Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4E5D636955C11F180FCA204CF1D38B0.roa
File: B4E5D636955C11F180FCA204CF1D38B0.roa (raw, json)
Hash identifier: z1MkkQNQ2A/znKDRjw6EwFPqtfNgeQazYug3pBZvTec=
Subject key identifier: 67:23:3A:EF:A4:1D:74:35:A2:E9:01:49:79:73:04:32:FD:F9:EA:88
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DE19
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4E5D636955C11F180FCA204CF1D38B0.roa
Signing time: Tue 11 Aug 2026 08:14:43 +0000
ROA not before: Tue 11 Aug 2026 08:14:39 +0000
ROA not after: Thu 20 Aug 2026 08:14:39 +0000
asID: 54801
IP address blocks: 154.204.0.0/24 maxlen: 24
154.208.12.0/22 maxlen: 24
154.208.16.0/20 maxlen: 24
154.212.128.0/24 maxlen: 24
154.215.0.0/24 maxlen: 24
154.218.0.0/24 maxlen: 24
154.221.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 17 Aug 2026 00:08:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122393 (0x1de19)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 11 08:14:39 2026 GMT
Not After : Aug 20 08:14:39 2026 GMT
Subject: CN=6a7ad9f3-f20b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d0:5d:1e:ac:af:d9:65:69:c9:50:68:ce:1e:
3c:e8:2c:8a:0f:21:13:93:1c:f5:0c:5e:89:8e:be:
d8:31:c3:e9:31:0e:ff:d7:32:03:01:0a:a5:81:56:
e9:71:bc:51:73:04:15:d3:c0:6b:e8:6e:ab:c0:b9:
6e:de:a1:5c:3d:26:03:43:b8:f6:1f:a9:47:71:f8:
6d:d3:12:1e:0a:77:ab:1f:71:10:12:59:25:a8:06:
35:fb:46:c4:17:d2:18:62:7c:fc:e6:16:b5:be:dd:
6e:c9:7f:bb:d0:5f:1f:99:63:1e:4c:b7:84:5c:01:
ed:d7:29:5e:5a:7b:88:70:84:42:e0:09:f4:cd:68:
19:c4:94:fe:56:3e:dc:68:0a:90:7f:ec:7b:2f:e0:
f1:ed:df:71:21:e5:51:1e:49:fa:56:18:18:a3:87:
35:87:75:85:ed:2e:ef:32:31:a8:75:76:ff:df:b4:
2a:3f:3b:41:6f:c6:d9:5a:ab:5a:24:df:c5:ca:e9:
c8:a6:ba:be:53:f6:1a:88:af:6f:e5:68:77:da:c5:
5e:b6:e8:d1:fa:9f:7d:8f:45:a6:db:57:4b:9c:0e:
37:84:eb:65:80:9e:8a:4a:cd:2e:20:80:df:a3:63:
68:4b:16:7c:da:44:31:e7:f7:a5:47:ea:59:69:f4:
21:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:23:3A:EF:A4:1D:74:35:A2:E9:01:49:79:73:04:32:FD:F9:EA:88
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B4E5D636955C11F180FCA204CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.0.0/24
154.208.12.0-154.208.31.255
154.212.128.0/24
154.215.0.0/24
154.218.0.0/24
154.221.0.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:00:e2:8b:e1:6a:36:b3:ed:36:05:b6:3a:86:f1:be:0d:fb:
b8:14:4f:ca:3d:ec:4e:44:8a:16:6a:0c:c5:f5:9d:79:b1:29:
5d:a3:36:79:a7:49:02:37:49:2a:3b:a1:0e:bc:20:3e:96:04:
c6:b3:2b:49:57:e5:b5:70:d9:12:6f:87:c4:88:fb:ff:fb:90:
5a:7a:74:dc:57:48:22:c5:79:29:63:58:5a:81:71:ba:cb:8f:
cb:22:e9:77:85:a0:1f:a1:b7:19:27:4f:65:2d:9d:b4:8a:aa:
ce:dd:51:16:b9:ad:b2:ef:b4:df:e9:19:01:15:32:c5:a7:ad:
58:32:62:20:c3:54:ab:b5:59:ba:be:8c:68:08:d9:75:f2:ad:
ec:ae:23:7a:1c:2a:c2:64:6c:b2:ee:92:45:44:51:3e:9f:c0:
f6:94:69:1a:27:21:ce:a8:32:ee:59:4f:cb:3b:60:21:95:40:
e0:9e:c0:24:81:1a:8e:8d:6b:6e:0f:ae:35:95:f2:50:cc:44:
68:8f:a2:7f:64:09:44:d4:29:ff:c7:5e:a2:7a:7a:51:dc:d6:
e7:f6:40:d8:b6:ce:e1:69:39:82:f5:fd:c3:47:fc:fc:1f:40:
77:be:2b:91:67:9c:5a:14:ae:47:1a:cf:88:36:e7:fd:69:b8:
c4:b2:b8:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:42:30 2026 by rpki-client