Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A70D2E7C8C6211F1ACA98BFDCE1D38B0.roa
File: A70D2E7C8C6211F1ACA98BFDCE1D38B0.roa (raw, json)
Hash identifier: VWB5wqVO9JE6RxMyWDkTOP3Kpipu7N1W57rb/JWv34U=
Subject key identifier: 53:AE:A1:BF:20:71:DA:9F:05:49:1A:1D:9C:DF:B6:6D:1B:20:31:61
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DBF4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A70D2E7C8C6211F1ACA98BFDCE1D38B0.roa
Signing time: Thu 30 Jul 2026 22:04:36 +0000
ROA not before: Thu 30 Jul 2026 22:04:33 +0000
ROA not after: Sun 09 Aug 2026 22:04:33 +0000
asID: 44559
IP address blocks: 154.209.140.0/24 maxlen: 24
154.209.141.0/24 maxlen: 24
154.209.142.0/24 maxlen: 24
154.209.143.0/24 maxlen: 24
154.209.147.0/24 maxlen: 24
154.209.149.0/24 maxlen: 24
154.209.150.0/24 maxlen: 24
154.209.151.0/24 maxlen: 24
154.209.156.0/24 maxlen: 24
154.209.159.0/24 maxlen: 24
154.209.192.0/24 maxlen: 24
154.209.193.0/24 maxlen: 24
154.209.194.0/24 maxlen: 24
154.209.197.0/24 maxlen: 24
154.209.198.0/24 maxlen: 24
154.209.199.0/24 maxlen: 24
154.209.200.0/24 maxlen: 24
154.209.201.0/24 maxlen: 24
154.209.202.0/24 maxlen: 24
154.209.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 09 Aug 2026 22:04:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121844 (0x1dbf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 30 22:04:33 2026 GMT
Not After : Aug 9 22:04:33 2026 GMT
Subject: CN=6a6bca74-1467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f8:c0:63:1e:2a:1e:b4:ae:b9:f0:c4:8a:b2:
10:88:dd:ca:0a:73:c5:71:4f:b5:d7:76:60:3b:d1:
1e:b0:86:90:7b:84:50:c8:51:0d:28:c0:a7:03:d3:
3a:09:aa:4e:1f:ef:67:30:7e:e7:47:6d:4e:9a:26:
53:09:e9:b8:72:28:a6:9d:6c:45:01:1f:8d:97:42:
5f:ba:7f:fd:ea:00:67:29:59:ea:e4:c9:20:88:e0:
92:fb:51:44:e7:5f:55:b2:a5:f4:58:89:a8:b9:2c:
ca:56:67:f1:9e:dc:90:1d:55:02:8e:00:89:a9:47:
4d:fd:34:4d:26:7f:a7:8f:7a:16:e0:2b:0a:15:e1:
ed:4d:e9:b9:c7:05:52:fb:1a:72:11:04:28:b9:6c:
77:7a:56:2a:ac:e1:64:7f:da:72:bc:d7:3f:a8:df:
7b:dd:5d:80:4c:7b:bb:cc:7c:e1:87:e1:57:ad:fb:
02:54:ba:e1:23:53:ef:6f:7e:66:7e:a1:45:1a:3c:
dc:c0:ae:55:eb:a5:a2:35:3a:4b:9e:df:6e:07:9f:
e8:55:5d:49:6e:a3:7f:12:b0:3f:5d:73:d3:04:12:
e5:32:9f:25:d9:af:35:9a:d6:e1:bf:03:4a:e5:9e:
07:60:5d:32:8b:19:1b:c1:ff:b6:c9:f1:d5:53:34:
0f:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:AE:A1:BF:20:71:DA:9F:05:49:1A:1D:9C:DF:B6:6D:1B:20:31:61
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A70D2E7C8C6211F1ACA98BFDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.140.0/22
154.209.147.0/24
154.209.149.0-154.209.151.255
154.209.156.0/24
154.209.159.0/24
154.209.192.0-154.209.194.255
154.209.197.0-154.209.203.255
Signature Algorithm: sha256WithRSAEncryption
80:de:f0:0f:b5:1c:fb:98:da:bf:f1:f8:fb:93:5b:81:ce:3a:
70:a8:7b:64:7e:7b:84:4a:7d:35:58:e7:19:a6:88:8f:33:d0:
11:8a:a7:c7:fc:3d:cd:4e:f4:d9:8e:aa:7b:ce:10:17:04:4f:
5f:82:01:4f:76:18:2c:ba:64:ca:6b:24:06:ba:22:1e:c6:24:
9e:19:e9:b4:c1:a6:12:7a:81:bf:cf:8f:94:9e:97:e1:d8:21:
53:7a:f8:59:94:a8:82:e4:f8:0d:e7:e7:f8:34:74:e0:11:f4:
0e:5f:b2:f4:48:f0:c5:71:26:ab:58:eb:ef:c9:d0:b4:d6:9a:
c4:79:49:5d:7c:03:af:a1:6d:4e:6a:34:65:52:bd:3c:d3:2d:
47:e7:4f:29:b5:4d:8c:3d:14:87:07:8a:ce:ef:79:b6:93:bf:
99:63:a6:52:dd:76:d0:d3:74:cf:08:93:b7:98:bd:0f:9b:5e:
21:99:a8:68:26:35:91:01:12:ad:b2:df:cd:c6:c4:34:3f:e3:
e2:bf:df:6b:63:5b:e0:45:c7:8a:df:c3:a1:b6:69:f2:be:67:
c1:48:43:79:56:a6:3c:ae:26:b0:89:e2:78:b7:70:5f:c8:72:
cf:b2:16:d5:9f:a1:3f:b0:27:6b:ac:f3:09:76:cd:5e:5b:76:
47:3b:67:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:05:58 2026 by rpki-client