Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E272A5D26EC111F19B08CFA6CE1D38B0.roa
File: E272A5D26EC111F19B08CFA6CE1D38B0.roa (raw, json)
Hash identifier: Qaro5IC0x7iCP4icMz/h479bxEUxbWWOyDcjzlX9iD0=
Subject key identifier: C8:11:C7:6A:5B:53:EB:D1:C6:A7:51:9B:1D:44:6E:87:C4:5E:74:4F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D46E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E272A5D26EC111F19B08CFA6CE1D38B0.roa
Signing time: Tue 23 Jun 2026 05:10:43 +0000
ROA not before: Tue 23 Jun 2026 05:10:38 +0000
ROA not after: Tue 30 Jun 2026 05:10:38 +0000
asID: 399077
IP address blocks: 154.211.91.0/24 maxlen: 24
154.211.92.0/24 maxlen: 24
154.211.93.0/24 maxlen: 24
154.211.94.0/24 maxlen: 24
154.211.95.0/24 maxlen: 24
154.211.96.0/24 maxlen: 24
154.211.97.0/24 maxlen: 24
154.211.98.0/24 maxlen: 24
154.211.99.0/24 maxlen: 24
154.211.100.0/24 maxlen: 24
154.211.101.0/24 maxlen: 24
154.211.102.0/24 maxlen: 24
154.211.103.0/24 maxlen: 24
154.211.104.0/24 maxlen: 24
154.211.105.0/24 maxlen: 24
154.211.106.0/24 maxlen: 24
154.211.107.0/24 maxlen: 24
154.211.108.0/24 maxlen: 24
154.211.109.0/24 maxlen: 24
154.211.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119918 (0x1d46e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 23 05:10:38 2026 GMT
Not After : Jun 30 05:10:38 2026 GMT
Subject: CN=6a3a1553-3f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5d:1f:2b:e9:6f:12:73:02:e3:2f:2a:56:9b:
12:e6:9c:e1:68:62:bf:c7:54:ef:5c:60:47:cb:5a:
7f:df:f7:be:90:fb:fe:76:74:e4:9e:d5:f4:04:3d:
97:a9:df:b6:ae:64:f2:cb:91:9e:0f:d3:9c:be:5c:
c8:cf:e3:6f:ea:21:44:c8:6d:2a:86:e1:e9:ef:e2:
54:1c:eb:69:2f:f3:f8:38:b7:a7:f5:4f:2d:29:1c:
61:23:45:d9:2b:fe:eb:44:0f:86:ab:39:88:47:6b:
78:64:c6:8c:7c:6a:f8:78:0d:96:15:af:13:56:d7:
97:3c:59:37:b3:eb:11:21:52:31:06:a8:f4:55:9f:
a0:70:97:98:04:3b:e5:c7:4c:f0:66:b8:f3:c8:8c:
6f:63:7b:7d:36:98:f7:e4:ef:d0:c4:15:1d:fa:f3:
17:25:89:ae:97:d2:14:52:90:b0:2a:ff:cd:87:3b:
59:bb:82:ea:8c:b9:a1:ef:e8:bb:1d:77:eb:37:44:
4b:66:99:04:8c:2b:fa:72:8d:5d:c3:6d:5a:1f:3d:
ee:68:a5:80:c0:d6:23:b6:f2:a1:cf:5d:70:b5:f4:
47:8f:7a:9f:77:d4:df:b3:df:e7:e1:28:40:4b:51:
f3:96:d1:2a:46:1b:d4:c6:84:a5:7e:7a:47:c4:79:
40:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:11:C7:6A:5B:53:EB:D1:C6:A7:51:9B:1D:44:6E:87:C4:5E:74:4F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E272A5D26EC111F19B08CFA6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.91.0-154.211.110.255
Signature Algorithm: sha256WithRSAEncryption
aa:66:c2:2d:3c:6e:66:df:da:08:f4:06:d6:42:8c:31:89:a1:
52:7f:21:61:0b:fd:35:ce:c3:04:ef:f6:64:45:94:bb:5c:30:
d5:9c:54:e5:71:f0:71:9f:53:be:30:46:c4:4f:70:05:26:4e:
d3:ee:3c:5c:27:40:14:cd:7f:b6:13:26:c9:08:c8:ae:3f:df:
07:ba:c7:ff:58:9e:b2:bc:a3:b2:59:01:d2:79:14:ce:ab:e3:
36:91:d9:06:79:01:93:01:63:70:ff:f2:4c:6e:8e:1a:f2:84:
ee:8c:bb:52:af:6d:f3:1a:ba:0d:d9:e4:71:dc:57:21:82:be:
7f:b1:55:9d:77:be:60:01:fb:6d:8e:9e:12:e9:e4:49:90:6f:
b5:03:c3:ee:12:b0:1d:58:fb:e1:a2:54:76:97:d6:1c:b2:e5:
de:e5:76:61:c1:9c:82:44:f1:0d:d8:1b:69:c3:7f:2b:b6:b2:
16:1c:78:64:2f:9d:33:23:af:1d:1c:fc:f5:b1:03:0f:8c:75:
d3:77:2a:b8:92:81:0d:05:1a:83:df:9d:44:18:b0:e3:5a:d9:
68:04:0a:33:9e:bb:6a:6d:da:b9:cd:7e:bc:4c:60:42:d5:98:
5e:60:0e:e0:02:62:da:e2:75:71:c4:ec:98:3f:79:cc:a4:af:
3c:8d:2d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:51:53 2026 by rpki-client