Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9C6767E551D11F1820F81F7CE1D38B0.roa
File: D9C6767E551D11F1820F81F7CE1D38B0.roa (raw, json)
Hash identifier: D5ddI0L2thH5cTPmlscUYwkd4BkOI9Ubo+6P7nnmV9w=
Subject key identifier: B9:67:39:F1:FC:DF:64:83:0B:8D:33:CB:47:52:EC:43:FC:5D:E7:BB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CD7B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9C6767E551D11F1820F81F7CE1D38B0.roa
Signing time: Thu 21 May 2026 14:03:32 +0000
ROA not before: Thu 21 May 2026 14:03:27 +0000
ROA not after: Fri 26 Jun 2026 14:03:27 +0000
asID: 138915
IP address blocks: 154.93.73.0/24 maxlen: 24
154.93.103.0/24 maxlen: 24
154.93.106.0/24 maxlen: 24
154.93.107.0/24 maxlen: 24
154.93.108.0/24 maxlen: 24
154.93.109.0/24 maxlen: 24
154.93.110.0/24 maxlen: 24
154.93.111.0/24 maxlen: 24
154.93.112.0/23 maxlen: 24
154.93.112.0/24 maxlen: 24
154.93.113.0/24 maxlen: 24
154.93.114.0/24 maxlen: 24
154.93.115.0/24 maxlen: 24
154.93.116.0/22 maxlen: 24
154.93.120.0/24 maxlen: 24
154.93.121.0/24 maxlen: 24
154.93.122.0/24 maxlen: 24
154.93.124.0/23 maxlen: 24
154.94.66.0/23 maxlen: 24
154.94.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 06 Jun 2026 06:56:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118139 (0x1cd7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 21 14:03:27 2026 GMT
Not After : Jun 26 14:03:27 2026 GMT
Subject: CN=6a0f10b4-7017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:18:fb:b5:49:12:b2:ee:9a:cc:df:cc:17:bb:
6f:4b:7c:a1:42:b9:45:70:8a:1c:ab:75:81:66:38:
15:43:ec:25:41:b2:82:47:06:d8:23:44:11:29:12:
d4:a6:82:13:61:d3:81:67:03:5e:56:f8:53:2f:13:
c5:3b:af:96:15:c8:a0:64:e9:03:8c:cf:7d:b4:44:
4e:42:dd:fd:16:87:8b:aa:cd:6d:05:c3:c7:4b:75:
8e:ff:17:d1:fd:a1:34:44:28:6c:c0:91:5c:dc:58:
f9:83:5a:40:c7:72:7a:c7:d1:77:95:78:26:66:eb:
ab:06:91:aa:e9:8f:67:6c:16:42:e7:a9:0d:06:2a:
be:ca:e9:f1:cb:b3:7d:6d:00:d8:d3:fc:b5:6a:3d:
e9:82:f4:04:04:8c:ea:8d:4f:df:60:50:4a:bd:bb:
87:b5:05:11:53:f7:94:b6:b3:cf:5d:a9:46:61:89:
ff:e9:97:7d:ea:57:91:1d:18:95:28:1b:f0:c0:16:
c8:d9:38:66:5f:30:9b:1c:4f:41:a5:cd:e5:f4:b5:
8e:1f:28:5d:1f:69:cd:a0:ab:bc:33:d0:44:11:50:
5c:5e:4a:dd:15:d6:fb:99:f1:b3:68:b2:ac:d4:b1:
cd:92:c2:a3:83:ca:b8:61:d9:3c:d4:ff:59:7e:1a:
5c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:67:39:F1:FC:DF:64:83:0B:8D:33:CB:47:52:EC:43:FC:5D:E7:BB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D9C6767E551D11F1820F81F7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.73.0/24
154.93.103.0/24
154.93.106.0-154.93.122.255
154.93.124.0/23
154.94.66.0/23
154.94.125.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:f9:a7:13:34:05:20:08:c6:cd:f2:da:b0:bb:4b:26:d1:9f:
7d:e6:f6:e7:df:d7:54:3a:28:9f:f2:05:f8:d2:af:58:cb:d0:
0d:76:67:5d:f1:74:5c:d8:40:ad:02:97:65:7c:54:e2:7e:95:
af:7e:ee:fb:75:e7:09:c5:26:08:ea:74:1d:9a:3b:79:b7:e1:
8c:f6:8b:7e:33:23:d7:9e:8f:41:9d:f4:20:15:4c:0e:92:3c:
85:2e:62:33:71:67:2b:16:3d:6f:a0:8b:62:19:3c:3f:f3:94:
c1:52:a5:a2:f0:cc:9a:cc:78:b1:dd:c5:8e:61:8e:ad:86:29:
61:37:47:a4:23:19:f2:70:53:d0:33:bf:31:e8:27:87:1b:08:
4e:9d:36:17:62:aa:60:0c:32:81:5b:f1:4b:07:14:94:73:76:
47:78:45:01:9d:e6:0d:64:e2:f6:e2:e6:21:d7:a2:c8:79:cf:
7f:1a:25:03:25:b2:b0:54:d9:d2:f0:2e:5c:72:f0:a5:1d:c4:
66:5d:a4:c4:ea:88:b6:8c:6e:69:e5:75:ef:7a:f6:7b:c2:b1:
28:8b:15:12:f4:de:50:3e:cd:8d:f0:7a:db:fc:26:40:52:77:
ab:29:45:c6:8a:b0:35:1f:7c:d7:c1:54:62:8f:90:47:f4:6f:
24:fd:97:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 11:12:41 2026 by rpki-client