Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4A7B68E8F1411F19B19C5F7CE1D38B0.roa
File: F4A7B68E8F1411F19B19C5F7CE1D38B0.roa (raw, json)
Hash identifier: NSfcWL+1poC07H8Myq7iXMdvrOVAD3o3jNJM4j4LhFk=
Subject key identifier: 51:04:6B:8D:7A:D9:AB:51:3F:42:BC:88:36:DA:51:F4:9D:42:64:2E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DC72
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4A7B68E8F1411F19B19C5F7CE1D38B0.roa
Signing time: Mon 03 Aug 2026 08:25:59 +0000
ROA not before: Mon 03 Aug 2026 08:25:55 +0000
ROA not after: Thu 10 Sep 2026 08:25:55 +0000
asID: 138915
IP address blocks: 154.93.46.0/24 maxlen: 24
154.93.47.0/24 maxlen: 24
154.93.48.0/24 maxlen: 24
154.93.49.0/24 maxlen: 24
154.93.50.0/24 maxlen: 24
154.93.51.0/24 maxlen: 24
154.93.52.0/23 maxlen: 24
154.93.54.0/23 maxlen: 24
154.93.56.0/23 maxlen: 24
154.93.58.0/24 maxlen: 24
154.93.59.0/24 maxlen: 24
154.93.60.0/24 maxlen: 24
154.93.61.0/24 maxlen: 24
154.93.62.0/24 maxlen: 24
154.93.63.0/24 maxlen: 24
154.95.64.0/24 maxlen: 24
154.95.65.0/24 maxlen: 24
154.95.66.0/23 maxlen: 24
154.95.66.0/24 maxlen: 24
154.95.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121970 (0x1dc72)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 3 08:25:55 2026 GMT
Not After : Sep 10 08:25:55 2026 GMT
Subject: CN=6a705097-28cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cc:b8:5e:9a:17:76:df:5b:b5:8a:89:87:b8:
a6:f8:9e:9e:7c:15:7f:02:b0:dc:8e:7a:57:cf:4f:
1b:23:62:b8:71:76:64:c3:b6:67:8f:9c:06:64:4e:
14:d4:c8:9f:7c:34:0f:fb:92:ec:56:b0:e1:86:0c:
91:d3:3c:f1:92:76:82:fa:12:55:e0:9b:1c:d6:2a:
c9:80:4a:80:ba:5f:6c:d1:f0:48:ec:a1:72:16:01:
59:ff:05:1d:bd:ea:37:31:99:d5:e4:61:67:4f:54:
7a:7a:14:a4:03:b3:d6:f4:23:90:e0:ee:83:4c:97:
2e:c9:8f:ec:89:0d:f7:f2:2e:4f:41:c8:03:03:be:
43:5b:1a:88:15:61:f7:f1:9c:df:fc:c3:34:e8:74:
c6:e0:20:2b:3d:34:18:57:fd:56:57:74:6c:62:92:
54:a8:76:78:41:4b:84:1f:ca:ea:b0:3a:4a:a1:28:
88:7f:18:d8:8d:b7:9e:05:97:23:30:e4:13:1a:a2:
ab:5e:e2:75:ba:75:c3:ec:b6:3b:1f:cb:d8:dc:3d:
27:52:bd:da:6c:69:7a:a9:c7:bb:1f:47:30:e0:1a:
4d:5e:c7:e1:a2:b9:32:6f:a5:98:8e:e2:92:f2:cd:
9c:bb:e2:b8:7f:3d:a7:24:37:b0:b5:87:de:82:ca:
a5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:04:6B:8D:7A:D9:AB:51:3F:42:BC:88:36:DA:51:F4:9D:42:64:2E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F4A7B68E8F1411F19B19C5F7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.46.0-154.93.63.255
154.95.64.0/22
Signature Algorithm: sha256WithRSAEncryption
b0:3d:11:73:4a:cb:0c:0f:04:cc:25:91:32:b1:43:06:1e:0e:
78:a9:1e:6d:a3:6a:95:c1:af:8d:f1:cf:a3:a3:b7:49:89:9a:
fc:f5:8f:38:c3:f8:e2:b6:db:63:95:a2:f2:a9:1b:59:cb:dc:
43:b0:78:9c:67:d7:94:d6:7d:ad:f2:a3:20:69:c1:46:4f:df:
89:84:39:81:8f:eb:5f:0a:27:a1:b1:33:31:64:d4:9f:31:e2:
92:e9:30:28:3c:e9:dd:76:e7:a3:24:27:64:7e:64:d5:03:6a:
4a:fe:ca:90:13:ed:64:d7:23:64:3d:d3:0e:19:45:b1:6e:9d:
22:d7:54:45:17:9f:dc:f8:19:ce:ff:1e:ec:d8:43:4f:c7:59:
0b:22:a2:f6:41:6b:fb:d6:b5:cd:f7:15:59:bc:76:32:34:8d:
8a:b2:2f:ec:68:73:2a:d4:72:99:af:9c:bb:11:47:8d:84:a8:
29:70:5c:ee:8e:9e:ab:2e:1c:29:17:85:95:a7:7a:65:f5:77:
8c:cd:30:96:df:3f:3a:3f:f7:81:87:bd:0f:32:02:2c:51:cc:
56:7a:0d:23:11:02:5f:3f:24:74:4b:d4:a7:2a:ca:8c:51:48:
a1:fd:f0:35:dd:6b:27:47:fc:d9:75:bb:c4:1e:b3:cb:0b:ab:
76:6d:56:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:07:03 2026 by rpki-client