Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C17A035A700311F1B9F005BCCE1D38B0.roa
File: C17A035A700311F1B9F005BCCE1D38B0.roa (raw, json)
Hash identifier: pDeFMUqDfMmnF/X/0TKJXOeLdQHl8FQlmeltXkV6m3A=
Subject key identifier: 22:EB:38:0B:B7:6B:8E:09:A6:89:91:CD:44:C0:D9:58:98:60:9A:47
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D4F9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C17A035A700311F1B9F005BCCE1D38B0.roa
Signing time: Wed 24 Jun 2026 19:34:46 +0000
ROA not before: Wed 24 Jun 2026 19:34:40 +0000
ROA not after: Fri 31 Jul 2026 19:34:40 +0000
asID: 62240
IP address blocks: 154.195.96.0/24 maxlen: 24
154.195.152.0/24 maxlen: 24
154.195.153.0/24 maxlen: 24
154.195.154.0/24 maxlen: 24
154.195.155.0/24 maxlen: 24
154.195.156.0/24 maxlen: 24
154.195.157.0/24 maxlen: 24
154.195.188.0/24 maxlen: 24
154.195.189.0/24 maxlen: 24
154.195.190.0/24 maxlen: 24
154.195.191.0/24 maxlen: 24
154.196.33.0/24 maxlen: 24
154.196.90.0/24 maxlen: 24
154.196.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 29 Jun 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120057 (0x1d4f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 19:34:40 2026 GMT
Not After : Jul 31 19:34:40 2026 GMT
Subject: CN=6a3c3156-4116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:33:a9:76:44:b4:bd:eb:0f:a1:39:46:00:c1:
83:ef:a6:ea:0c:3a:09:3f:1e:db:9b:8f:2f:09:28:
13:92:a5:40:12:29:d1:b1:32:48:dd:02:a2:8c:9f:
1a:bb:bc:52:95:7e:ea:f3:78:66:ca:21:65:09:2c:
2f:7e:1b:a0:18:93:db:52:16:38:71:28:44:7b:61:
18:e0:ab:53:c4:1e:5c:02:06:53:a0:a4:0b:04:75:
63:5c:68:74:69:d1:95:1f:fa:3f:0c:ca:d2:e0:99:
67:ce:9f:c1:ba:31:a9:12:2e:3b:0d:ae:d3:23:da:
21:1a:2e:4a:17:a0:08:b7:a1:ee:4c:ae:6e:dd:d7:
83:88:57:af:80:2a:ef:ad:84:95:3b:b1:61:7e:f4:
82:33:3a:2b:d2:89:8b:07:30:c1:d7:75:3a:23:ab:
fa:b9:1d:25:96:1d:08:b8:78:aa:a0:bf:15:c1:22:
21:b0:44:2f:82:80:7a:5c:6b:d3:b2:6e:a5:2c:97:
ab:42:87:96:05:bf:74:62:a3:9b:94:f6:9a:9d:41:
4d:5b:ad:48:ae:ab:8b:95:2d:e4:3b:95:56:49:f8:
29:89:da:48:f6:f1:b2:bb:78:50:38:6e:6f:1b:37:
c7:3c:31:93:11:10:07:3c:fc:7c:aa:33:48:e6:06:
e8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:EB:38:0B:B7:6B:8E:09:A6:89:91:CD:44:C0:D9:58:98:60:9A:47
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C17A035A700311F1B9F005BCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.96.0/24
154.195.152.0-154.195.157.255
154.195.188.0/22
154.196.33.0/24
154.196.90.0/23
Signature Algorithm: sha256WithRSAEncryption
77:bb:60:7a:19:aa:c9:14:f6:ed:4e:38:a7:26:6e:77:1a:58:
18:f1:05:b5:14:8a:5b:49:97:89:89:a9:4c:75:1f:a4:27:de:
be:02:bd:56:d2:ba:a9:11:74:4c:88:bd:f4:7f:6b:8b:fa:8b:
b5:95:58:05:17:26:b1:0b:86:af:16:3d:75:ee:4d:23:fe:02:
b7:34:9e:f9:57:0d:e8:ab:7d:19:d6:e6:7c:2f:e2:ef:03:24:
e5:48:86:e9:ca:99:23:9f:8d:98:4b:6c:50:99:3d:06:83:55:
95:75:4d:e6:e1:b9:f1:d4:95:b5:74:70:d0:0a:6a:33:28:c2:
0d:3b:c2:d5:5f:01:b6:3c:12:01:42:85:9d:92:38:67:2b:b5:
dc:93:95:71:96:09:9c:57:fa:40:38:db:f5:ef:85:f5:bc:06:
11:0a:f9:6f:f6:b6:93:a8:f9:89:ac:9d:55:ec:e4:06:17:80:
59:f9:43:63:c9:af:91:d3:05:53:23:cc:87:a7:de:73:74:eb:
11:ef:90:dd:ab:42:dd:9d:39:88:6c:02:f9:73:83:89:f0:1d:
3e:0e:2e:98:ea:0f:c7:99:ca:3e:f7:37:9a:dc:8e:45:4c:de:
98:51:7c:c1:0f:e0:be:79:40:cc:f8:69:2c:16:c7:aa:d9:1e:
35:28:02:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 17:40:53 2026 by rpki-client