Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBB04FB47C5111F193AFD3D1CE1D38B0.roa
File: CBB04FB47C5111F193AFD3D1CE1D38B0.roa (raw, json)
Hash identifier: u4gmw+FMao0a7c8BLH0kUxN3WNyV7GMoM0pDIlNV5s4=
Subject key identifier: E4:B6:4F:AA:BA:B1:BF:2B:D0:E8:76:39:25:75:93:92:38:9D:FB:B8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D7FF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBB04FB47C5111F193AFD3D1CE1D38B0.roa
Signing time: Fri 10 Jul 2026 11:23:38 +0000
ROA not before: Fri 10 Jul 2026 11:23:33 +0000
ROA not after: Tue 10 Jul 2029 11:23:33 +0000
asID: 17561
IP address blocks: 154.88.4.0/24 maxlen: 24
154.88.5.0/24 maxlen: 24
154.88.6.0/24 maxlen: 24
154.88.7.0/24 maxlen: 24
154.88.12.0/24 maxlen: 24
154.88.13.0/24 maxlen: 24
154.88.14.0/24 maxlen: 24
154.88.15.0/24 maxlen: 24
154.88.16.0/24 maxlen: 24
154.88.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120831 (0x1d7ff)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 10 11:23:33 2026 GMT
Not After : Jul 10 11:23:33 2029 GMT
Subject: CN=6a50d63a-530d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e8:11:6e:b0:1d:9a:be:b3:a0:cf:96:7c:e4:
b8:eb:9a:01:35:5e:e8:d0:e9:5d:a2:a0:00:84:ce:
a2:25:a6:88:14:bd:ca:d6:73:a1:c1:00:88:19:34:
90:98:aa:45:89:7b:9f:15:90:3f:db:2e:fc:6f:ef:
5e:61:91:6a:80:ec:7f:6c:cd:0f:c8:8e:54:04:8a:
d7:8f:46:ff:db:65:ef:5c:f8:b4:43:e0:06:38:8e:
d4:b0:bd:72:3d:23:dd:06:ab:f3:d6:1e:06:aa:35:
7a:a4:ba:74:fd:49:6e:3b:0c:e5:1a:6b:f9:65:cb:
1f:c9:2f:f2:4d:22:3f:99:11:0f:7c:15:52:d0:49:
43:fd:9e:b6:da:f0:b6:b3:bc:4d:e8:5b:ba:21:c9:
6a:86:65:db:2c:26:4c:31:81:d0:b8:b3:ee:1d:64:
45:0a:01:c9:87:7d:64:cb:c9:bc:06:10:f9:bf:40:
ce:0c:7e:61:de:bb:e6:a5:58:e4:3b:5a:9e:d6:fc:
a8:a1:05:a9:b8:58:27:95:f4:15:e9:d5:d3:de:dd:
a1:38:d2:cd:fc:f4:1f:e6:7b:0e:ff:5e:41:03:0f:
e2:e0:30:f1:6a:6c:90:74:ec:60:37:3c:27:6e:71:
36:ec:99:69:e4:48:94:49:66:84:32:af:56:0b:d2:
79:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:B6:4F:AA:BA:B1:BF:2B:D0:E8:76:39:25:75:93:92:38:9D:FB:B8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBB04FB47C5111F193AFD3D1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.4.0/22
154.88.12.0-154.88.17.255
Signature Algorithm: sha256WithRSAEncryption
09:07:65:94:a1:1d:7e:ce:03:a2:71:74:9a:9c:bd:33:63:a8:
49:c9:fc:37:ae:47:af:c4:4c:fb:76:79:32:d8:fb:b0:01:38:
26:b4:e9:57:68:7b:e1:9c:a3:de:99:9e:2e:37:16:33:42:47:
33:2e:d7:67:41:b9:34:f9:58:b7:39:42:03:11:07:9f:ce:6c:
19:99:36:1e:1b:5d:ad:8e:11:44:00:50:01:6b:17:6e:8f:ed:
39:24:8f:2c:a4:bb:68:58:b9:d2:b8:b3:bc:a1:42:b0:d7:da:
14:09:8c:58:65:3d:26:fe:cf:9d:b9:91:ad:ca:af:38:d7:b9:
4f:79:a5:74:44:da:8d:28:e5:ce:de:67:02:77:37:32:28:a9:
62:a3:79:0f:a7:11:0b:c2:74:dd:80:81:f5:e8:e7:90:d9:02:
61:4d:cd:d1:41:a4:7e:d1:0b:ae:21:cb:30:c5:f9:32:a4:49:
56:4b:df:3a:f2:a7:89:94:b5:1a:3c:a2:53:29:96:16:61:26:
b7:e4:20:c5:e7:a8:69:a6:64:08:75:68:04:8d:f7:0b:8d:09:
7e:c6:bc:c2:fc:48:2a:f0:7c:89:fa:0f:2a:66:72:7c:b5:f1:
7a:5c:85:8d:ce:79:4e:d9:d2:88:72:6f:f4:10:11:06:85:37:
1d:73:a5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:28 2026 by rpki-client