Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EF0B9C64CFD11F1B8FA4C0DCF1D38B0.roa
File: 7EF0B9C64CFD11F1B8FA4C0DCF1D38B0.roa (raw, json)
Hash identifier: nSyRZrzTMTumNoG/nWdHXjQw7dAzLFU7z94PLBLM7kI=
Subject key identifier: 98:69:E0:04:44:63:53:BA:6A:E8:A6:7B:DE:4B:42:09:23:40:6C:3E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CAE8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EF0B9C64CFD11F1B8FA4C0DCF1D38B0.roa
Signing time: Mon 11 May 2026 05:51:47 +0000
ROA not before: Mon 11 May 2026 05:51:41 +0000
ROA not after: Tue 09 Jun 2026 05:51:41 +0000
asID: 151347
IP address blocks: 154.84.211.0/24 maxlen: 24
154.84.212.0/24 maxlen: 24
154.84.213.0/24 maxlen: 24
154.84.214.0/24 maxlen: 24
154.84.215.0/24 maxlen: 24
154.84.216.0/24 maxlen: 24
154.84.217.0/24 maxlen: 24
154.84.218.0/24 maxlen: 24
154.84.219.0/24 maxlen: 24
154.84.220.0/24 maxlen: 24
154.84.221.0/24 maxlen: 24
154.84.222.0/24 maxlen: 24
154.84.224.0/24 maxlen: 24
154.84.225.0/24 maxlen: 24
154.84.226.0/24 maxlen: 24
154.84.227.0/24 maxlen: 24
154.84.228.0/24 maxlen: 24
154.84.229.0/24 maxlen: 24
154.84.230.0/24 maxlen: 24
154.84.231.0/24 maxlen: 24
154.84.234.0/24 maxlen: 24
154.84.235.0/24 maxlen: 24
154.84.236.0/24 maxlen: 24
154.84.238.0/24 maxlen: 24
154.84.240.0/24 maxlen: 24
154.84.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 15 May 2026 00:07:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117480 (0x1cae8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 11 05:51:41 2026 GMT
Not After : Jun 9 05:51:41 2026 GMT
Subject: CN=6a016e73-66e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ab:ca:92:97:c2:1c:91:cb:5e:47:1f:a8:22:
99:60:52:fa:49:0f:59:97:71:02:0c:8e:4c:1e:ea:
b4:16:30:ec:da:f2:30:37:54:0e:30:95:0c:c5:91:
39:a0:55:09:4a:fc:37:d6:74:b4:70:ae:95:b8:23:
ed:cd:9f:ab:c8:55:4a:01:f3:ba:82:39:f5:09:fa:
09:d0:87:cf:2a:d6:e0:c9:86:9a:7b:48:10:f2:14:
04:f5:1a:45:db:f9:63:17:9a:ed:07:65:df:3f:39:
03:7b:0e:65:e8:f5:e2:cc:10:41:51:f9:76:c3:97:
3e:d1:33:3b:a2:02:20:85:4f:5e:cf:8e:de:23:7f:
40:70:23:41:4c:7d:19:f6:45:6a:7d:3f:5c:d3:71:
10:b2:6f:9e:dd:da:d9:5c:de:db:73:f6:cb:33:2f:
66:8e:c1:3b:37:6b:f1:2c:6d:ea:72:36:ef:e9:2b:
5e:c9:3f:10:7f:93:47:68:ae:db:71:7b:b7:e9:01:
c6:63:83:2b:66:40:f4:a8:0c:9d:49:95:d1:9e:c2:
81:7b:94:90:41:74:f0:54:9e:c3:8e:83:c7:06:de:
aa:d6:03:78:a6:e8:b5:3b:f8:f3:47:ed:b0:90:84:
32:0d:33:85:48:ea:6b:0e:91:c4:3e:55:5b:78:85:
0b:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:69:E0:04:44:63:53:BA:6A:E8:A6:7B:DE:4B:42:09:23:40:6C:3E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EF0B9C64CFD11F1B8FA4C0DCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.211.0-154.84.222.255
154.84.224.0/21
154.84.234.0-154.84.236.255
154.84.238.0/24
154.84.240.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:f8:7e:4b:b6:30:04:70:be:aa:b7:96:04:fb:92:a3:ea:38:
46:41:35:e1:7a:5f:ec:f2:19:42:d1:ce:e4:80:aa:89:7d:0e:
e7:f6:ac:95:25:d6:e7:8a:ed:b2:04:33:d3:29:2a:d8:11:18:
20:0e:ee:95:6e:d2:8b:37:29:3c:20:b5:86:74:37:4e:41:03:
c0:28:d1:6e:49:4f:23:81:64:f6:f0:84:0a:3f:4c:a5:c9:e5:
4e:5e:b9:f0:a8:f4:d6:ed:b4:f5:d0:33:5b:34:fa:5e:37:c4:
03:c9:f3:07:52:f9:a7:15:e0:4d:e9:20:03:bb:c4:a7:58:8e:
80:1a:bb:de:61:06:4e:1f:85:7e:40:e7:dd:91:a8:e5:47:90:
d8:99:24:2d:c2:db:98:07:40:7e:7f:22:fa:41:ab:aa:7c:ed:
85:f6:b0:4c:8a:f9:42:d1:5e:55:dd:b7:60:85:f8:26:37:74:
dd:c4:5f:88:ff:73:41:4f:4b:38:a7:22:cd:ba:ba:5b:db:6e:
e6:f6:21:8e:6d:1e:0a:00:d9:7f:93:f3:98:a0:e5:9c:fa:bd:
98:2c:f1:4f:8f:6f:e4:03:e1:ec:f3:e2:f2:6e:fa:f7:aa:fa:
5c:b5:5b:3f:d5:93:e2:05:23:9e:99:fb:ec:be:0a:dd:1f:3f:
52:3c:33:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:12:58 2026 by rpki-client