Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9889C61A8B1A11F1B5007BBBCE1D38B0.roa
File: 9889C61A8B1A11F1B5007BBBCE1D38B0.roa (raw, json)
Hash identifier: pyw0M1mUmz7aRIsMLauriSIVB2EZCt4Rv//jTu9RfWI=
Subject key identifier: 61:8E:60:D7:3F:93:93:9F:4F:D9:B7:98:44:4E:0B:2F:E5:E4:65:B7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DBB1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9889C61A8B1A11F1B5007BBBCE1D38B0.roa
Signing time: Wed 29 Jul 2026 06:56:17 +0000
ROA not before: Wed 29 Jul 2026 06:56:13 +0000
ROA not after: Tue 01 Sep 2026 06:56:13 +0000
asID: 44559
IP address blocks: 154.198.36.0/24 maxlen: 24
154.203.225.0/24 maxlen: 24
154.203.229.0/24 maxlen: 24
154.205.28.0/24 maxlen: 24
154.205.29.0/24 maxlen: 24
154.205.224.0/24 maxlen: 24
154.205.225.0/24 maxlen: 24
154.205.241.0/24 maxlen: 24
154.205.242.0/24 maxlen: 24
154.205.243.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121777 (0x1dbb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 29 06:56:13 2026 GMT
Not After : Sep 1 06:56:13 2026 GMT
Subject: CN=6a69a411-8203
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:5e:74:92:76:4d:97:76:1e:c4:ef:b9:f2:d2:
aa:58:0c:7e:c2:e7:e7:e6:73:c7:c3:de:30:49:09:
f3:ba:42:d6:3c:b3:e6:89:5f:09:d1:93:1b:7e:e1:
4b:c9:e2:9b:c5:07:3a:e6:31:4d:53:ff:f4:b1:28:
1d:34:e2:b7:23:25:9c:99:af:87:5f:ba:bc:33:13:
c8:74:33:42:d6:d0:1d:e8:ae:95:3c:7e:ec:d7:65:
4e:a8:d8:e8:24:ec:44:1e:52:35:0e:37:82:48:50:
7e:0d:b3:de:ec:0b:21:6a:cc:77:11:a4:8e:8d:2c:
65:3a:2c:15:4b:6c:73:5b:7c:b7:15:54:77:e1:56:
51:bf:88:43:d0:84:29:0d:82:a5:81:2e:b2:bb:a4:
77:33:8f:96:38:98:22:72:fc:09:79:12:88:1b:3e:
8d:96:0c:cb:18:1b:0b:da:a8:50:ef:9d:62:38:03:
9c:b5:c6:68:18:08:6f:3f:8e:9d:7a:ef:73:62:51:
c7:d8:87:0b:0c:c6:0b:84:c1:71:6c:da:91:63:11:
92:2e:20:e5:09:5f:78:30:8a:a9:7c:87:96:ab:d0:
55:97:e0:e8:0d:c9:85:ac:ba:5d:ad:95:6a:34:73:
d6:89:bf:f9:ee:f0:56:9d:7c:66:be:ba:76:eb:80:
9b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:8E:60:D7:3F:93:93:9F:4F:D9:B7:98:44:4E:0B:2F:E5:E4:65:B7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9889C61A8B1A11F1B5007BBBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.36.0/24
154.203.225.0/24
154.203.229.0/24
154.205.28.0/23
154.205.224.0/23
154.205.241.0-154.205.243.255
Signature Algorithm: sha256WithRSAEncryption
33:15:b4:7c:c4:77:0c:97:10:04:87:2e:f3:a8:da:12:7a:53:
64:53:ef:eb:ef:10:8c:ea:e2:ba:90:a6:78:a9:56:4e:7f:68:
b1:b9:39:7e:c8:3d:c0:de:ac:e6:bc:87:9f:bd:1a:3e:29:6a:
45:2f:c1:00:02:a8:77:fe:ae:90:8f:e1:58:10:3a:07:1a:f7:
58:32:f9:9e:14:26:42:71:12:69:23:10:75:be:33:69:59:56:
58:5e:da:7f:58:48:c6:b4:21:70:36:3e:e2:86:32:07:0d:ad:
74:81:b1:35:ec:91:a6:34:cc:d6:e7:79:c2:79:87:df:2b:b4:
9c:35:8e:8f:bb:2f:47:a9:de:44:65:a5:50:f4:f1:9e:10:84:
ac:04:53:78:34:03:62:cd:3a:aa:75:ee:fa:67:a8:27:8e:f9:
1c:0b:95:5f:0a:57:57:ee:13:33:65:a3:d5:be:df:af:d5:ef:
0c:21:3a:d5:e2:9f:15:06:fb:ea:21:d8:2a:65:59:07:35:bb:
0f:2d:cc:21:1c:a7:fb:10:a7:43:a9:f2:b4:99:53:74:09:ea:
66:cc:54:3f:8e:fc:fb:c8:b7:64:58:b0:26:0a:de:8c:b6:fa:
98:64:7a:6a:98:3f:44:6d:68:dd:dd:54:9f:7b:3d:0e:82:73:
ca:e6:77:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:09:02 2026 by rpki-client