Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC75092E8FAB11F1B1F864FCCE1D38B0.roa
File: FC75092E8FAB11F1B1F864FCCE1D38B0.roa (raw, json)
Hash identifier: tqZwrpF/VQzA1LdYfsyoVlth2Z2ian+E57R19Il5XJg=
Subject key identifier: 64:F2:DD:84:3C:99:60:5D:6D:A7:B8:77:73:96:87:2D:02:2B:E4:F6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DC91
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC75092E8FAB11F1B1F864FCCE1D38B0.roa
Signing time: Tue 04 Aug 2026 02:27:07 +0000
ROA not before: Tue 04 Aug 2026 02:27:02 +0000
ROA not after: Sun 06 Sep 2026 02:27:02 +0000
asID: 49505
IP address blocks: 154.209.208.0/24 maxlen: 24
154.209.209.0/24 maxlen: 24
154.209.210.0/24 maxlen: 24
154.209.211.0/24 maxlen: 24
154.209.212.0/24 maxlen: 24
154.209.213.0/24 maxlen: 24
154.209.214.0/24 maxlen: 24
154.209.215.0/24 maxlen: 24
154.209.216.0/24 maxlen: 24
154.209.217.0/24 maxlen: 24
154.209.218.0/24 maxlen: 24
154.209.219.0/24 maxlen: 24
154.211.17.0/24 maxlen: 24
154.211.18.0/24 maxlen: 24
154.212.28.0/24 maxlen: 24
154.212.29.0/24 maxlen: 24
154.212.30.0/24 maxlen: 24
154.212.31.0/24 maxlen: 24
154.213.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122001 (0x1dc91)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 4 02:27:02 2026 GMT
Not After : Sep 6 02:27:02 2026 GMT
Subject: CN=6a714dfa-4a05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:99:15:37:33:e3:09:6b:51:7d:58:5d:c3:ac:
90:31:b6:75:3f:f7:1a:53:7d:5c:01:df:bf:d1:e1:
50:ff:b1:42:c1:39:5f:5f:f3:5e:ae:b8:4c:b5:00:
42:80:e7:b3:1e:15:50:40:50:f2:87:5f:dd:cf:86:
23:01:c9:08:76:1f:10:56:53:34:07:e1:d2:be:f7:
99:dd:ef:b7:0f:5b:5d:30:cf:c5:3c:d4:95:39:5b:
c8:ac:d9:89:75:cd:70:7b:de:12:3d:be:82:98:37:
ee:1f:09:e4:8d:eb:65:df:ed:f3:ce:1e:e1:96:f0:
f5:bd:12:bb:e1:cf:af:ff:a6:cf:bb:e3:77:5c:74:
25:a9:b0:1f:cf:56:79:64:cf:68:1f:33:77:9c:fc:
16:33:55:7c:98:22:2b:bd:a2:a8:09:7c:26:d6:65:
b6:a6:1e:50:e8:d1:36:a8:d6:3e:f9:bc:50:8d:a5:
35:db:d5:27:04:16:88:7e:40:3e:83:f8:f9:79:94:
98:5e:f9:05:f7:52:1f:10:57:41:2b:8f:1a:72:6f:
d2:a8:31:66:80:53:f9:13:ec:0d:ab:93:a1:63:2f:
aa:93:bc:fc:6a:bf:f4:80:e1:e5:4e:f2:46:6e:43:
5e:35:8c:31:38:c7:eb:1f:3a:8e:d4:67:af:93:99:
b3:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F2:DD:84:3C:99:60:5D:6D:A7:B8:77:73:96:87:2D:02:2B:E4:F6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FC75092E8FAB11F1B1F864FCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.208.0-154.209.219.255
154.211.17.0-154.211.18.255
154.212.28.0/22
154.213.0.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:31:06:f0:69:30:eb:d4:76:43:60:0b:60:4a:29:97:29:c1:
1b:30:31:56:ab:e1:5a:90:a5:49:11:04:68:f5:23:e3:de:be:
57:d3:22:65:9c:95:89:6f:23:a2:4f:cc:4a:17:17:10:0f:ac:
9f:03:fa:cc:9c:56:b2:a6:38:07:db:bc:af:23:85:ad:0a:f5:
1b:e8:d5:71:97:7f:fb:46:27:d5:21:6a:b8:76:74:55:69:59:
13:36:3d:53:2e:f7:77:9d:d9:ae:69:1e:e2:24:16:47:7e:54:
05:ed:23:d6:ea:57:47:08:4a:80:4b:83:bf:0a:c1:d8:90:0a:
47:14:1e:e8:31:ad:76:d8:94:21:18:17:1a:c3:d3:10:64:ef:
fc:18:19:f4:c0:2d:df:59:8e:a4:cc:f0:1f:e7:fc:d3:7d:36:
a7:f9:6f:73:9f:44:c6:24:b3:0f:16:c2:5e:1d:08:6b:0c:80:
93:e6:a5:5d:d1:b9:29:df:b1:f2:12:a8:c8:5c:d0:e1:28:24:
34:43:f3:37:0a:8f:e8:64:0d:0e:48:39:cb:67:62:b1:6a:01:
1a:f7:50:61:f2:a5:e2:67:59:29:4d:ca:86:11:f1:88:94:08:
2f:cf:30:77:bf:1a:1e:e7:90:a6:79:5f:e2:b7:f7:f4:28:26:
6c:21:49:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:11:53 2026 by rpki-client