Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9456470E7D9011F1B0DFE4D4CE1D38B0.roa
File: 9456470E7D9011F1B0DFE4D4CE1D38B0.roa (raw, json)
Hash identifier: JJLx32QIm9Weryv7X4AWajeY6bmqDFb00GqUJf/grRU=
Subject key identifier: 9B:22:06:74:00:A9:36:B5:8E:38:47:78:98:99:74:17:18:92:25:D7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D863
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9456470E7D9011F1B0DFE4D4CE1D38B0.roa
Signing time: Sun 12 Jul 2026 01:25:35 +0000
ROA not before: Sun 12 Jul 2026 01:25:30 +0000
ROA not after: Tue 10 Jul 2029 01:25:30 +0000
asID: 17561
IP address blocks: 154.198.248.0/24 maxlen: 24
154.198.249.0/24 maxlen: 24
154.198.250.0/24 maxlen: 24
154.198.251.0/24 maxlen: 24
154.198.252.0/24 maxlen: 24
154.198.253.0/24 maxlen: 24
154.198.254.0/24 maxlen: 24
154.198.255.0/24 maxlen: 24
154.202.32.0/24 maxlen: 24
154.202.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120931 (0x1d863)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 12 01:25:30 2026 GMT
Not After : Jul 10 01:25:30 2029 GMT
Subject: CN=6a52ed0e-0ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:43:b3:e9:bc:25:d6:9a:c9:a1:f9:52:a7:dd:
e9:b2:ef:78:2d:16:31:1d:16:8b:32:19:04:65:ac:
0b:61:96:db:a3:82:0f:ef:29:ec:7a:99:41:5d:f5:
f0:65:82:c8:fe:07:2c:8e:c8:d8:de:40:17:aa:f5:
65:51:b1:1c:d6:41:28:fb:9b:f3:bb:8f:79:6c:4e:
b7:e5:dc:56:4e:f7:22:c7:39:30:7b:ed:6d:5f:cd:
23:83:68:8a:9f:96:6e:bd:21:6f:c4:e2:af:ab:8b:
1a:62:18:2d:f1:09:cb:17:9e:7f:f4:ec:67:66:ac:
52:50:f9:7e:19:ec:c6:69:e5:99:99:f0:79:60:bc:
e6:52:b8:c0:01:5b:9c:d9:b1:d2:d9:9a:51:f0:b9:
73:8d:33:79:3c:25:7d:68:e8:2c:83:93:60:0e:ce:
3f:0e:34:f7:a4:26:88:3f:ce:ce:93:d8:c1:54:d1:
79:cb:c0:f9:bd:06:d0:89:5f:15:bc:d2:1e:17:e6:
02:08:70:d7:89:cd:9d:ab:ff:f8:a8:65:0c:64:cb:
f9:3e:8c:93:5c:8a:a4:5a:0d:0d:e8:18:69:c8:86:
62:b0:90:fb:2b:a4:61:22:60:b5:9b:4b:37:0c:5e:
b1:a7:9c:9c:79:18:04:40:57:b0:63:71:56:d2:4c:
ce:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:22:06:74:00:A9:36:B5:8E:38:47:78:98:99:74:17:18:92:25:D7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9456470E7D9011F1B0DFE4D4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.248.0/21
154.202.32.0/23
Signature Algorithm: sha256WithRSAEncryption
87:38:ad:e2:84:b9:13:40:15:6a:9d:17:31:25:63:cc:c6:be:
c2:62:9c:dc:99:ba:54:b8:41:ba:1e:05:95:48:c1:3f:46:a6:
77:8c:0a:29:48:f1:21:51:27:f1:6c:b3:70:86:8c:0e:c9:28:
87:87:a5:39:0a:31:ff:e4:4f:97:2a:10:dc:f5:1f:88:04:b7:
c2:4c:b3:64:fd:8b:0e:1a:e5:c9:34:b3:3a:29:9e:17:ce:cb:
96:22:24:44:13:be:1f:ca:1a:15:0f:8e:e5:39:b2:ea:68:76:
21:25:fb:b1:62:52:a4:fd:67:82:41:e2:c8:c9:35:0b:c6:22:
13:03:d8:ef:82:01:ff:8e:1b:8e:fd:2d:7f:ec:2e:b7:04:74:
c7:88:ed:c1:f8:32:e3:63:83:df:73:9c:77:42:78:63:39:11:
15:22:6f:1d:3b:b1:23:f9:88:90:35:e9:13:43:87:b5:16:2b:
f6:6b:35:b2:5a:a1:ca:a3:12:f1:19:0e:a6:10:64:b1:c6:cb:
84:16:68:76:e4:85:47:3e:8e:2a:b1:e0:82:5b:08:68:5a:e9:
69:03:7a:e2:a8:4c:55:39:b2:81:e1:a9:a0:89:61:1d:67:f6:
f7:13:fc:d2:b8:f7:f5:20:ff:66:82:45:0e:39:70:ba:43:b0:
c9:10:ad:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:26 2026 by rpki-client