Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA6E98046C8111F1920058ADCE1D38B0.roa
File: AA6E98046C8111F1920058ADCE1D38B0.roa (raw, json)
Hash identifier: hH+kXGSBvEbMpeRzjHvFGkJ2BlVAbckjKht1UUSue28=
Subject key identifier: 73:94:BA:4C:64:10:31:C9:82:8B:2E:43:71:FB:AB:2C:36:AC:75:F1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D40B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA6E98046C8111F1920058ADCE1D38B0.roa
Signing time: Sat 20 Jun 2026 08:25:59 +0000
ROA not before: Sat 20 Jun 2026 08:25:55 +0000
ROA not after: Mon 27 Jul 2026 08:25:55 +0000
asID: 63139
IP address blocks: 154.94.92.0/24 maxlen: 24
154.94.93.0/24 maxlen: 24
154.94.94.0/24 maxlen: 24
154.94.95.0/24 maxlen: 24
154.94.96.0/24 maxlen: 24
154.94.97.0/24 maxlen: 24
154.94.98.0/24 maxlen: 24
154.94.99.0/24 maxlen: 24
154.94.100.0/24 maxlen: 24
154.94.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119819 (0x1d40b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 20 08:25:55 2026 GMT
Not After : Jul 27 08:25:55 2026 GMT
Subject: CN=6a364e97-6693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:0b:ae:89:94:66:d3:eb:71:3e:e8:8a:d1:cd:
53:19:f2:2d:0b:a4:3c:16:22:65:23:bb:b9:8a:00:
35:89:85:6b:6e:96:25:17:7f:51:e2:21:9f:c9:3a:
8d:f3:c3:19:c0:57:c1:f4:43:c2:19:ee:bf:7b:fa:
c6:71:ed:05:01:56:9a:45:45:72:59:fc:43:86:ba:
a3:83:36:d9:a6:9c:10:45:39:6e:f4:c4:bf:ae:d9:
d5:9e:04:46:b0:26:02:32:2b:49:1a:b3:0d:83:ae:
ac:be:25:67:83:1c:26:ac:7d:ff:12:0a:19:30:2c:
db:a6:95:a0:0a:5e:cc:4f:54:ae:61:3f:6c:19:a4:
d6:20:86:99:9b:3d:4e:2b:9f:30:f7:53:b3:11:17:
db:cf:da:f3:f4:88:26:8e:94:d3:ef:b3:d2:3f:53:
00:84:71:57:62:8c:df:5f:93:f5:c8:26:fa:8d:90:
83:c1:c8:c2:43:5d:e0:c0:5a:94:e6:c8:67:df:a8:
7e:fa:a5:0e:a6:7e:fc:0b:b6:51:46:08:39:06:10:
36:f7:ee:3e:49:8d:cf:96:68:13:dc:62:e6:ca:3f:
8f:3b:7f:a5:83:68:3a:84:7e:79:c0:a4:cc:21:1f:
ba:ab:43:0a:32:59:08:5e:f8:c2:78:2f:ab:13:34:
34:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:94:BA:4C:64:10:31:C9:82:8B:2E:43:71:FB:AB:2C:36:AC:75:F1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AA6E98046C8111F1920058ADCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.92.0-154.94.101.255
Signature Algorithm: sha256WithRSAEncryption
1f:e9:d8:f6:ae:25:fb:a1:48:36:43:4f:8c:41:2a:3c:eb:86:
a3:05:61:8e:fd:6c:de:20:27:47:47:b5:ef:2a:aa:c8:47:39:
f4:25:3a:ec:a4:22:22:26:a3:22:16:cd:64:6c:43:e9:d0:5c:
0e:f1:2e:24:86:6d:50:bc:4b:53:f8:fd:37:ac:2b:5e:22:a6:
51:7e:36:90:fe:36:71:f2:5e:b8:e5:6e:94:70:0d:15:1d:d6:
83:a6:28:26:2f:c5:43:3a:0e:47:32:1f:e3:6a:92:93:7e:10:
db:7f:81:f5:6f:68:04:38:66:cb:e3:62:b6:bc:7a:1b:6e:d7:
df:34:dc:d8:e1:63:82:09:4b:f6:0c:ab:33:d0:4b:8a:9c:49:
e7:e7:30:79:70:90:87:31:4d:08:75:d3:db:d5:1c:62:86:d9:
b1:52:3e:c8:59:d7:67:37:49:5d:d1:1c:06:43:1a:79:94:ac:
02:51:4b:e5:da:ee:23:f2:e5:5a:91:8b:02:bb:5c:e7:94:35:
72:16:d4:3e:65:85:01:af:17:57:6b:e5:96:66:7a:31:85:80:
61:ea:0a:b6:ca:48:05:51:cf:14:f1:f3:d2:b3:33:8d:21:f3:
b9:2f:ce:ce:1b:4c:2d:a7:f8:f8:1b:c8:a1:62:5e:bd:5c:fa:
69:fa:a7:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:53:47 2026 by rpki-client