Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7A6FDEE6A4911F1B30A99B5CE1D38B0.roa
File: A7A6FDEE6A4911F1B30A99B5CE1D38B0.roa (raw, json)
Hash identifier: 9wnLtiAPwERJAxvxyNLrxT8yEp/NVX18COFq+4zgg/8=
Subject key identifier: B9:43:DB:EC:FB:E3:74:DE:09:AC:04:62:D6:6F:EB:8A:12:22:DB:C7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D3C4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7A6FDEE6A4911F1B30A99B5CE1D38B0.roa
Signing time: Wed 17 Jun 2026 12:40:01 +0000
ROA not before: Wed 17 Jun 2026 12:39:56 +0000
ROA not after: Fri 24 Jul 2026 12:39:56 +0000
asID: 400619
IP address blocks: 154.89.144.0/20 maxlen: 24
154.89.160.0/19 maxlen: 24
154.89.192.0/20 maxlen: 24
154.95.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119748 (0x1d3c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 17 12:39:56 2026 GMT
Not After : Jul 24 12:39:56 2026 GMT
Subject: CN=6a3295a0-ddcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e6:13:de:27:9e:98:db:4b:cd:93:69:d5:3d:
12:23:4d:a2:4c:bc:58:53:f4:9f:f3:37:ec:ce:6f:
15:29:06:8b:5a:a7:17:ea:b6:7e:b7:2d:26:36:01:
c4:8f:46:8f:26:66:f8:e7:71:fc:3e:d2:87:4b:01:
d1:4e:3a:9d:52:27:e3:07:79:82:6b:a4:6b:4a:d9:
dd:bf:a2:0c:b1:51:30:c2:fc:d1:21:4b:8a:52:be:
78:bf:6f:10:d5:bc:b5:c5:2a:67:a7:ac:49:65:27:
58:ea:9e:76:e9:0b:8f:69:1d:02:2e:c9:ae:d7:f8:
89:1f:f6:6b:12:ff:ca:aa:0a:e9:3f:cb:22:9c:59:
4a:3c:0f:af:5a:8f:eb:a6:a6:30:92:ca:8a:2c:ba:
d7:27:54:a5:68:57:52:5f:6f:eb:4c:3b:d5:19:0e:
9b:e1:24:a7:80:da:c0:9b:ce:46:eb:9d:50:d9:e3:
8e:7e:45:0f:02:69:2f:b6:9d:7a:a7:14:a8:f1:64:
20:58:23:8b:64:01:94:85:14:fa:fa:6b:f6:a3:d4:
97:20:b9:8a:17:47:71:4e:ba:f8:73:85:e4:e0:f7:
9f:74:45:e1:d2:45:3f:d7:9c:81:d9:a7:2c:55:06:
b2:ed:a7:fa:4a:61:19:87:72:ea:13:a5:c5:bc:1a:
30:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:43:DB:EC:FB:E3:74:DE:09:AC:04:62:D6:6F:EB:8A:12:22:DB:C7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A7A6FDEE6A4911F1B30A99B5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.144.0-154.89.207.255
154.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
d8:02:10:b3:72:3d:33:c4:32:3c:5e:87:1b:a0:ae:ad:92:80:
a0:4e:0a:6b:8c:db:aa:11:e3:09:b7:bf:1c:2c:34:8c:f3:47:
8b:17:48:71:45:f9:90:5a:69:51:a3:c8:39:5d:7c:c4:b5:0f:
6e:28:04:80:8e:94:8a:9e:3e:4a:eb:9d:e8:b7:ed:7e:97:0f:
d2:de:36:b1:c4:f8:8e:e6:74:0f:91:cb:1d:e9:eb:fd:ed:37:
64:cd:33:40:7b:89:25:82:8e:c5:7c:c9:bc:35:64:0e:26:ee:
ba:e5:1f:27:bc:c9:18:f3:fc:e1:26:da:90:c9:16:33:fa:49:
98:e8:6b:70:aa:f9:51:a1:c3:13:87:13:3f:5b:a1:11:bf:7b:
60:00:a3:b9:f7:70:a6:e4:d3:cd:a4:ba:14:3f:19:64:60:9f:
fc:6c:72:a6:99:0a:d7:de:df:e6:83:e5:2f:d4:2c:30:a8:bf:
18:77:8d:5d:62:c2:1c:fb:28:1a:ad:cb:18:44:5b:72:28:e0:
04:3f:1b:5f:bf:a6:e6:46:31:62:12:0b:87:3d:66:a0:37:ab:
9c:91:bd:e5:30:c5:f3:ae:78:4d:c8:c2:8d:ff:f8:1e:5b:fe:
d4:a0:ee:e8:0d:35:71:4b:4e:e5:61:d4:a6:b3:84:23:65:96:
06:9c:b7:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:51:55 2026 by rpki-client