Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF65957E6C8E11F1A64C7BF8CE1D38B0.roa
File: CF65957E6C8E11F1A64C7BF8CE1D38B0.roa (raw, json)
Hash identifier: 7M3YWIrEob86txjufCt9lok7LxOXpYTe9VMpxQSGiT8=
Subject key identifier: A1:38:25:05:04:BF:90:3F:33:88:3D:E5:6C:61:C9:FD:F4:85:E9:E9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D42B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF65957E6C8E11F1A64C7BF8CE1D38B0.roa
Signing time: Sat 20 Jun 2026 10:00:05 +0000
ROA not before: Sat 20 Jun 2026 10:00:00 +0000
ROA not after: Mon 27 Jul 2026 10:00:00 +0000
asID: 63139
IP address blocks: 154.203.172.0/24 maxlen: 24
154.203.173.0/24 maxlen: 24
154.203.174.0/24 maxlen: 24
154.203.175.0/24 maxlen: 24
154.203.176.0/24 maxlen: 24
154.203.177.0/24 maxlen: 24
154.203.178.0/24 maxlen: 24
154.203.179.0/24 maxlen: 24
154.203.180.0/24 maxlen: 24
154.203.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119851 (0x1d42b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 20 10:00:00 2026 GMT
Not After : Jul 27 10:00:00 2026 GMT
Subject: CN=6a3664a5-9673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:48:38:fd:16:09:01:08:81:2c:7c:3e:cc:d4:
6b:60:16:a6:32:fd:47:a8:1b:64:bb:6a:7a:4a:da:
2c:42:a0:89:01:63:92:cf:8d:78:c6:b7:0c:46:06:
1d:34:a3:ff:1c:ea:42:45:89:05:3a:23:fb:a4:95:
c0:4c:31:7a:09:22:2f:ba:4f:a3:85:b5:6f:c7:e9:
93:fe:4f:ec:e1:9e:bf:29:1a:d2:ff:56:8b:33:6f:
ff:af:76:38:72:25:69:ac:df:2e:47:92:ad:de:86:
0f:6f:40:2e:a7:ab:ac:7e:03:f5:1e:b8:c3:f2:02:
fe:c1:1f:7d:b0:5b:43:e2:92:8f:95:97:d1:b6:97:
20:ec:f9:e2:20:0b:c4:4e:dd:d2:39:8f:89:ed:59:
6e:26:09:3e:0a:ac:89:4a:a4:01:ad:b7:f7:59:7e:
3e:55:05:ec:97:7d:f4:3d:08:fa:ea:cd:5e:e3:65:
34:70:fe:59:f6:a8:06:09:9d:e9:ca:73:bb:8e:45:
3f:2f:37:01:06:98:f6:a7:ea:1d:b9:fb:2c:f2:32:
eb:0c:6f:7d:51:7e:d6:d6:24:e4:82:04:66:f9:90:
92:f7:6a:b1:69:6e:ea:72:76:b2:f6:1e:8c:5a:fa:
8c:bb:5c:f0:c8:3f:63:c0:a4:3f:7a:c1:10:4b:2a:
b9:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:38:25:05:04:BF:90:3F:33:88:3D:E5:6C:61:C9:FD:F4:85:E9:E9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF65957E6C8E11F1A64C7BF8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.172.0-154.203.181.255
Signature Algorithm: sha256WithRSAEncryption
86:e2:4f:4a:d7:38:2d:64:f7:03:9c:79:67:2f:f3:83:9e:9d:
6f:bd:2e:c5:fa:5e:27:d9:7d:c7:43:4c:88:9e:95:4a:ab:93:
98:5b:fe:ec:d4:15:68:3d:aa:8e:09:00:79:2f:3d:58:82:56:
b3:e1:62:dd:b3:3a:b3:b8:b7:2f:73:a2:9d:2d:1d:46:22:47:
0b:2b:22:d7:2b:38:63:7b:e5:1e:dd:08:02:e4:bf:9e:25:2f:
6a:5a:86:60:c4:1f:37:53:41:0f:ad:7e:04:65:04:28:45:85:
4a:b8:44:ed:83:59:50:b1:33:49:92:89:2b:3a:45:c6:16:bd:
e5:82:09:bb:ec:88:64:8f:79:de:17:6b:d4:11:67:d9:85:bc:
3e:c2:6d:d4:d8:14:e7:90:98:79:db:99:1f:6d:81:8f:9f:13:
a0:9b:b5:b5:8e:c8:84:11:6a:b3:61:cd:3c:3b:c4:74:1d:93:
68:30:4d:82:2e:4c:d0:2e:c9:d6:f8:d4:b4:25:94:c7:ff:a3:
d1:ee:39:be:b5:83:b6:32:23:d3:42:e1:53:aa:67:13:37:e3:
24:36:3f:71:a4:bb:d4:d9:c3:6f:cb:84:dd:e2:e2:45:b7:36:
aa:63:0b:11:f7:91:48:5e:9d:78:d5:53:8a:89:e3:1c:a4:00:
a8:5e:87:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:53:55 2026 by rpki-client