Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22269646854911F18261ABA1CE1D38B0.roa
File: 22269646854911F18261ABA1CE1D38B0.roa (raw, json)
Hash identifier: pI+jrJxVDt0dvMZm8Cnm1tfi2RfF2bFZza5e62MVzyQ=
Subject key identifier: AF:E4:22:32:26:B3:5A:2B:94:7B:32:28:17:E2:85:FD:43:AB:D9:0D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DAB4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22269646854911F18261ABA1CE1D38B0.roa
Signing time: Tue 21 Jul 2026 21:14:18 +0000
ROA not before: Tue 21 Jul 2026 21:14:14 +0000
ROA not after: Thu 27 Aug 2026 21:14:14 +0000
asID: 138915
IP address blocks: 154.93.72.0/24 maxlen: 24
154.93.74.0/24 maxlen: 24
154.93.96.0/24 maxlen: 24
154.93.97.0/24 maxlen: 24
154.94.86.0/24 maxlen: 24
154.94.87.0/24 maxlen: 24
154.94.100.0/24 maxlen: 24
154.94.116.0/24 maxlen: 24
154.94.123.0/24 maxlen: 24
154.94.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121524 (0x1dab4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 21:14:14 2026 GMT
Not After : Aug 27 21:14:14 2026 GMT
Subject: CN=6a5fe12a-972e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5a:27:a1:04:ce:94:0b:51:a8:ec:fd:09:91:
90:89:5a:91:f5:c1:3b:2e:4f:45:50:e1:79:f2:24:
1c:45:a0:d5:3e:ac:3f:6a:8b:5a:17:15:1a:22:e4:
8c:7e:4d:32:6e:13:e7:00:a2:22:88:95:38:fc:b2:
b4:12:5e:3b:25:bb:d8:46:cb:50:33:b5:6a:ae:40:
c9:28:c8:c6:1a:68:f0:70:78:63:da:e9:82:b5:63:
b7:fa:36:c8:02:bc:03:4f:d3:9e:70:41:70:43:ff:
e8:6f:ba:e8:84:ae:fe:17:05:64:bf:2b:19:6b:8d:
65:0b:8e:b7:c4:2c:dc:6f:42:83:92:e1:f0:7e:b9:
3c:e8:b2:61:9e:3e:e6:e1:8e:76:cd:8d:9a:ce:e8:
99:79:3a:8c:21:ee:66:47:57:55:38:99:49:37:59:
d2:53:59:f4:aa:d4:5b:cd:97:04:b8:28:54:79:84:
43:8b:62:bf:ee:da:89:42:82:6e:fe:38:eb:e7:aa:
40:1d:37:a5:2b:6a:64:fa:4c:04:b1:e0:30:4e:fe:
31:87:46:c1:0d:da:70:8c:f1:94:95:56:72:00:d0:
aa:98:71:7b:09:70:c5:e8:1b:6b:f9:bd:c6:05:93:
b9:43:0a:e9:66:37:b0:8d:15:40:66:81:95:f6:2b:
bd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E4:22:32:26:B3:5A:2B:94:7B:32:28:17:E2:85:FD:43:AB:D9:0D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/22269646854911F18261ABA1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.72.0/24
154.93.74.0/24
154.93.96.0/23
154.94.86.0/23
154.94.100.0/24
154.94.116.0/24
154.94.123.0-154.94.124.255
Signature Algorithm: sha256WithRSAEncryption
b3:67:89:b6:b5:26:c2:57:98:ec:18:a2:ec:62:c3:1d:05:2b:
67:bf:c9:6e:e9:22:26:12:eb:b5:ec:b4:bb:ee:3f:d2:a3:e4:
df:3e:89:a8:d6:d4:5b:c9:94:60:69:bd:73:35:2b:35:74:c8:
0a:0b:c3:d4:e3:de:ab:f9:22:27:c3:eb:f9:57:d2:cb:15:65:
5c:ed:e5:63:14:31:fe:d3:80:b5:1d:26:7b:b8:3c:8d:88:56:
3e:66:cf:e7:31:30:63:37:9a:e1:5d:fd:1d:4e:7e:73:0c:43:
4e:ac:7e:ee:11:91:60:e7:00:4e:4f:15:26:32:08:fb:4a:3c:
ae:1a:06:b4:8d:6a:0a:bc:8f:a9:e0:93:42:c9:14:cd:24:9e:
c4:07:3f:1d:aa:9c:e9:a8:d9:d0:3e:f5:d8:0c:45:1b:0b:f3:
78:87:07:f8:ae:4c:26:fb:9e:50:6c:c0:7c:45:41:71:05:cc:
28:a8:33:54:9d:96:42:8e:4a:9b:61:30:91:e9:7f:fc:27:38:
e2:c6:0c:98:d3:31:c0:a1:b5:1e:b8:c2:fa:7d:01:7d:fc:8f:
4d:60:ac:2e:dc:7e:d3:27:e3:95:5b:9c:ba:12:fb:43:f8:88:
68:0d:e5:29:be:02:0b:da:01:64:38:73:3b:2c:47:fe:f8:40:
35:7a:aa:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:55:08 2026 by rpki-client