Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94269DA681B411F18FE23CE3CE1D38B0.roa
File: 94269DA681B411F18FE23CE3CE1D38B0.roa (raw, json)
Hash identifier: wp/QSh84SFZrAAcqDldHWnQTEC/8w6mDFdNRlu5VsYE=
Subject key identifier: FF:BB:AB:E9:B3:B3:0D:FA:61:C6:74:81:DE:BC:9B:CF:43:64:84:45
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D94D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94269DA681B411F18FE23CE3CE1D38B0.roa
Signing time: Fri 17 Jul 2026 07:53:21 +0000
ROA not before: Fri 17 Jul 2026 07:53:17 +0000
ROA not after: Mon 24 Aug 2026 07:53:17 +0000
asID: 139923
IP address blocks: 154.89.151.0/24 maxlen: 24
154.89.152.0/23 maxlen: 24
154.89.157.0/24 maxlen: 24
154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121165 (0x1d94d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 17 07:53:17 2026 GMT
Not After : Aug 24 07:53:17 2026 GMT
Subject: CN=6a59df71-2700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4b:9a:4e:70:78:d3:7f:e2:67:99:ca:ef:4b:
26:9a:b5:89:33:85:f7:89:19:ac:3e:b4:2d:cf:b9:
be:00:96:50:11:cd:02:71:13:37:17:bb:e4:66:a1:
90:e7:4d:1c:7e:3d:68:72:26:18:1c:83:d6:76:f7:
26:1a:5d:86:2b:41:34:2f:30:af:78:c5:96:9e:ce:
ed:6b:15:e7:08:23:36:8d:c7:20:52:80:87:ed:31:
c4:2e:c3:af:b4:00:4f:7f:58:5f:8f:52:9f:35:2b:
78:ac:c9:a6:c8:4d:8d:31:d7:ff:9d:a9:b9:39:c8:
4e:58:20:b3:6c:1f:36:25:c1:b4:39:a7:95:5c:b1:
12:70:e2:d3:19:eb:bd:2c:dd:95:10:1b:2e:a7:65:
c9:f4:4b:36:e5:9d:5f:13:60:fa:df:7d:08:93:3e:
55:1b:73:9e:99:bb:12:14:9a:a6:b7:2b:dc:03:46:
76:18:6c:bc:f5:2e:c9:5d:b2:5f:82:91:05:03:08:
ad:0f:5e:59:59:1f:aa:db:42:a7:8e:b7:1d:47:9a:
ee:c1:82:7d:29:b2:d8:e4:d1:d2:1b:eb:93:40:1a:
8a:94:a9:75:e8:3d:ad:2e:70:b7:10:d5:89:2a:50:
17:7f:35:00:d2:df:57:29:12:91:d8:e1:54:2b:05:
92:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:BB:AB:E9:B3:B3:0D:FA:61:C6:74:81:DE:BC:9B:CF:43:64:84:45
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/94269DA681B411F18FE23CE3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.151.0-154.89.153.255
154.89.157.0/24
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
85:3b:38:88:ba:e7:1f:d4:52:4e:45:c3:2a:6a:1c:d4:01:a1:
91:1e:e0:bd:95:3f:3b:b9:52:90:a4:2f:07:9b:88:29:b0:3b:
bf:90:f2:1f:12:4e:cb:25:6b:29:83:f6:34:f0:1b:0f:de:3b:
e9:c5:3f:54:75:1e:00:79:c2:db:c3:f7:17:19:89:bc:53:7b:
26:f7:2b:4d:89:94:9d:06:c1:8d:87:e4:60:55:25:b0:88:1b:
fd:5c:88:21:c4:dd:43:20:e3:b8:c7:24:a4:f1:32:bd:db:ab:
3f:ea:06:81:e8:cd:0a:89:90:7e:24:98:a7:2a:cf:5c:dc:19:
7b:29:6c:01:df:e7:80:9d:d9:04:6d:d2:49:ac:be:94:d7:ce:
7d:a9:e8:f3:7f:70:08:f7:db:db:98:d9:59:5e:ef:1c:37:0e:
15:0e:ca:24:83:4c:0d:8b:f7:95:03:8c:70:b6:f1:71:da:1c:
4d:ca:9f:91:a2:4e:6a:66:26:83:32:2a:4b:c2:c4:c8:a2:6e:
56:0f:58:e4:63:02:8c:54:fb:e0:c9:a1:61:10:fb:8d:5b:32:
fa:af:22:3b:df:c8:86:bc:17:62:da:49:e4:d6:b9:68:ac:c0:
21:42:06:f9:12:dd:cb:69:cf:2e:40:0d:e3:40:f0:6c:f1:32:
6c:6f:22:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:24 2026 by rpki-client