Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1D43AF6554411F18D7638DFCE1D38B0.roa
File: D1D43AF6554411F18D7638DFCE1D38B0.roa (raw, json)
Hash identifier: oIF/zGdGIcNBl7Tyc7h1w/6Bilj+8jJ6SRhB3nMS9Jw=
Subject key identifier: 47:E5:BD:D3:20:FD:41:D4:79:A7:EC:A3:95:6E:80:7B:0C:41:B0:CE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CDAF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1D43AF6554411F18D7638DFCE1D38B0.roa
Signing time: Thu 21 May 2026 18:42:29 +0000
ROA not before: Thu 21 May 2026 18:42:25 +0000
ROA not after: Fri 26 Jun 2026 18:42:25 +0000
asID: 63139
IP address blocks: 154.81.1.0/24 maxlen: 24
154.94.64.0/24 maxlen: 24
154.94.65.0/24 maxlen: 24
154.94.66.0/23 maxlen: 24
154.94.79.0/24 maxlen: 24
154.94.80.0/24 maxlen: 24
154.94.81.0/24 maxlen: 24
154.94.83.0/24 maxlen: 24
154.94.84.0/24 maxlen: 24
154.94.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118191 (0x1cdaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 21 18:42:25 2026 GMT
Not After : Jun 26 18:42:25 2026 GMT
Subject: CN=6a0f5215-f285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e0:07:56:34:ff:07:bf:a0:09:f2:e9:c3:71:
ca:df:b0:80:89:e1:ca:83:cd:7d:ae:b2:de:db:ce:
d7:4a:03:cd:c6:28:44:6e:82:65:d3:99:c3:3b:ec:
19:d9:42:cb:bb:ab:86:b5:15:0e:d5:f7:dd:ea:00:
9f:50:a8:73:74:4f:d3:6e:f0:11:f9:32:99:53:07:
3f:f9:26:3e:97:e4:65:bc:41:72:dd:40:ed:64:dc:
e2:3a:3b:c8:b4:07:21:46:1b:26:d6:61:3e:f3:72:
98:a2:1b:df:e5:25:61:f8:f2:ab:62:8e:1b:e4:85:
22:57:7d:11:60:d5:c4:c6:25:82:a5:64:7c:5f:65:
1e:a1:f8:9f:8a:51:37:10:e7:43:4b:5b:75:f5:c3:
1c:b5:8c:7d:20:15:75:48:49:7e:ba:81:7a:b1:33:
0d:79:84:66:83:fc:66:e0:c9:d2:2e:53:64:2e:5c:
1a:6b:be:a4:50:b4:54:48:aa:f3:88:a3:3c:b9:1e:
c2:88:88:a5:7b:89:21:7d:8b:3f:9f:cd:5c:95:d0:
bb:c0:aa:ef:1a:20:2d:63:0d:9d:86:08:99:c1:a9:
6e:8a:f8:6a:52:9a:b2:22:06:f0:62:af:df:b0:cb:
c3:30:e5:44:87:7e:12:ac:a2:a1:12:6a:5d:4a:2e:
26:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E5:BD:D3:20:FD:41:D4:79:A7:EC:A3:95:6E:80:7B:0C:41:B0:CE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1D43AF6554411F18D7638DFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.1.0/24
154.94.64.0/22
154.94.79.0-154.94.81.255
154.94.83.0-154.94.85.255
Signature Algorithm: sha256WithRSAEncryption
45:64:27:68:3c:78:26:74:8b:b2:a9:83:4d:ef:10:31:a0:52:
7d:55:31:8e:23:25:7f:90:a5:b6:4d:a2:5d:54:a3:71:f1:e6:
08:97:15:b7:db:84:83:36:70:9c:56:d1:12:0b:31:39:27:6c:
3b:e6:16:5f:0e:51:18:ab:25:4a:32:59:8a:31:ed:6a:e5:ec:
ed:17:53:21:07:e1:02:08:10:d5:15:48:c2:85:41:e2:33:88:
68:12:2a:fa:57:60:4c:04:0d:07:2f:da:12:cc:7c:e8:bb:71:
75:50:c0:0d:4f:2f:a4:e4:cd:2f:f7:50:c8:97:12:54:27:75:
2d:ab:5c:e3:78:aa:8c:69:e5:18:8d:a4:e9:3e:82:8f:c8:0a:
7d:28:75:d3:f4:79:d9:f6:48:31:e4:24:63:8c:39:a3:4e:c7:
33:a4:f6:13:e4:5a:ee:c1:69:4d:1b:e5:fc:e0:eb:a1:a1:df:
92:96:af:15:83:35:c8:2b:91:01:21:f9:10:b2:6f:c1:c7:c5:
92:9b:35:a6:f9:8a:38:56:a5:6f:a5:04:48:75:30:bc:44:4d:
18:6c:33:92:9a:3b:e0:0c:43:b2:97:b6:9c:8d:31:10:57:fa:
42:c0:91:ff:e2:0f:a2:96:b5:f1:68:4f:f9:9a:05:df:1b:29:
6f:06:da:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:28:26 2026 by rpki-client