Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/337B8D8C81B811F19B31B7F7CE1D38B0.roa
File: 337B8D8C81B811F19B31B7F7CE1D38B0.roa (raw, json)
Hash identifier: 2mGZWaWg5JgVT9/ZuPxrDoCWG+0b0BEjm/c+4Zbvm7o=
Subject key identifier: 89:5F:D5:79:E7:DD:29:A2:29:C3:7E:00:F4:CD:27:EE:26:1D:2F:CE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D957
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/337B8D8C81B811F19B31B7F7CE1D38B0.roa
Signing time: Fri 17 Jul 2026 08:19:17 +0000
ROA not before: Fri 17 Jul 2026 08:19:13 +0000
ROA not after: Wed 19 Aug 2026 08:19:13 +0000
asID: 11404
IP address blocks: 154.193.112.0/20 maxlen: 24
154.196.192.0/20 maxlen: 24
154.199.80.0/20 maxlen: 24
154.200.112.0/20 maxlen: 24
154.205.48.0/20 maxlen: 24
154.206.32.0/20 maxlen: 24
154.211.192.0/20 maxlen: 24
154.214.16.0/20 maxlen: 24
154.215.16.0/20 maxlen: 24
154.216.16.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121175 (0x1d957)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 17 08:19:13 2026 GMT
Not After : Aug 19 08:19:13 2026 GMT
Subject: CN=6a59e584-2e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fa:56:6d:e9:29:28:e8:e1:e0:53:8c:00:93:
b8:7c:2f:87:95:b8:2a:87:a8:ec:55:93:f3:9d:6a:
63:74:b6:5d:b0:50:72:5e:0c:26:1b:36:61:95:4a:
6e:97:84:b8:c0:e0:95:dd:14:67:a2:5c:26:62:5e:
3a:13:d2:29:38:44:c3:70:bb:04:46:cf:0e:c7:ea:
1a:4b:66:84:32:70:44:59:61:ff:58:c1:d4:be:dc:
e5:38:ad:1c:f9:32:f7:3f:23:43:23:e1:e9:a5:84:
b1:1d:56:c7:b1:48:54:39:2e:5d:75:d6:b9:4a:92:
ac:70:61:9f:98:5d:fe:4e:39:40:90:56:96:ff:01:
51:e2:ad:d1:ed:e0:40:ca:21:60:e7:5f:f1:40:45:
68:a8:74:85:29:71:3f:cd:c8:1c:b2:cd:89:72:58:
b7:58:bc:4f:62:cd:7d:c0:c3:36:54:b4:27:94:55:
18:2d:f3:d4:8b:56:2b:48:46:d7:5e:ae:7f:4b:04:
28:3f:b6:5e:c0:17:50:70:16:0b:7a:bb:e8:8b:19:
96:04:7f:ad:ff:e7:fa:e4:db:92:b2:b0:40:4f:54:
78:5d:67:50:77:a6:ca:7b:cb:80:43:36:96:5e:fb:
08:97:ec:77:7f:f1:a7:95:c9:bc:5c:ee:a2:34:2f:
77:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5F:D5:79:E7:DD:29:A2:29:C3:7E:00:F4:CD:27:EE:26:1D:2F:CE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/337B8D8C81B811F19B31B7F7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.112.0/20
154.196.192.0/20
154.199.80.0/20
154.200.112.0/20
154.205.48.0/20
154.206.32.0/20
154.211.192.0/20
154.214.16.0/20
154.215.16.0/20
154.216.16.0/20
Signature Algorithm: sha256WithRSAEncryption
82:0c:40:2b:17:c7:80:33:ab:ea:59:6f:7f:fc:f4:23:22:7a:
a1:3a:21:3d:31:4f:04:f6:5a:79:fc:85:9c:47:bb:a5:95:f2:
62:80:fc:d4:7b:d7:da:27:61:e4:cc:93:a0:f2:9f:a9:e4:73:
29:81:7f:21:8e:2d:c3:ab:32:7f:44:42:c1:bb:76:39:82:1b:
da:d4:34:13:e2:94:d4:2c:57:7b:34:6f:fd:df:07:96:52:de:
c7:38:38:0e:79:37:9b:d3:e7:59:ac:be:63:82:ff:e8:2c:79:
00:9e:da:09:a3:0c:44:59:04:36:c5:05:98:67:2b:b4:e3:6b:
d4:f8:ec:5b:74:eb:9a:f5:da:c3:dc:15:d1:c4:0f:af:bc:c7:
83:09:55:c5:73:cf:2f:72:c0:6a:de:ca:ab:f5:f2:44:cf:34:
7c:39:da:20:7d:28:0e:c4:af:5a:6b:39:dc:87:a5:e7:6c:2e:
74:e0:11:ca:11:ec:7e:4e:7e:4e:90:6f:69:ba:02:77:9a:1e:
50:6b:3f:4d:55:b0:ec:21:a0:f2:48:7b:a5:c3:ac:66:5e:c1:
91:eb:76:a0:e0:89:c0:06:2e:86:90:1e:44:b7:df:77:aa:58:
01:df:0e:b2:68:dd:e2:c8:3a:aa:45:5b:68:7e:74:29:9b:1b:
1f:00:24:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:38:07 2026 by rpki-client