Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6D679BA7C5211F1A1D601D6CE1D38B0.roa
File: A6D679BA7C5211F1A1D601D6CE1D38B0.roa (raw, json)
Hash identifier: gC0whoUREc6Due187FDu8FeohpL0RAss3/6wyVPryis=
Subject key identifier: 1F:05:1F:93:B9:13:AF:12:2E:32:9F:D7:51:3E:2C:25:6A:5D:4F:C7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D801
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6D679BA7C5211F1A1D601D6CE1D38B0.roa
Signing time: Fri 10 Jul 2026 11:29:46 +0000
ROA not before: Fri 10 Jul 2026 11:29:41 +0000
ROA not after: Tue 10 Jul 2029 11:29:41 +0000
asID: 17561
IP address blocks: 154.88.20.0/24 maxlen: 24
154.88.21.0/24 maxlen: 24
154.88.22.0/24 maxlen: 24
154.88.23.0/24 maxlen: 24
154.88.24.0/24 maxlen: 24
154.88.25.0/24 maxlen: 24
154.88.26.0/24 maxlen: 24
154.88.27.0/24 maxlen: 24
154.88.28.0/24 maxlen: 24
154.88.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120833 (0x1d801)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 10 11:29:41 2026 GMT
Not After : Jul 10 11:29:41 2029 GMT
Subject: CN=6a50d7a9-27b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a0:4c:dc:9c:8b:b8:bc:89:e1:23:b6:5c:13:
84:29:87:db:fd:ea:95:e2:58:19:c0:bb:5c:af:b5:
88:69:92:99:cd:5d:a6:a7:93:bd:2b:b7:e8:59:19:
79:16:99:9b:8c:ae:f9:93:f4:b1:c8:67:85:8a:91:
58:af:6b:ff:77:49:bb:1b:6c:e3:16:c6:4b:16:a5:
9a:21:da:42:60:be:50:a3:77:13:e3:5b:f6:71:cc:
91:83:87:c5:43:35:08:10:3e:66:5a:4f:89:62:01:
e7:72:22:f4:82:4f:b6:41:0a:c0:bd:43:2a:bd:0d:
5e:b7:85:59:d3:ff:28:2b:21:1e:f3:f6:c7:4d:7e:
ab:cc:14:30:ae:1a:24:30:a9:19:32:dc:75:04:0d:
6b:49:6c:17:b7:92:39:83:ad:7c:a7:27:90:cc:d4:
89:06:64:b4:4f:9e:e1:98:e8:23:94:cb:4a:96:c6:
13:ce:cd:8c:4d:89:10:c1:ca:5b:72:72:0e:55:c9:
44:7a:2f:b1:f8:40:d7:3c:19:67:56:60:68:e8:ab:
e2:bc:89:c4:79:82:ea:18:2f:e3:d4:68:e1:94:bb:
e2:af:bb:66:6e:b5:c5:17:ef:e8:46:70:c9:3c:5f:
18:69:e6:0a:ea:40:a4:04:79:ab:1d:69:13:94:10:
7e:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:05:1F:93:B9:13:AF:12:2E:32:9F:D7:51:3E:2C:25:6A:5D:4F:C7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A6D679BA7C5211F1A1D601D6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.20.0-154.88.29.255
Signature Algorithm: sha256WithRSAEncryption
4c:ad:5e:e4:6e:e6:cb:b8:f7:af:22:a4:16:4b:45:c1:63:8b:
28:a6:33:ba:88:08:97:5c:7a:de:7d:5c:2f:91:9d:73:ec:20:
23:40:d2:91:29:6a:e1:38:d3:1e:3e:48:2e:46:86:8c:e8:78:
c2:cb:ee:c1:23:fc:96:cc:45:9a:ec:81:ed:d0:7d:11:ea:d8:
26:64:2e:0f:06:dd:f8:71:71:d7:c6:e9:8d:84:1e:a0:5f:81:
52:e5:fa:2e:08:f7:31:47:f9:56:5f:a8:66:d2:a2:98:b4:3f:
2b:01:ce:b8:a5:17:27:63:b7:e4:e6:63:95:1f:53:08:84:1b:
9a:6c:be:f0:df:75:0a:ab:96:48:69:e7:cd:28:f9:07:52:d5:
45:10:db:4c:d2:0a:96:11:15:e9:de:28:e3:fc:b9:cc:21:de:
f3:3a:a2:36:82:9d:fb:d1:f0:91:8b:05:6f:1c:be:68:db:65:
1b:99:7e:e5:a5:d7:89:59:75:83:e1:41:33:6b:6a:f3:8a:39:
98:77:7e:da:65:46:d4:1e:66:6a:d1:cc:b3:57:27:d1:c9:84:
77:12:e0:74:b1:3f:f4:0a:f6:fc:3e:7f:46:45:53:b9:67:b2:
d4:ae:f6:8c:ef:2e:2f:29:76:12:48:15:07:cd:0d:b1:ca:78:
0a:85:ab:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:21 2026 by rpki-client