Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E977B65859B111F1A020FBE0CE1D38B0.roa
File: E977B65859B111F1A020FBE0CE1D38B0.roa (raw, json)
Hash identifier: itACBfsuqgVHu8xmN29/6clB+c9OLrIz+jrDUyHEFJM=
Subject key identifier: D5:F1:57:43:A6:E7:61:5F:20:11:3C:81:6A:0A:A7:DB:37:92:65:48
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D001
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E977B65859B111F1A020FBE0CE1D38B0.roa
Signing time: Wed 27 May 2026 09:53:29 +0000
ROA not before: Wed 27 May 2026 09:53:24 +0000
ROA not after: Fri 04 Sep 2026 09:53:24 +0000
asID: 18229
IP address blocks: 154.210.195.0/24 maxlen: 24
154.210.196.0/24 maxlen: 24
154.210.197.0/24 maxlen: 24
154.210.198.0/24 maxlen: 24
154.210.199.0/24 maxlen: 24
154.210.200.0/24 maxlen: 24
154.210.201.0/24 maxlen: 24
154.210.202.0/24 maxlen: 24
154.210.204.0/24 maxlen: 24
154.210.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 14 Jun 2026 00:07:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118785 (0x1d001)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 27 09:53:24 2026 GMT
Not After : Sep 4 09:53:24 2026 GMT
Subject: CN=6a16bf19-7389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b6:9a:5f:1c:b4:4e:03:14:f9:8a:f6:05:ed:
97:18:13:ef:52:c9:42:53:a1:68:25:df:82:96:20:
90:09:d1:6d:b7:5a:d4:36:de:46:43:86:43:da:42:
63:24:bc:dc:d3:af:52:0d:48:f9:42:a5:f1:63:43:
8a:65:5b:da:53:0a:4f:4f:f6:d5:ae:b0:67:e4:8d:
57:ae:bf:24:dc:a0:51:e2:27:9a:32:48:53:20:63:
0b:3f:c4:02:53:20:66:e8:3b:a9:56:2d:8c:7a:41:
05:c7:5a:a6:e7:a4:29:11:eb:c1:96:76:5b:29:b6:
2a:c6:81:dd:fe:1f:28:4c:f9:87:7e:b0:f5:1d:11:
25:24:33:aa:7e:16:8e:47:8e:54:bb:7b:4c:9e:fb:
03:7d:41:d2:71:0e:02:8b:53:3b:d4:46:9d:ee:b0:
17:7c:7f:5c:8a:64:d6:25:19:f3:0e:ec:ac:a1:80:
e3:b5:88:c6:1e:f5:5c:ae:b5:91:24:7c:52:30:91:
40:d1:23:03:6a:04:a1:83:71:cd:54:f7:7f:55:c3:
56:a3:eb:e8:29:87:32:9e:1d:a5:44:ce:19:d1:bd:
13:e5:c4:2e:ea:a7:a3:00:f9:e8:39:a9:12:cb:5b:
19:29:ee:b4:de:32:e3:54:44:52:33:ce:47:88:bc:
f7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:F1:57:43:A6:E7:61:5F:20:11:3C:81:6A:0A:A7:DB:37:92:65:48
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E977B65859B111F1A020FBE0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.195.0-154.210.202.255
154.210.204.0/23
Signature Algorithm: sha256WithRSAEncryption
79:ac:d3:20:8c:18:84:b5:0f:6c:fe:f4:d8:cb:55:43:b1:27:
63:4c:ec:40:e2:c0:29:ba:f4:a2:47:8a:31:1b:da:e6:de:fb:
24:f5:d8:7a:ab:db:bc:be:67:4f:89:85:47:29:83:31:06:a5:
7e:22:63:72:94:fd:34:ab:ae:ec:5f:86:af:e1:12:44:90:e7:
43:41:68:66:59:61:5d:d7:cf:42:07:46:9c:46:56:4b:a8:c6:
c3:97:bd:96:8e:26:c9:a7:1a:e5:b1:e9:77:57:4f:de:2f:91:
4c:19:43:e1:52:01:a4:57:0b:dc:f7:45:97:dd:fb:e7:70:7f:
c6:b8:62:0b:6c:d0:94:c8:32:37:8f:b1:b0:88:95:4f:63:45:
5e:fd:58:02:5b:20:8e:09:62:ee:8b:46:7a:c9:77:0e:0e:33:
98:b9:9e:40:11:7a:4c:d1:ba:d7:ed:ff:f1:36:dd:37:55:ef:
ba:be:11:6e:26:f5:44:35:ff:f2:30:e8:96:29:23:f0:41:74:
57:93:46:52:6b:5a:7f:45:43:25:82:38:01:b1:38:cb:cf:70:
0d:1c:b9:a6:81:c8:e8:a9:f2:2e:57:b4:7b:7c:93:df:5a:75:
80:f0:92:b2:29:1f:06:0a:13:cd:52:48:83:97:95:bc:a7:4a:
a7:01:64:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 01:01:47 2026 by rpki-client