Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FF4D044843411F1ACE02112CF1D38B0.roa
File: 4FF4D044843411F1ACE02112CF1D38B0.roa (raw, json)
Hash identifier: RINXTAsqGMn3wyhqnlEebuHp9RElvudscUq1DffkvjY=
Subject key identifier: 5E:FA:62:7B:53:D0:10:8A:20:B6:62:B7:31:2D:E1:99:81:DE:61:8F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DA28
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FF4D044843411F1ACE02112CF1D38B0.roa
Signing time: Mon 20 Jul 2026 12:12:44 +0000
ROA not before: Mon 20 Jul 2026 12:12:40 +0000
ROA not after: Thu 27 Aug 2026 12:12:40 +0000
asID: 63139
IP address blocks: 154.94.92.0/24 maxlen: 24
154.94.93.0/24 maxlen: 24
154.94.94.0/24 maxlen: 24
154.94.95.0/24 maxlen: 24
154.94.96.0/24 maxlen: 24
154.94.97.0/24 maxlen: 24
154.94.98.0/24 maxlen: 24
154.94.99.0/24 maxlen: 24
154.94.100.0/24 maxlen: 24
154.94.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121384 (0x1da28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 20 12:12:40 2026 GMT
Not After : Aug 27 12:12:40 2026 GMT
Subject: CN=6a5e10bc-051f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:39:dd:d4:ce:24:7c:12:85:14:4f:d7:75:e4:
2f:df:f3:65:9f:ab:53:b8:86:a2:58:f7:64:96:a1:
d1:f5:b2:48:89:66:81:bb:88:5a:99:06:e3:88:64:
0b:71:27:54:0e:89:3c:24:53:55:45:dd:6c:e1:de:
6c:33:62:dc:0c:9c:9c:15:75:60:42:7e:b2:14:1e:
4c:1c:c4:31:24:a3:65:8d:0b:09:ce:34:6b:a5:3d:
eb:d5:38:57:61:b9:44:8a:88:64:5d:a2:cb:86:6a:
f6:e5:16:4f:69:d1:f4:92:39:a9:9b:13:44:52:8f:
1a:22:4e:66:dd:18:f1:24:87:5d:71:3d:fb:c9:1f:
a6:7b:1e:73:e9:50:e2:d2:0b:6c:8f:85:fa:8c:5b:
7b:09:52:5d:02:72:60:7b:fc:4d:3d:3c:92:6a:03:
21:af:51:fd:da:06:e2:0a:86:f6:25:5a:9f:67:9a:
2d:6b:1f:55:ae:24:60:4c:57:c8:f9:6b:aa:55:f7:
14:54:7b:24:30:f7:29:56:12:bc:58:05:a5:c0:6f:
08:b3:c6:28:d2:92:14:b4:6c:d5:df:9d:04:28:47:
f0:db:53:25:9f:91:9c:b6:dd:68:09:b2:22:57:81:
bd:44:27:61:d9:35:27:4e:b1:06:aa:7b:60:f6:3d:
3b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:FA:62:7B:53:D0:10:8A:20:B6:62:B7:31:2D:E1:99:81:DE:61:8F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4FF4D044843411F1ACE02112CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.92.0-154.94.101.255
Signature Algorithm: sha256WithRSAEncryption
c0:89:ef:21:d1:ca:f5:bf:d5:7c:d5:32:90:b3:1d:7f:5d:c0:
14:15:d7:5d:33:be:ae:51:54:e0:80:a6:55:34:5d:a6:40:d0:
67:b8:59:5e:86:a6:90:5b:77:cb:39:62:f2:e2:34:2d:cc:4f:
f8:75:2f:91:f0:ae:39:1b:0c:ff:86:b6:ef:c2:67:bd:54:1b:
4b:9d:99:c4:51:b5:38:1e:e7:e6:79:fd:fc:7e:7a:60:c6:c3:
60:41:ff:f2:5c:41:27:c6:90:58:c4:8b:3c:09:80:16:3b:3d:
09:f0:99:ae:55:e2:54:da:bc:df:ba:f4:7a:47:ae:64:84:53:
b6:ca:30:8b:8e:26:bb:ba:ae:2f:f7:4a:33:02:60:03:2a:50:
00:73:ab:29:2b:16:4c:8c:4d:9c:85:89:88:41:b7:9b:5e:9b:
89:f6:91:48:cc:b6:a4:5a:5f:3a:af:ab:25:7e:ef:ab:49:e8:
aa:45:12:de:fa:03:f5:db:32:c6:96:c9:46:30:9c:fc:23:ca:
6d:f1:46:6a:e9:84:23:af:9f:89:6a:16:7b:0f:f8:82:4a:67:
36:25:e1:7d:9f:40:79:5f:97:63:ea:60:b5:42:d9:20:28:77:
ce:b6:48:21:1f:9d:ba:ef:4f:73:50:01:fb:a0:b6:04:a0:17:
13:4a:a2:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:49:44 2026 by rpki-client