Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F080C13E909711F1B34073A4CE1D38B0.roa
File: F080C13E909711F1B34073A4CE1D38B0.roa (raw, json)
Hash identifier: BaOGVvvoCYiVcj30pOl3c4+1kMOxcbXUAp6PwQ03N/w=
Subject key identifier: 71:67:11:42:38:9C:99:0C:F3:42:7B:D6:30:1B:ED:46:D2:A5:EA:6B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DCA9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F080C13E909711F1B34073A4CE1D38B0.roa
Signing time: Wed 05 Aug 2026 06:36:08 +0000
ROA not before: Wed 05 Aug 2026 06:36:04 +0000
ROA not after: Sun 06 Sep 2026 06:36:04 +0000
asID: 151347
IP address blocks: 154.84.194.0/24 maxlen: 24
154.84.211.0/24 maxlen: 24
154.84.212.0/24 maxlen: 24
154.84.213.0/24 maxlen: 24
154.84.214.0/24 maxlen: 24
154.84.215.0/24 maxlen: 24
154.84.216.0/24 maxlen: 24
154.84.217.0/24 maxlen: 24
154.84.218.0/24 maxlen: 24
154.84.219.0/24 maxlen: 24
154.84.220.0/24 maxlen: 24
154.84.221.0/24 maxlen: 24
154.84.222.0/24 maxlen: 24
154.84.224.0/24 maxlen: 24
154.84.225.0/24 maxlen: 24
154.84.234.0/24 maxlen: 24
154.84.236.0/24 maxlen: 24
154.84.238.0/24 maxlen: 24
154.84.240.0/24 maxlen: 24
154.84.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122025 (0x1dca9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 5 06:36:04 2026 GMT
Not After : Sep 6 06:36:04 2026 GMT
Subject: CN=6a72d9d8-c9ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d1:e4:51:23:a4:35:c3:d4:ea:52:7a:c5:54:
74:d0:87:c3:47:3a:03:9f:37:0a:89:9e:3f:59:3c:
24:c8:78:a3:19:d2:fa:69:4d:05:f3:1b:1d:7d:d6:
43:0e:e4:3b:db:c9:1f:6c:94:76:75:ec:89:3c:16:
e8:10:bc:77:58:f1:5d:2e:ea:f2:d3:f2:60:d6:73:
38:3f:9d:58:39:3b:f0:40:02:bb:89:c6:4f:30:24:
5b:5a:db:45:49:d4:1f:c3:fc:d5:e3:31:90:af:cb:
8c:3e:a5:27:2f:f1:4d:60:ad:52:47:ed:8f:26:e0:
61:ae:d4:d8:13:e6:17:5e:9e:47:ef:aa:cc:1a:79:
cf:e2:8e:c1:4d:20:bb:d4:eb:0a:86:fc:88:71:20:
a4:d0:46:72:41:6e:9d:ce:5e:27:75:fb:a8:d4:af:
a0:94:70:f9:45:35:1b:e7:cd:41:bd:fc:c8:e6:5e:
83:75:a8:0a:b6:2a:a9:b3:c4:54:b0:d7:fd:12:db:
e1:ba:df:92:b6:ab:3f:98:29:45:06:39:d2:12:e4:
c4:41:bd:43:ab:59:d3:b0:a2:14:a8:4a:e8:fa:a1:
58:8f:bd:c6:b6:8c:ff:a1:36:54:7f:d8:ff:fa:8f:
6e:1f:1a:27:11:11:83:be:be:6e:a0:27:ea:fe:f3:
c5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:67:11:42:38:9C:99:0C:F3:42:7B:D6:30:1B:ED:46:D2:A5:EA:6B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F080C13E909711F1B34073A4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.194.0/24
154.84.211.0-154.84.222.255
154.84.224.0/23
154.84.234.0/24
154.84.236.0/24
154.84.238.0/24
154.84.240.0/23
Signature Algorithm: sha256WithRSAEncryption
30:41:81:32:94:2c:6a:89:db:74:72:a4:9f:51:46:13:77:e4:
ae:5d:98:f3:aa:37:10:b7:94:28:5c:fd:c7:f9:32:e1:82:9c:
17:4e:fa:c0:e0:a3:3f:34:d5:79:55:fe:dd:68:f7:ea:41:86:
c1:a7:34:d9:45:6d:30:3d:85:e7:d2:d9:8f:0e:00:ea:47:29:
c3:2e:96:ef:8b:09:65:7f:e2:35:43:23:ff:bc:01:01:a5:a6:
72:3f:cc:96:04:e9:f3:84:9f:99:8d:db:46:f1:aa:f7:ae:e8:
cd:c2:d3:f3:e5:29:2e:ea:a9:26:50:dd:bc:f1:b5:a4:58:4d:
fd:c4:31:9e:3e:0c:03:bc:e0:80:25:b3:e6:b1:ff:3d:74:26:
eb:ff:83:89:e7:5f:b8:62:c1:90:d0:bb:c9:39:39:36:c7:d5:
26:6a:bb:16:38:1d:c1:55:64:53:77:99:c0:4e:d4:25:56:ca:
d1:d7:98:5d:f7:6b:40:ab:9e:83:7a:02:45:7f:3d:7e:4f:c2:
b9:b0:a6:d1:c4:93:5a:61:4f:df:6b:05:2e:5f:51:cc:67:4d:
5e:3c:ac:2c:9e:c1:fe:5f:98:64:bd:40:95:6b:53:c3:59:d5:
2d:25:2e:70:41:3a:1f:92:5d:19:0d:de:11:d4:59:e3:9e:f6:
05:9d:44:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:11:56 2026 by rpki-client