Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6CB1D58690811F1B5759F06CF1D38B0.roa
File: E6CB1D58690811F1B5759F06CF1D38B0.roa (raw, json)
Hash identifier: zHyoK76o7af8C3VbIomuC8j444OFcwS32srk9QRjqAg=
Subject key identifier: 0B:2E:8E:A6:D2:94:74:12:4E:C7:20:8C:7E:1C:4B:64:17:7A:B6:7F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D2F9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6CB1D58690811F1B5759F06CF1D38B0.roa
Signing time: Mon 15 Jun 2026 22:23:58 +0000
ROA not before: Mon 15 Jun 2026 22:23:53 +0000
ROA not after: Sun 19 Jul 2026 22:23:53 +0000
asID: 11404
IP address blocks: 154.193.112.0/20 maxlen: 24
154.196.192.0/20 maxlen: 24
154.199.80.0/20 maxlen: 24
154.200.112.0/20 maxlen: 24
154.205.48.0/20 maxlen: 24
154.206.32.0/20 maxlen: 24
154.207.144.0/20 maxlen: 24
154.207.160.0/20 maxlen: 24
154.208.96.0/20 maxlen: 24
154.222.96.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119545 (0x1d2f9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 15 22:23:53 2026 GMT
Not After : Jul 19 22:23:53 2026 GMT
Subject: CN=6a307b7e-5009
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2b:2a:1a:bd:31:93:d0:e7:50:b7:ef:df:56:
c9:2a:d4:a2:78:3a:1f:c9:a0:a5:7d:91:3a:ce:48:
4b:5f:b5:21:ab:ee:72:c1:7a:60:6c:00:78:39:a0:
3d:fe:00:0b:df:75:bc:cd:b3:ab:35:29:5b:fb:21:
28:11:31:91:cf:f5:65:d0:59:b7:67:17:8d:6b:52:
4c:69:98:30:ca:ec:58:a4:f9:ee:1d:51:f4:c5:26:
7b:e7:c1:af:bf:cc:e4:ad:c9:78:4f:b8:d2:d1:e1:
33:68:b7:40:d1:37:24:11:de:8a:20:49:3f:43:f2:
1b:3a:29:5a:a7:c1:e4:24:aa:dd:05:11:7c:4b:c9:
cb:d3:0f:7e:8a:36:3f:0b:81:6b:c3:69:fc:3a:f8:
41:20:02:11:88:e9:13:b3:3a:ad:0a:b5:52:b8:22:
a9:9e:28:57:ac:67:96:96:a6:dc:f0:19:46:50:04:
24:a8:13:8f:11:da:83:33:d0:c2:98:4e:f6:ec:33:
62:61:05:17:ca:37:0f:04:af:9f:34:e7:05:5e:c2:
2c:3a:63:ff:b2:67:8b:76:4e:a1:18:58:9d:d3:12:
bd:6f:0b:e2:af:6b:74:60:0b:83:e5:dd:8b:ea:d4:
f2:57:79:7d:d0:2c:53:c1:12:68:38:fb:62:63:2b:
76:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:2E:8E:A6:D2:94:74:12:4E:C7:20:8C:7E:1C:4B:64:17:7A:B6:7F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E6CB1D58690811F1B5759F06CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.112.0/20
154.196.192.0/20
154.199.80.0/20
154.200.112.0/20
154.205.48.0/20
154.206.32.0/20
154.207.144.0-154.207.175.255
154.208.96.0/20
154.222.96.0/20
Signature Algorithm: sha256WithRSAEncryption
04:9e:e7:ea:e4:32:37:8d:d6:0e:f7:21:da:da:96:12:62:bb:
9e:6e:c7:7d:0e:5b:60:f2:24:ca:6b:6a:6e:75:95:95:35:bd:
a4:46:81:fa:eb:e7:c6:a4:44:af:31:10:ae:dc:36:98:c9:3a:
d0:90:f6:27:8c:be:92:f6:4c:09:12:61:44:42:38:43:64:19:
d7:c4:d3:92:79:90:59:13:e7:1e:b1:3e:e7:4e:37:6f:a5:1c:
b3:e1:91:f3:70:ea:a1:d6:8c:ff:ce:f8:bc:04:ca:59:9c:7e:
df:fc:8b:2b:4b:9f:c1:03:4b:06:76:ce:3b:a2:9c:8d:bc:34:
48:b9:0f:de:35:d3:48:69:6c:58:a5:f8:2e:22:e8:aa:87:39:
c2:34:66:ab:aa:35:c4:2d:76:89:e1:ab:e6:44:7f:5f:fa:17:
8d:0a:ad:e6:0e:02:1e:bf:5f:f3:93:9b:5e:82:c2:2f:5b:77:
d0:7f:5a:9c:94:74:52:f4:b0:2a:08:1d:43:ab:2f:8c:8f:9f:
8c:9e:ae:7f:37:38:6a:40:f8:58:3f:e9:c8:e0:44:93:fe:2f:
90:6e:27:ba:d5:c0:53:6b:2b:10:27:42:77:44:49:a8:60:10:
8c:37:0f:9e:db:77:9f:15:97:19:96:a0:fd:b2:a2:40:c7:91:
3f:56:47:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:53:55 2026 by rpki-client