Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E021B894909611F1A947D81ACF1D38B0.roa
File: E021B894909611F1A947D81ACF1D38B0.roa (raw, json)
Hash identifier: 0MoYKQb+6JcgNSDibN8W++grCcOjS+PI4/5kBA08pLI=
Subject key identifier: 29:1C:51:62:51:4A:21:C1:24:94:CC:E2:24:42:6D:B4:C4:7E:89:46
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DCA7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E021B894909611F1A947D81ACF1D38B0.roa
Signing time: Wed 05 Aug 2026 06:28:31 +0000
ROA not before: Wed 05 Aug 2026 06:28:27 +0000
ROA not after: Sun 06 Sep 2026 06:28:27 +0000
asID: 151347
IP address blocks: 154.84.192.0/24 maxlen: 24
154.84.193.0/24 maxlen: 24
154.84.196.0/24 maxlen: 24
154.84.197.0/24 maxlen: 24
154.84.198.0/24 maxlen: 24
154.84.199.0/24 maxlen: 24
154.84.200.0/24 maxlen: 24
154.84.201.0/24 maxlen: 24
154.84.202.0/24 maxlen: 24
154.84.203.0/24 maxlen: 24
154.84.204.0/24 maxlen: 24
154.84.205.0/24 maxlen: 24
154.84.206.0/24 maxlen: 24
154.84.207.0/24 maxlen: 24
154.84.208.0/24 maxlen: 24
154.84.209.0/24 maxlen: 24
154.84.210.0/24 maxlen: 24
154.84.237.0/24 maxlen: 24
154.84.243.0/24 maxlen: 24
154.84.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122023 (0x1dca7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 5 06:28:27 2026 GMT
Not After : Sep 6 06:28:27 2026 GMT
Subject: CN=6a72d80f-e602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:74:52:95:47:62:49:c1:00:08:d5:a6:97:61:
e4:64:bc:93:15:9b:ac:29:8b:e1:b3:bf:d8:f9:4a:
11:d9:1c:9f:3e:81:0f:8d:b2:ab:e0:a9:1f:01:a9:
51:39:7b:b3:12:43:a4:aa:c2:cc:5a:0c:46:1e:dd:
1d:f9:29:57:55:f4:0c:a7:1d:9e:d3:52:53:6d:cb:
32:81:22:80:a7:2f:8e:86:91:7c:7c:bd:16:29:2b:
04:c5:74:16:b2:b3:10:2d:47:3f:f9:3c:78:11:7f:
f6:25:08:6a:10:30:f8:a8:39:4a:24:1f:b9:43:da:
ba:9f:a7:44:21:a7:36:2a:94:c0:3d:95:94:0f:3c:
f5:14:18:7f:96:35:f9:08:5a:0f:c3:03:9e:9b:e7:
dd:6a:62:0c:d3:70:2d:db:d0:b3:35:61:79:2b:51:
88:4b:5c:94:2a:d2:8a:79:88:e6:79:88:46:9d:a8:
45:6a:cf:18:ff:00:9b:dd:78:93:06:21:e7:54:f3:
23:ee:b0:ae:57:8d:a6:0c:f0:88:67:05:ed:38:4a:
f6:8b:9a:0e:98:b7:f2:5a:99:d5:46:fb:a3:c7:57:
05:87:98:08:79:50:62:b0:23:5f:4c:2c:6f:08:fa:
fe:a4:89:70:83:27:e7:aa:35:94:5f:4c:b7:8e:a6:
c6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:1C:51:62:51:4A:21:C1:24:94:CC:E2:24:42:6D:B4:C4:7E:89:46
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E021B894909611F1A947D81ACF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.192.0/23
154.84.196.0-154.84.210.255
154.84.237.0/24
154.84.243.0/24
154.84.250.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:9f:a1:89:e9:43:53:e0:a3:98:92:9d:0e:57:e5:bb:f6:5b:
de:fa:ba:a2:60:a1:22:db:07:1e:90:22:d2:0d:3b:a7:4d:76:
c2:7b:7c:48:b1:fb:16:f5:ad:c8:85:24:0e:49:04:45:f7:f4:
71:5d:24:81:69:95:7a:f3:68:ef:27:42:a2:7b:85:2d:3e:39:
b8:f2:e5:de:68:d5:8c:2c:66:19:84:08:a7:26:16:35:b2:5d:
8b:5f:09:df:fa:78:f8:72:d6:5e:a4:0f:68:0d:8e:f5:ab:c1:
77:ff:a6:b5:3d:2a:f1:f8:6a:5c:16:01:53:96:c6:fa:0c:93:
24:07:9d:5a:2e:90:8e:17:69:51:d0:63:5a:13:3d:c8:4c:6c:
93:45:ad:12:5a:a3:1e:8b:9c:a4:c6:34:2b:a4:03:0e:6e:ae:
1f:b7:f8:a0:a2:ca:f7:d5:28:a8:9f:43:02:53:07:28:92:f3:
d7:1d:27:3d:fb:0a:e1:f6:8e:07:2a:52:71:03:a3:4e:7d:79:
7a:db:f5:c6:9f:46:0d:d6:db:77:11:93:2a:c1:bd:65:aa:fe:
80:af:01:52:e0:75:71:db:5c:9f:8b:bf:ee:ff:30:b4:96:09:
47:f9:72:df:cb:25:95:19:9c:87:e5:6f:75:20:58:6d:94:f4:
a1:bb:56:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:08:15 2026 by rpki-client