Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/801E4C92842E11F18E806FF0CE1D38B0.roa
File: 801E4C92842E11F18E806FF0CE1D38B0.roa (raw, json)
Hash identifier: gVYhNNEFhBzpyyAA6g+xHtXJRkijYxmU0StTjufdcVk=
Subject key identifier: 96:90:96:A7:E5:D3:B0:B8:4A:1A:8B:41:95:53:E7:BF:24:A0:CA:D2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DA13
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/801E4C92842E11F18E806FF0CE1D38B0.roa
Signing time: Mon 20 Jul 2026 11:31:08 +0000
ROA not before: Mon 20 Jul 2026 11:31:04 +0000
ROA not after: Thu 27 Aug 2026 11:31:04 +0000
asID: 154177
IP address blocks: 154.205.151.0/24 maxlen: 24
154.205.152.0/24 maxlen: 24
154.205.153.0/24 maxlen: 24
154.205.154.0/24 maxlen: 24
154.205.156.0/24 maxlen: 24
154.205.158.0/24 maxlen: 24
154.205.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121363 (0x1da13)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 20 11:31:04 2026 GMT
Not After : Aug 27 11:31:04 2026 GMT
Subject: CN=6a5e06fc-8f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:c5:52:92:02:96:f0:41:74:47:9a:30:da:a8:
6f:d5:45:e4:4f:b8:46:2e:86:72:91:c4:78:b1:40:
e7:80:ce:fa:1d:f7:a4:d4:f3:42:4c:f3:54:3a:53:
18:60:df:dc:b9:f8:a7:9d:67:b6:30:fc:7c:85:61:
7f:2d:7b:86:4e:ec:00:8b:cc:60:6d:fa:85:4c:8c:
1b:66:9f:31:0d:4e:52:a6:2c:27:4a:20:06:e0:5f:
3c:bf:3e:b2:62:a0:1b:fe:25:7a:44:8b:2a:60:ff:
d5:49:d8:94:2f:7e:ec:10:d0:6a:26:d5:f5:c2:40:
30:8f:f5:c9:f9:28:d1:30:c9:0b:03:14:e0:b2:15:
52:35:a8:b6:71:c7:07:e2:03:92:f6:ed:fc:6b:e1:
30:ad:06:b9:46:dd:62:e8:4c:e8:07:a0:f2:11:06:
ae:27:50:49:11:5c:27:c1:d7:cd:43:c8:f9:cf:e5:
12:fc:f2:29:7f:6c:e8:e5:3d:1d:a3:28:29:1f:fa:
ab:0f:1e:39:8e:05:d6:99:4d:b4:1f:70:85:81:5d:
0f:54:c5:70:6d:d0:e7:b1:54:e6:33:44:f5:f6:54:
71:01:4b:a5:27:ff:8b:55:a8:fd:a4:69:ec:32:7d:
07:8d:e5:fb:d8:66:a3:fe:df:3e:68:b1:58:ee:2d:
16:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:90:96:A7:E5:D3:B0:B8:4A:1A:8B:41:95:53:E7:BF:24:A0:CA:D2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/801E4C92842E11F18E806FF0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.151.0-154.205.154.255
154.205.156.0/24
154.205.158.0/23
Signature Algorithm: sha256WithRSAEncryption
56:93:dd:12:27:4d:f8:97:d2:8d:27:81:6a:5f:87:69:3a:8b:
13:bd:24:4e:1b:97:3d:24:3d:b6:dc:28:8a:2b:5b:26:4f:d4:
fe:8d:27:f5:74:f1:48:8c:9c:c9:32:d5:a5:4f:e9:23:6e:f7:
48:c3:5d:eb:6b:d6:85:af:35:12:2f:cc:41:19:4f:e7:46:ae:
b7:ca:3e:a0:23:86:6c:e1:f1:f4:27:ed:ab:0b:b7:5a:d2:f9:
a4:ea:a3:38:a2:93:66:5c:7b:f1:2d:05:d0:94:3c:ef:ba:60:
aa:db:77:18:95:b4:ec:a7:05:5b:b2:22:13:ef:cd:ab:a3:10:
40:bd:45:d9:bb:4f:86:dc:ba:3f:0c:c1:2c:da:f3:ca:39:24:
29:c5:b3:67:db:b7:e9:e0:ab:8c:ad:1e:1e:c9:f3:f0:55:51:
54:7a:86:71:0d:8d:14:50:6f:e9:22:25:2e:80:86:11:ab:48:
32:30:d9:8d:3e:7d:a8:90:75:ee:4b:d2:6b:2f:fe:34:79:d8:
06:9f:93:df:88:95:17:2b:c3:99:c4:be:7b:8a:ab:c7:2e:db:
62:35:8b:5c:96:e5:b1:af:ff:6f:da:00:17:32:75:42:3b:66:
e7:a6:e3:4b:1f:be:dd:77:5a:5b:97:91:fc:96:d8:9f:29:29:
d4:20:7e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:43:34 2026 by rpki-client