Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE53F4226EEB11F1848331A5CE1D38B0.roa
File: DE53F4226EEB11F1848331A5CE1D38B0.roa (raw, json)
Hash identifier: niM2/vafzUwAheHqBqwn5+XyacrAAgPrw1RhJwfBDs4=
Subject key identifier: 93:09:C0:C1:92:0D:64:BC:65:23:04:04:CB:37:F7:1F:74:73:23:5C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D486
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE53F4226EEB11F1848331A5CE1D38B0.roa
Signing time: Tue 23 Jun 2026 10:11:15 +0000
ROA not before: Tue 23 Jun 2026 10:11:10 +0000
ROA not after: Sun 09 Aug 2026 10:11:10 +0000
asID: 395793
IP address blocks: 154.81.50.0/24 maxlen: 24
154.82.162.0/23 maxlen: 24
154.82.164.0/22 maxlen: 24
154.83.8.0/24 maxlen: 24
154.91.152.0/24 maxlen: 24
154.91.153.0/24 maxlen: 24
154.91.154.0/24 maxlen: 24
154.91.155.0/24 maxlen: 24
154.91.156.0/24 maxlen: 24
154.93.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119942 (0x1d486)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 23 10:11:10 2026 GMT
Not After : Aug 9 10:11:10 2026 GMT
Subject: CN=6a3a5bc3-25a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:5a:49:4d:41:90:45:73:9f:01:71:84:e0:91:
11:54:e4:9f:78:65:e5:88:95:20:0c:55:17:dc:a5:
f6:db:8b:e9:c4:11:34:4e:15:5f:7b:e1:5a:a9:0e:
40:c7:75:93:79:fb:53:78:a9:81:4c:ee:d4:1e:a0:
d0:51:32:8d:71:5f:e3:dc:36:66:cf:5f:77:8e:1b:
6d:b4:ff:9e:5c:50:6c:34:b0:13:13:dc:53:50:32:
01:3a:51:50:f8:a1:08:e0:f1:85:ce:12:8b:2b:c3:
68:9c:da:40:1f:d5:a8:73:e8:e7:79:dc:f5:53:c4:
1b:53:21:91:32:bc:e4:7c:63:d4:4a:da:93:de:5f:
99:64:73:f0:98:72:f3:b8:ce:c7:85:b2:87:80:59:
e2:b2:ae:69:48:5b:93:a8:76:0d:07:d0:84:7b:b0:
ca:18:39:9d:d0:fd:fe:40:7d:29:2b:03:ec:ce:a2:
20:31:8f:db:7c:5e:4b:5a:12:b0:ca:ed:e4:ac:79:
a0:2e:8b:e5:23:20:6c:b6:05:0b:87:2c:45:af:90:
e6:b9:c0:9f:a8:f1:9f:fc:b9:b1:33:1a:a5:22:11:
22:ed:7e:b9:20:2a:63:93:48:6d:84:ca:16:29:f3:
df:5f:e9:c7:d6:cc:af:3a:10:d8:1e:07:9b:82:2b:
1e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:09:C0:C1:92:0D:64:BC:65:23:04:04:CB:37:F7:1F:74:73:23:5C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE53F4226EEB11F1848331A5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.50.0/24
154.82.162.0-154.82.167.255
154.83.8.0/24
154.91.152.0-154.91.156.255
154.93.0.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:7d:1a:75:33:c9:c2:4b:bb:69:9e:63:79:d6:dd:77:81:d6:
58:02:1c:36:3c:55:50:65:1e:26:51:d8:ba:39:fe:26:60:2b:
25:44:ef:0b:40:b3:7c:ea:60:01:1e:91:78:0e:24:0c:41:e2:
a8:03:9b:c6:aa:43:06:d3:5e:5e:14:e6:a2:3e:17:c1:5d:2e:
6a:15:a9:7c:d0:54:cf:ce:a7:41:4f:10:a0:bd:d4:63:80:32:
12:07:cc:49:a1:ec:65:dc:d8:3c:74:af:a3:da:c2:7d:9c:ae:
e0:36:88:f6:db:e3:75:77:33:e7:bf:bd:f6:4f:70:60:b9:ca:
c9:9f:fd:4c:49:70:a9:67:73:4f:e8:38:c1:9c:a0:d7:5a:6a:
78:13:c3:b0:8e:17:46:2d:82:a8:cf:36:58:92:ab:be:55:cd:
b9:1e:0a:da:b8:59:a3:d7:85:08:db:1b:17:fa:ea:19:a9:e0:
c2:fe:51:f9:5d:94:ea:7f:01:e4:5a:09:75:ca:6a:df:a5:8f:
da:a9:4e:4e:f1:e5:83:60:71:51:28:0b:51:fd:ad:b9:04:05:
dd:c8:0b:5c:70:e7:75:0a:43:12:40:cf:53:09:4f:2e:05:36:
fd:0c:83:6f:88:1d:bb:96:0c:14:06:28:54:48:82:15:fd:e5:
8f:7d:ab:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:53:15 2026 by rpki-client