Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A829609A599611F1812E3BC0CE1D38B0.roa
File: A829609A599611F1812E3BC0CE1D38B0.roa (raw, json)
Hash identifier: EIVxAc7npZfwqe4ccImjo2+fr/43afN3YX038wgfyVg=
Subject key identifier: 88:78:CB:00:E4:5F:3C:BD:A2:FC:DB:AC:1E:CF:2C:B4:ED:99:F0:1E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CFDC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A829609A599611F1812E3BC0CE1D38B0.roa
Signing time: Wed 27 May 2026 06:38:23 +0000
ROA not before: Wed 27 May 2026 06:38:18 +0000
ROA not after: Fri 04 Sep 2026 06:38:18 +0000
asID: 18229
IP address blocks: 154.206.22.0/24 maxlen: 24
154.206.23.0/24 maxlen: 24
154.206.29.0/24 maxlen: 24
154.210.128.0/24 maxlen: 24
154.210.129.0/24 maxlen: 24
154.210.130.0/24 maxlen: 24
154.210.131.0/24 maxlen: 24
154.210.132.0/24 maxlen: 24
154.210.133.0/24 maxlen: 24
154.210.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 14 Jun 2026 00:07:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118748 (0x1cfdc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 27 06:38:18 2026 GMT
Not After : Sep 4 06:38:18 2026 GMT
Subject: CN=6a16915f-c8b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:66:43:db:10:08:6b:35:ff:76:20:43:1b:32:
8d:ac:d5:c7:31:c0:19:46:6b:77:d0:40:64:21:8e:
1e:f9:c2:0f:a7:30:ef:94:e2:9e:8e:c0:2a:9f:73:
06:55:82:ad:2b:06:82:b5:74:60:f8:ce:c9:17:9c:
16:72:6c:ea:eb:0c:9e:ce:19:8b:50:b2:8f:ac:46:
b5:b6:1a:47:84:1e:11:ad:87:4a:a4:c3:83:c1:d4:
8e:b2:bd:70:55:b0:64:dc:56:30:5e:2a:d8:ec:71:
c5:0c:f3:1c:78:08:45:23:50:a6:68:4f:8a:66:cc:
17:cd:2b:fb:67:64:1f:01:b7:1c:ee:5c:bd:46:2e:
46:d9:77:90:f4:49:c0:46:9d:87:ac:2d:de:4d:6c:
a2:e5:b1:6e:0c:cd:9d:10:1a:17:3e:0f:e0:95:88:
61:23:1c:ce:76:fd:a8:4a:4a:13:f9:11:fe:7e:82:
fc:d9:aa:95:2a:bb:df:51:1d:ab:10:d8:2a:9c:56:
88:8f:48:f4:07:69:78:53:ed:01:0a:f6:30:24:eb:
d5:87:b6:4c:35:3e:af:7e:a8:1a:e6:c9:82:24:16:
88:8d:85:61:77:70:54:42:e0:f5:6e:c0:f9:de:4c:
6e:22:fe:46:40:74:0e:61:e6:d5:e3:fd:22:64:13:
86:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:78:CB:00:E4:5F:3C:BD:A2:FC:DB:AC:1E:CF:2C:B4:ED:99:F0:1E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A829609A599611F1812E3BC0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.206.22.0/23
154.206.29.0/24
154.210.128.0-154.210.134.255
Signature Algorithm: sha256WithRSAEncryption
41:40:a9:55:40:ec:21:48:ea:b6:23:d0:62:07:4c:29:80:d8:
21:6e:f1:55:19:64:41:dc:37:21:25:50:f6:bf:5a:f6:01:14:
12:07:97:14:d1:24:44:84:f2:8a:0c:d4:e3:1f:7e:2a:90:7e:
c0:7d:fa:a6:67:c2:fc:82:57:0a:63:60:44:63:79:1d:cf:b3:
9c:fc:c0:51:f3:7f:bc:8f:51:88:f8:f7:79:d5:47:20:1d:f3:
0d:7c:15:48:65:e9:7b:fd:74:2d:37:df:79:c3:9c:e4:43:ed:
79:41:d1:64:47:90:a4:89:64:3d:a2:58:a6:9a:b2:e7:ad:64:
9d:45:e7:85:f6:73:95:ae:4c:b5:67:ce:d6:88:3e:fa:de:99:
8f:84:bb:94:ff:62:bf:b0:9e:da:b7:c3:dc:2f:07:4d:bd:70:
a7:0f:6f:66:b9:3b:b9:69:1f:1d:1a:b8:2f:1f:72:c6:56:00:
29:8e:15:f5:b3:03:b7:7d:e0:98:39:f5:19:b4:0f:e0:eb:8b:
82:aa:8a:e4:bf:fb:5b:c0:98:38:40:11:27:0d:27:57:40:76:
5d:56:6d:3a:e3:7a:40:1b:90:79:ab:11:a2:c6:4d:03:ac:8b:
6f:f0:6c:af:f7:06:a3:31:09:1f:55:07:da:a9:fc:b5:17:51:
be:0b:32:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 01:02:04 2026 by rpki-client