Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A6E21027C3A11F1812D4AC5CE1D38B0.roa
File: 6A6E21027C3A11F1812D4AC5CE1D38B0.roa (raw, json)
Hash identifier: hQMCQiz2F9b8P3t8nOmF74MISGv/TdSmvnP4/0YfDK0=
Subject key identifier: 83:C9:B4:81:5D:CD:54:88:06:98:46:3D:77:05:23:2F:88:ED:77:66
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D7E3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A6E21027C3A11F1812D4AC5CE1D38B0.roa
Signing time: Fri 10 Jul 2026 08:36:16 +0000
ROA not before: Fri 10 Jul 2026 08:36:12 +0000
ROA not after: Mon 17 Aug 2026 08:36:12 +0000
asID: 54801
IP address blocks: 154.81.136.0/24 maxlen: 24
154.81.140.0/24 maxlen: 24
154.81.164.0/24 maxlen: 24
154.81.166.0/24 maxlen: 24
154.81.178.0/24 maxlen: 24
154.81.181.0/24 maxlen: 24
154.81.191.0/24 maxlen: 24
154.82.18.0/24 maxlen: 24
154.82.20.0/24 maxlen: 24
154.83.128.0/24 maxlen: 24
154.83.135.0/24 maxlen: 24
154.83.137.0/24 maxlen: 24
154.83.141.0/24 maxlen: 24
154.83.158.0/24 maxlen: 24
154.83.187.0/24 maxlen: 24
154.83.190.0/24 maxlen: 24
154.83.191.0/24 maxlen: 24
154.83.209.0/24 maxlen: 24
154.83.211.0/24 maxlen: 24
154.83.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120803 (0x1d7e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 10 08:36:12 2026 GMT
Not After : Aug 17 08:36:12 2026 GMT
Subject: CN=6a50af00-91bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:97:cb:e8:3c:bb:29:49:29:e9:17:99:f4:f7:
2e:ce:91:e9:37:d5:33:0a:a4:00:36:82:a3:ce:ad:
ba:e9:06:42:a3:cd:5a:4b:66:15:11:a7:02:c5:ae:
c7:e0:17:af:5d:32:90:32:ff:59:23:d3:cb:fc:2b:
99:e6:52:30:60:29:8e:85:b8:da:4c:a1:28:eb:7d:
4d:6a:e4:99:32:52:95:4e:cd:09:71:1c:e1:55:d9:
80:2c:c6:56:92:bd:21:3a:e0:1e:d6:fb:f1:be:34:
1d:e7:c9:8c:c3:68:0a:3c:bf:35:a0:55:1f:f8:f2:
0f:77:20:d1:f2:e2:b0:41:cc:db:5d:64:d8:8d:49:
61:fc:72:5c:26:c5:08:c7:ee:70:3c:73:81:b8:c3:
2a:a5:9f:b2:76:7f:67:36:ef:66:d1:33:3b:33:ad:
51:46:8b:72:3d:cd:60:59:4c:ac:60:8d:3b:61:2f:
22:68:13:8e:2a:43:78:46:dd:fa:85:32:81:39:97:
af:e4:f8:2d:d6:36:fa:07:9b:f9:08:35:9e:b3:a6:
0c:28:01:04:35:9c:eb:3a:85:2a:82:9c:18:f7:06:
72:96:ef:e1:03:b9:65:6e:83:19:07:54:5b:be:62:
cb:2a:0a:8e:08:d9:ca:5d:c3:d4:7d:67:84:89:bf:
44:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C9:B4:81:5D:CD:54:88:06:98:46:3D:77:05:23:2F:88:ED:77:66
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6A6E21027C3A11F1812D4AC5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.136.0/24
154.81.140.0/24
154.81.164.0/24
154.81.166.0/24
154.81.178.0/24
154.81.181.0/24
154.81.191.0/24
154.82.18.0/24
154.82.20.0/24
154.83.128.0/24
154.83.135.0/24
154.83.137.0/24
154.83.141.0/24
154.83.158.0/24
154.83.187.0/24
154.83.190.0/23
154.83.209.0/24
154.83.211.0/24
154.83.247.0/24
Signature Algorithm: sha256WithRSAEncryption
71:20:79:47:d9:9c:f6:9b:e5:44:9e:ae:22:f0:62:d0:e8:68:
bb:1e:16:93:fd:6b:40:cd:33:30:7c:a1:31:10:17:8e:f5:21:
9d:06:98:dc:4e:01:12:41:7b:47:0d:99:32:68:39:1f:4f:bc:
a6:f1:6d:cc:7f:d8:ce:a0:32:3d:cc:79:eb:19:78:65:2f:c1:
85:97:53:19:91:e1:d9:33:46:36:bf:68:45:e8:52:ef:50:37:
d9:3e:1b:81:2f:32:f1:47:26:60:6a:ec:f7:8c:11:6f:18:94:
7e:db:9e:8d:4b:5a:52:3a:7d:b5:e0:ba:33:b2:4d:e0:6f:2a:
46:45:60:82:8e:bf:fc:31:70:ea:a3:7d:1f:b6:6d:aa:99:a1:
31:59:12:62:46:0f:73:3b:a3:66:a4:39:f1:c8:ca:c3:9f:cc:
9c:13:d7:16:e9:15:42:d0:06:ec:38:38:fd:20:2b:f1:c5:0e:
12:36:fb:46:b0:36:c0:76:67:e7:47:71:6a:42:d4:7d:25:3c:
0f:6e:09:3f:69:10:bd:45:26:56:69:03:4a:d3:4c:05:56:4d:
f4:87:a2:32:6c:a4:92:4e:31:30:e1:de:08:cd:fa:6a:1e:5a:
17:f0:b9:35:1b:dd:d6:2b:c1:9c:71:39:0f:0e:28:e1:f5:83:
05:2e:45:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:17:38 2026 by rpki-client