Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/449B99C4843111F1908232FDCE1D38B0.roa
File: 449B99C4843111F1908232FDCE1D38B0.roa (raw, json)
Hash identifier: f6E5z8fQRnsABr8DOxdGsrDDxARV0MkWyI/bVtCMX/M=
Subject key identifier: A0:28:47:4D:38:16:18:E5:10:1B:F3:B1:5D:26:6B:B5:8E:D0:66:A4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DA1E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/449B99C4843111F1908232FDCE1D38B0.roa
Signing time: Mon 20 Jul 2026 11:50:57 +0000
ROA not before: Mon 20 Jul 2026 11:50:53 +0000
ROA not after: Wed 28 Jul 2027 11:50:53 +0000
asID: 151196
IP address blocks: 154.204.47.0/24 maxlen: 24
154.204.50.0/24 maxlen: 24
154.204.53.0/24 maxlen: 24
154.204.54.0/24 maxlen: 24
154.204.62.0/24 maxlen: 24
154.212.160.0/24 maxlen: 24
154.212.162.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121374 (0x1da1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 20 11:50:53 2026 GMT
Not After : Jul 28 11:50:53 2027 GMT
Subject: CN=6a5e0ba1-1582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:22:1c:1f:a7:ea:77:28:db:47:d3:e0:21:6d:
5f:52:84:75:7f:c2:93:6f:40:2d:1b:44:3f:be:3b:
b6:4f:e3:36:b4:45:d9:bb:c7:92:36:a4:0d:31:96:
6f:f7:ce:33:9f:dd:18:fa:35:e0:88:bb:c8:3c:2d:
3a:e5:3b:6a:f1:a3:6f:d5:82:31:98:3a:81:6e:85:
96:fb:98:1f:da:06:0e:9c:09:cc:e9:85:ec:d3:98:
84:ce:50:e1:67:2d:60:72:34:6c:4b:f6:89:c4:71:
91:44:97:8e:2f:89:fa:a2:ee:76:78:dc:d5:97:71:
a8:82:04:0f:9f:99:42:b2:df:ca:e0:e1:6e:ca:68:
62:2a:e3:e6:9d:53:7f:18:0b:95:90:1b:c4:c6:7e:
41:55:b9:89:e0:c8:fc:20:41:b9:3c:ec:f3:23:88:
ea:84:3a:00:6d:19:95:d5:83:85:d4:35:9f:d8:5a:
6d:c1:a8:91:b7:49:35:02:88:ec:b1:0e:02:22:c9:
73:57:39:1d:01:5d:d2:bb:f9:ab:07:1a:4e:3d:c9:
39:ae:71:6e:2a:f8:e0:9d:8b:67:4c:5b:e3:52:7c:
c6:fa:e1:38:69:61:6a:95:f2:f4:f0:34:ed:84:3f:
14:1d:87:ce:65:f5:05:c6:f2:df:9e:6c:56:98:13:
c0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:28:47:4D:38:16:18:E5:10:1B:F3:B1:5D:26:6B:B5:8E:D0:66:A4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/449B99C4843111F1908232FDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.47.0/24
154.204.50.0/24
154.204.53.0-154.204.54.255
154.204.62.0/24
154.212.160.0/24
154.212.162.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:87:68:1d:08:13:20:ec:43:b2:87:55:51:c7:e3:74:d9:f6:
78:f3:e3:bb:4a:be:79:2d:05:4d:20:3d:a5:e0:df:80:db:d7:
a3:a0:95:e0:b8:56:b8:f8:e2:e5:e7:b9:9f:0a:d0:a1:2e:0c:
73:3c:82:29:a9:03:eb:f0:b2:04:22:73:02:80:ea:c1:69:e8:
29:32:1e:bf:59:f9:34:81:85:5d:e8:74:31:00:1c:cb:48:eb:
f7:d9:02:30:bc:c2:c5:df:54:d2:38:0f:41:4c:5f:95:0e:b6:
18:2a:b4:78:92:c0:16:4d:49:73:ee:7d:6d:20:a2:fc:96:1d:
3c:e0:bd:16:4b:fe:f0:e9:9b:61:df:4a:6d:0d:fb:b8:7e:93:
e4:4a:02:15:b5:34:50:af:63:f9:ea:07:a0:cd:34:66:ba:51:
81:75:d8:1b:83:69:0d:a1:27:31:bc:45:eb:73:86:fd:e3:23:
3d:d9:35:d9:43:82:bb:9b:18:bb:9e:56:62:48:bf:6a:5a:b0:
9f:b0:04:38:1b:c0:e5:68:bf:30:f5:ab:e8:37:9c:a5:bb:83:
bb:c8:a9:8a:03:5b:9b:26:45:15:46:64:32:c8:51:66:5c:da:
39:e5:5a:bf:56:14:2d:53:fd:be:92:bb:7a:a9:f6:30:ce:4b:
99:77:7d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:30:52 2026 by rpki-client