Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1EC2266713911F1BCE771A8CE1D38B0.roa
File: A1EC2266713911F1BCE771A8CE1D38B0.roa (raw, json)
Hash identifier: CdNpM6Z0H4Vq6zLuyF8WeRCoPB+qHWDzjnp1WpeksXs=
Subject key identifier: F8:AC:3F:87:AC:4E:4F:0A:5B:ED:52:94:EA:07:A7:04:EE:3C:EF:C7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D553
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1EC2266713911F1BCE771A8CE1D38B0.roa
Signing time: Fri 26 Jun 2026 08:32:57 +0000
ROA not before: Fri 26 Jun 2026 08:32:53 +0000
ROA not after: Thu 30 Jul 2026 08:32:53 +0000
asID: 9304
IP address blocks: 154.200.37.0/24 maxlen: 24
154.200.46.0/24 maxlen: 24
154.200.48.0/24 maxlen: 24
154.200.53.0/24 maxlen: 24
154.200.54.0/24 maxlen: 24
154.200.60.0/24 maxlen: 24
154.200.130.0/24 maxlen: 24
154.200.154.0/24 maxlen: 24
154.200.156.0/24 maxlen: 24
154.211.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 11:51:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120147 (0x1d553)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 26 08:32:53 2026 GMT
Not After : Jul 30 08:32:53 2026 GMT
Subject: CN=6a3e3939-b2a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:cc:f9:37:7b:13:54:3b:75:43:2f:ef:27:be:
73:3f:12:94:90:6e:51:c7:f6:b9:a1:9d:00:73:4e:
4b:4e:70:0d:bd:35:b1:11:4a:f0:ea:ee:2c:51:cd:
a3:83:cb:95:73:b2:d0:9e:1d:74:ef:92:3e:be:f9:
56:35:b0:dc:8d:bc:0b:2b:04:16:47:86:72:46:90:
2a:90:f9:7b:3d:40:06:8f:e2:74:5e:a7:46:c7:bb:
df:ae:bc:9f:75:54:0c:c5:08:74:09:5e:0c:59:f1:
64:4c:68:98:fa:15:2f:51:df:86:74:e3:cf:24:f7:
6c:5d:fa:80:0a:cc:07:de:b9:45:2a:83:13:bb:a3:
dd:34:a2:4e:99:78:fe:1a:60:9f:a4:8b:ff:2d:7e:
e5:a9:61:f9:ff:f7:af:89:62:15:bf:0b:45:a9:c9:
a0:e5:ba:11:aa:88:7f:67:f4:85:57:d7:a0:13:57:
c4:2d:0e:df:d0:9f:30:0c:b6:ed:ed:2f:ba:ee:35:
53:7f:44:61:7b:30:a6:da:be:28:09:05:11:11:01:
e6:fa:a4:e4:cb:01:be:90:cc:c9:35:57:3f:4a:3e:
b1:a2:24:e5:6e:4c:80:0c:fc:f2:d5:74:dd:2d:b0:
12:66:38:0a:3f:0b:f7:9c:77:c8:11:b9:8b:83:6a:
72:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:AC:3F:87:AC:4E:4F:0A:5B:ED:52:94:EA:07:A7:04:EE:3C:EF:C7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A1EC2266713911F1BCE771A8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.37.0/24
154.200.46.0/24
154.200.48.0/24
154.200.53.0-154.200.54.255
154.200.60.0/24
154.200.130.0/24
154.200.154.0/24
154.200.156.0/24
154.211.211.0/24
Signature Algorithm: sha256WithRSAEncryption
07:49:2e:7c:88:fe:60:b2:c3:04:a7:67:91:6f:13:94:33:17:
db:6f:9a:a7:ed:f6:6b:01:3c:7d:f7:81:f4:fe:50:f1:43:06:
a3:dd:3f:51:5f:e6:f3:70:76:26:72:a2:09:49:2f:d1:53:1b:
a0:86:ca:ef:8c:68:db:ac:a9:c0:a5:1b:fa:7b:5a:c0:a3:16:
df:3c:d8:be:83:1e:b4:80:1f:be:52:70:cf:fb:1a:99:6b:7c:
31:02:15:05:ec:8d:9b:f8:35:22:d5:63:ef:42:f3:87:26:58:
44:19:ff:0c:d0:0a:af:e2:43:40:70:6c:5f:c9:1a:4d:d8:84:
c1:ef:6e:db:7f:c9:63:29:ce:98:b0:c6:d0:25:91:c6:69:01:
b3:97:01:df:6a:78:7c:e3:d6:b7:32:37:15:e3:7d:e0:cc:44:
9b:d1:3b:03:ff:86:2c:5c:16:c7:05:fc:4e:58:10:ad:e3:e4:
a1:94:1a:20:b8:33:78:22:f0:b7:00:98:58:11:3c:ff:c5:31:
44:f9:a8:0c:e9:fe:94:5d:09:3a:b2:60:d3:de:ec:76:d0:e0:
ab:a0:8a:69:50:a4:4d:b0:9a:e2:91:a5:b1:2a:0e:f2:ac:13:
05:6f:e3:c6:11:6e:43:da:bd:2f:a3:22:27:2c:b8:80:3d:e1:
d3:8e:93:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:46:13 2026 by rpki-client