b:af:f2:95:f1:b5:1d:d4:fe:44:
2c:b6:5d:dd:e3:41:44:c5:eb:d9:7f:63:4a:13:52:22:dd:bd:
ad:1e:00:1d:b9:cc:57:28:d9:21:28:99:c1:4d:fc:72:2a:a0:
34:00:72:05:72:09:52:b9:3a:3e:d0:d5:76:fc:27:f1:29:f5:
3c:91:98:ed:7d:5d:12:cd:2d:1a:29:cc:76:6a:6f:d7:ba:68:
14:87:6b:8e:e4:49:d2:eb:57:c6:07:1f:ed:02:c4:fc:18:1e:
a4:96:0b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 9 08:06:54 2026 by rpki-client