Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCFFC22C6C8011F1826B17A7CE1D38B0.roa
File: CCFFC22C6C8011F1826B17A7CE1D38B0.roa (raw, json)
Hash identifier: phS4WrxgVQz0ikTydkbPwPw1EuP6Sxpmsg64U+BETvE=
Subject key identifier: 0D:42:13:A1:A0:D5:81:EA:F6:B7:08:E1:EA:BC:C9:95:08:7E:3F:AC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D409
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCFFC22C6C8011F1826B17A7CE1D38B0.roa
Signing time: Sat 20 Jun 2026 08:19:48 +0000
ROA not before: Sat 20 Jun 2026 08:19:43 +0000
ROA not after: Mon 27 Jul 2026 08:19:43 +0000
asID: 63139
IP address blocks: 154.93.64.0/24 maxlen: 24
154.93.65.0/24 maxlen: 24
154.93.66.0/24 maxlen: 24
154.94.91.0/24 maxlen: 24
154.94.122.0/24 maxlen: 24
154.94.123.0/24 maxlen: 24
154.94.124.0/24 maxlen: 24
154.94.125.0/24 maxlen: 24
154.94.126.0/24 maxlen: 24
154.94.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119817 (0x1d409)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 20 08:19:43 2026 GMT
Not After : Jul 27 08:19:43 2026 GMT
Subject: CN=6a364d24-42a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:19:db:d3:71:b8:a2:cf:45:f6:ba:67:5a:47:
2b:3e:d9:17:02:9d:48:2f:bc:a3:cc:47:f1:07:32:
27:0c:6b:33:e3:75:0a:1c:93:a3:c1:d4:14:5c:6c:
22:eb:9c:8b:54:21:69:70:1f:92:47:9b:3c:99:aa:
a0:ba:3b:a2:17:3b:de:3c:67:2a:bb:5e:91:fd:71:
61:e9:75:fe:ed:d5:21:33:36:63:6a:0b:28:bd:ea:
87:2a:ca:40:3c:27:8b:33:5a:52:21:6f:4f:0e:a3:
ea:69:04:d2:22:ce:a9:44:7d:8a:d1:94:2c:91:5f:
c1:2e:06:12:e1:a5:eb:5b:ea:1f:cc:49:4e:11:65:
5f:52:2f:e0:49:28:e5:2c:03:82:28:75:3c:49:72:
8d:51:67:a4:66:61:1c:85:08:43:0f:25:81:97:d0:
ae:ff:c9:ed:9d:e6:bb:0f:27:c4:10:e4:a5:48:35:
b1:4d:4d:75:2d:15:a7:f1:78:7f:96:8c:db:c0:be:
e5:f5:63:5e:b0:dd:75:9b:2a:00:22:24:08:02:d7:
96:1b:35:05:c4:7b:79:97:a8:d9:f6:24:e6:11:ae:
41:bd:6f:43:b3:a4:ec:54:43:2a:a6:0d:1d:b9:7f:
b3:5c:a0:00:50:f2:d4:27:bd:bb:9a:f2:ab:6c:9d:
d0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:42:13:A1:A0:D5:81:EA:F6:B7:08:E1:EA:BC:C9:95:08:7E:3F:AC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CCFFC22C6C8011F1826B17A7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.64.0-154.93.66.255
154.94.91.0/24
154.94.122.0-154.94.127.255
Signature Algorithm: sha256WithRSAEncryption
17:d9:ed:23:77:4e:55:16:1c:a2:56:38:8d:c0:d5:45:1d:ca:
a4:71:20:33:bb:28:3d:cc:ba:16:80:f0:a8:36:2c:ad:5d:9d:
aa:9c:34:cc:31:47:fd:c0:69:0e:2a:47:18:2c:73:f7:dd:a7:
28:c6:a7:49:d6:71:c5:df:b7:22:13:76:6a:e2:a7:21:56:a8:
ad:62:db:4c:67:80:f1:ff:88:ec:99:03:76:fa:7a:17:14:00:
71:04:51:64:2c:bc:c7:96:e4:00:10:24:4f:d1:0a:53:01:7d:
74:36:72:f2:08:30:53:f6:84:c5:c7:e1:6b:15:a8:51:2a:28:
6e:96:bd:c6:a7:f4:34:1d:bc:08:3f:d4:2a:94:4d:73:2c:79:
e3:47:2f:77:85:74:16:90:23:f2:30:c5:d1:a8:6b:8a:df:67:
52:0b:3e:fb:82:a7:5d:ee:8a:42:c2:7a:1e:07:db:79:4b:6d:
35:60:f4:8c:76:23:16:a2:58:13:04:d8:3e:09:18:14:89:9c:
5e:36:ae:2d:a9:6e:ce:38:a2:ea:a5:de:26:3e:2e:57:73:74:
b9:61:43:21:7e:8e:66:bd:ef:97:a3:ae:57:2a:36:46:ab:74:
73:48:7a:00:40:0a:19:58:71:3b:32:21:51:aa:fe:74:41:83:
28:f4:2d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:51:54 2026 by rpki-client