Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02BBD86E834D11F19F7DBB17CF1D38B0.roa
File: 02BBD86E834D11F19F7DBB17CF1D38B0.roa (raw, json)
Hash identifier: N4ZMrUHV0qWG1pcmsN1TrUmPyQiE0vxm3HMqGStgkvA=
Subject key identifier: F2:23:F5:B4:FC:4E:08:8B:32:3B:0D:EE:12:A9:7E:D8:C1:D4:9C:04
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D99F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02BBD86E834D11F19F7DBB17CF1D38B0.roa
Signing time: Sun 19 Jul 2026 08:37:01 +0000
ROA not before: Sun 19 Jul 2026 08:36:57 +0000
ROA not after: Sun 16 Aug 2026 08:36:57 +0000
asID: 17497
IP address blocks: 154.196.156.0/22 maxlen: 24
154.196.172.0/22 maxlen: 24
154.196.216.0/21 maxlen: 24
154.196.216.0/24 maxlen: 24
154.196.217.0/24 maxlen: 24
154.196.218.0/24 maxlen: 24
154.196.219.0/24 maxlen: 24
154.196.220.0/24 maxlen: 24
154.196.221.0/24 maxlen: 24
154.196.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 08:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121247 (0x1d99f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 19 08:36:57 2026 GMT
Not After : Aug 16 08:36:57 2026 GMT
Subject: CN=6a5c8cad-c5b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2b:0e:d9:fd:88:69:7d:f1:e5:c5:cc:69:eb:
98:17:89:3e:29:22:5e:8a:e9:2f:fe:eb:1b:af:ef:
19:86:02:a5:6a:d1:66:0a:09:4a:97:14:a7:9d:6d:
1e:c1:32:61:fa:bc:f0:82:fb:f7:85:ea:76:67:5a:
a6:d1:ca:fd:79:f5:f5:29:93:83:80:38:ef:bb:a1:
df:0a:e7:89:15:ba:6f:9c:f7:1e:57:ce:e9:93:e6:
cb:be:e7:47:50:c7:65:1d:c2:fd:c0:e9:17:7c:2e:
80:32:9c:3f:58:d9:f3:5e:31:f8:a4:92:59:ad:24:
49:fb:fd:2f:02:59:42:1d:b5:b6:aa:fd:44:46:d2:
f0:7a:cb:50:6f:33:53:45:11:38:c5:46:0e:ad:cb:
07:7c:43:f4:45:bf:92:fa:60:be:0d:a3:5d:9b:bd:
79:5f:bd:dd:8e:0a:d1:f2:6a:38:0f:70:a0:2b:71:
ea:81:e7:1f:97:ba:87:9b:db:06:95:af:92:6b:78:
d1:e6:4e:78:58:73:37:4d:3a:0c:45:53:6f:49:df:
1f:b8:a3:98:65:3e:ed:32:4d:8d:aa:c1:49:7a:61:
b2:42:b8:b8:b2:bc:71:81:fd:5e:72:55:6f:80:fa:
d6:9b:d1:7b:0c:c6:dc:fe:6b:c9:25:1f:d3:90:ed:
ee:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:23:F5:B4:FC:4E:08:8B:32:3B:0D:EE:12:A9:7E:D8:C1:D4:9C:04
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/02BBD86E834D11F19F7DBB17CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.156.0/22
154.196.172.0/22
154.196.216.0/21
Signature Algorithm: sha256WithRSAEncryption
4f:ef:81:85:eb:0f:85:6a:ab:0f:69:03:4e:15:1e:65:08:cf:
e4:ea:60:ae:b8:ae:60:85:87:63:5f:5e:41:d5:5e:9b:cd:94:
eb:d4:58:ac:0c:b8:9a:65:fc:da:0e:19:31:96:c3:cd:5f:90:
fc:06:3b:31:07:1c:22:4f:55:e3:35:86:37:ea:34:ae:0a:4e:
c1:36:49:c6:c7:7a:95:dd:5c:02:78:c5:64:b9:c5:a4:50:97:
0d:49:43:0b:a8:b7:1e:a0:63:b2:45:ab:2d:1c:2e:1e:65:37:
05:4c:a0:d0:2f:dc:df:c9:40:c8:39:56:c7:25:6f:3f:d3:8b:
1a:6e:d8:fb:4b:3a:98:72:16:ab:64:48:dc:2a:f7:dc:ca:d0:
36:8b:b6:ab:c4:eb:4d:0f:6b:89:2d:11:2a:58:17:11:95:45:
f0:0b:15:25:2b:8b:06:09:6b:56:3f:31:ba:00:ae:7d:e3:8b:
da:60:9a:1d:00:35:ab:bf:77:33:c2:98:50:b0:51:a9:a8:d2:
a9:24:6c:96:2e:e3:a2:9a:1f:ce:8b:c1:a3:05:a2:da:ba:9a:
c8:1a:3c:99:98:b3:a3:8e:e2:bc:2b:c7:c0:a9:80:05:b6:5e:
0b:2a:00:c0:de:2b:00:e3:aa:4e:ce:84:c4:b6:ee:fd:ec:1d:
0e:88:16:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:25:51 2026 by rpki-client