Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54C4BCC2778911F1B2C9F407CF1D38B0.roa
File: 54C4BCC2778911F1B2C9F407CF1D38B0.roa (raw, json)
Hash identifier: zMsKpsemgZA22QmO+wsEKNvxZIQ11P+bv481SydLbZw=
Subject key identifier: E4:AC:A7:C1:45:EF:4E:B1:EF:DD:99:DC:E9:00:0A:35:33:D1:2F:EB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D6ED
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54C4BCC2778911F1B2C9F407CF1D38B0.roa
Signing time: Sat 04 Jul 2026 09:18:34 +0000
ROA not before: Sat 04 Jul 2026 09:18:28 +0000
ROA not after: Thu 06 Aug 2026 09:18:28 +0000
asID: 45194
IP address blocks: 154.84.223.0/24 maxlen: 24
154.84.232.0/24 maxlen: 24
154.84.233.0/24 maxlen: 24
154.84.239.0/24 maxlen: 24
154.84.242.0/24 maxlen: 24
154.84.244.0/24 maxlen: 24
154.84.245.0/24 maxlen: 24
154.84.246.0/24 maxlen: 24
154.84.247.0/24 maxlen: 24
154.84.248.0/24 maxlen: 24
154.84.249.0/24 maxlen: 24
154.84.251.0/24 maxlen: 24
154.84.252.0/24 maxlen: 24
154.84.253.0/24 maxlen: 24
154.84.254.0/24 maxlen: 24
154.84.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120557 (0x1d6ed)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 4 09:18:28 2026 GMT
Not After : Aug 6 09:18:28 2026 GMT
Subject: CN=6a48cfea-2aa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:57:0a:01:c7:dc:38:59:ac:06:cb:4e:05:85:
24:54:11:3c:e0:8b:51:a1:8c:b6:88:fa:38:f3:59:
4e:91:40:06:51:c3:1d:d0:3a:4a:ed:b9:81:d5:be:
13:35:31:4a:6d:1b:1e:86:20:71:a2:f9:0a:1b:31:
bd:da:07:f1:4d:dc:8d:9d:12:f1:62:fa:70:33:ab:
10:cc:4e:a1:5d:bb:67:54:f3:79:36:b6:ce:fb:66:
87:32:a1:6f:e2:fa:72:01:02:3a:36:79:8c:f2:c8:
1f:23:95:d3:65:0d:26:cf:64:ab:bb:1d:05:9d:c6:
8b:df:1f:cd:61:3a:05:14:a4:bf:fb:8f:c5:01:0d:
c6:85:c1:4a:e4:26:36:94:62:b0:aa:04:a9:a0:36:
9e:04:1c:3f:67:b0:17:86:4d:fb:5d:ad:3d:d3:8c:
82:e5:07:ce:4e:fd:1e:6e:1b:57:0e:48:23:d7:bb:
69:5e:32:5a:a2:2c:d2:61:02:09:2f:5f:0b:9f:0a:
cf:65:77:14:48:ad:c6:d2:d7:a9:c8:73:1c:ed:14:
33:b1:74:06:ea:53:c9:7c:38:db:52:8c:ae:0f:92:
5f:b3:a6:ec:c8:17:50:34:17:6d:93:66:f5:9e:4c:
30:ed:25:d6:e2:7c:2e:32:d8:70:37:84:b6:dd:1c:
22:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:AC:A7:C1:45:EF:4E:B1:EF:DD:99:DC:E9:00:0A:35:33:D1:2F:EB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/54C4BCC2778911F1B2C9F407CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.223.0/24
154.84.232.0/23
154.84.239.0/24
154.84.242.0/24
154.84.244.0-154.84.249.255
154.84.251.0-154.84.255.255
Signature Algorithm: sha256WithRSAEncryption
52:18:01:75:25:34:bb:11:ae:a7:ec:4f:e6:82:09:91:d7:f0:
8b:56:8e:fb:29:b8:ee:ed:39:ac:c9:c2:6d:2d:4a:6f:00:cf:
c5:52:16:10:11:b0:c9:ae:6d:6e:2e:fc:f5:2f:0c:b3:e5:92:
f3:6e:e1:14:3a:23:f5:e5:44:a3:71:39:37:bf:92:91:e8:5c:
14:2a:91:28:4d:ed:34:02:fc:c5:4d:7f:87:49:d7:92:4b:37:
41:c3:91:2a:63:87:e5:60:3d:6d:2d:2e:d3:cb:2d:7a:0a:b8:
f2:73:25:71:bd:45:55:0e:a9:f1:91:ee:a3:23:bf:ab:36:6b:
74:80:92:e4:1a:cc:e8:95:2d:9e:0b:4d:45:22:02:f1:54:6d:
71:98:b4:bd:72:2c:ed:f4:88:06:e2:bc:eb:65:5e:85:b6:74:
82:da:f0:fd:52:13:1b:96:87:49:83:89:e7:4c:15:2a:5c:ec:
d4:ca:4a:67:93:e4:46:0d:57:c9:21:93:90:d8:ba:cc:c9:e3:
80:87:db:2f:d8:36:49:6a:e4:b9:01:19:4e:74:4a:f6:8f:5f:
e4:a5:77:fa:3e:d3:01:cc:3b:e4:70:56:d8:99:68:fb:bc:89:
2a:bc:08:56:4e:f0:59:68:60:5e:f1:a2:ce:e8:48:f1:8f:82:
1b:b6:ef:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:21:07 2026 by rpki-client