Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A220C206755711F1A1895EA9CE1D38B0.roa
File: A220C206755711F1A1895EA9CE1D38B0.roa (raw, json)
Hash identifier: bheTOyZ7FDtLkC5V/hEItS+rp0pwKYptYYb5qmjZ3qc=
Subject key identifier: DC:A4:51:9E:86:20:CF:5D:D6:55:89:5A:CF:1D:2A:CD:CA:E2:EA:C8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D638
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A220C206755711F1A1895EA9CE1D38B0.roa
Signing time: Wed 01 Jul 2026 14:17:47 +0000
ROA not before: Wed 01 Jul 2026 14:17:42 +0000
ROA not after: Sun 09 Aug 2026 14:17:42 +0000
asID: 202656
IP address blocks: 154.210.237.0/24 maxlen: 24
154.219.64.0/24 maxlen: 24
154.219.65.0/24 maxlen: 24
154.219.66.0/24 maxlen: 24
154.219.67.0/24 maxlen: 24
154.219.68.0/24 maxlen: 24
154.219.69.0/24 maxlen: 24
154.219.70.0/24 maxlen: 24
154.219.76.0/24 maxlen: 24
154.219.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Wed 22 Jul 2026 17:02:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120376 (0x1d638)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 1 14:17:42 2026 GMT
Not After : Aug 9 14:17:42 2026 GMT
Subject: CN=6a45218b-8006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:79:fe:44:2e:58:9f:93:9c:ec:dd:3b:13:8b:
a1:39:d0:e0:04:bd:f4:e9:36:01:bb:48:b2:19:29:
7e:bd:97:e3:2b:0e:d5:ee:98:48:96:9b:f9:6e:8c:
b9:75:79:1a:c6:4d:4d:76:2a:b3:81:89:28:96:13:
ee:b9:2b:32:72:e1:53:7e:50:9d:55:b3:4e:fc:a3:
80:a9:f9:c9:24:ab:2d:d0:72:5e:50:db:2c:a4:87:
4d:2e:30:06:8b:bf:76:8b:d7:f9:dc:ba:d4:ff:6a:
7c:26:98:5c:70:40:f3:69:82:8d:58:a2:5e:42:6d:
60:5b:b5:b9:b0:80:a8:38:0e:83:59:be:bd:42:57:
de:5f:ad:e5:18:72:2a:c6:cd:cd:59:4e:ed:83:e8:
65:28:5f:8e:7b:5c:1e:ec:03:71:e7:43:2f:ff:49:
ec:22:54:b0:db:a6:7e:2d:09:12:62:cc:14:e9:36:
82:c7:b1:c8:fe:56:c6:25:b7:22:ca:35:3a:d3:e3:
e6:ba:5f:85:b1:c4:a6:30:a1:cb:1f:5e:31:a4:8b:
7c:d2:bb:34:1b:33:7e:73:b5:8a:46:3a:9d:7f:79:
80:05:89:09:9a:a5:e4:e1:aa:30:0e:a3:74:df:63:
c5:b7:0f:dd:f0:37:3f:2a:0e:f9:18:73:ab:1b:b6:
ca:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A4:51:9E:86:20:CF:5D:D6:55:89:5A:CF:1D:2A:CD:CA:E2:EA:C8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A220C206755711F1A1895EA9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.237.0/24
154.219.64.0-154.219.70.255
154.219.76.0/24
154.219.79.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:4b:63:a3:95:fa:3f:35:9b:41:39:23:16:de:5a:29:4e:f9:
60:df:9e:f1:80:58:41:aa:5b:d8:18:6c:49:a3:ff:0e:fb:cc:
e2:73:17:aa:2c:34:23:6b:48:75:ed:27:54:b8:0a:d1:a6:c9:
fb:4a:50:c0:b3:b7:53:0e:cc:8b:e6:ed:1f:b0:c1:a3:57:14:
72:09:b5:b3:3d:0c:7b:a7:46:6c:3f:de:98:ae:d1:19:d6:13:
ce:41:40:7b:be:01:db:ae:0f:37:26:4b:68:37:14:bb:31:1e:
41:cb:d1:cd:a6:65:d7:dd:5d:3c:fb:3a:e8:a0:55:a4:46:20:
4d:96:5b:71:2f:9d:cc:b5:98:27:03:cd:81:0c:f1:24:8f:69:
52:a0:a6:a6:80:95:e3:02:6e:ce:a6:bf:19:42:9d:d7:ac:99:
e0:9d:5d:b0:83:4e:b8:74:c5:c8:97:f9:52:69:ee:ea:f9:9a:
74:98:8c:e1:74:8a:0a:9b:68:b4:78:bf:e5:69:03:dd:a6:ec:
1d:4e:c9:ae:31:de:d1:d4:35:d3:2f:db:2b:38:e7:1d:f9:29:
4a:8c:7b:a2:21:28:d3:3e:15:de:91:04:ad:88:c6:d4:60:97:
80:5d:bc:c0:6e:9c:c2:f1:1c:4b:ae:6b:7c:bb:7e:a5:30:97:
6e:2d:ae:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 01:42:02 2026 by rpki-client