Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83C96B2E7F5111F1963B0F12CF1D38B0.roa
File: 83C96B2E7F5111F1963B0F12CF1D38B0.roa (raw, json)
Hash identifier: SxS7nHP1b/QCau557R7pjPdFttAY1P77WN4P2eCAdwI=
Subject key identifier: 06:92:DA:41:D1:98:C7:78:D6:85:B6:46:B1:15:55:E0:5B:14:31:38
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D8BA
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83C96B2E7F5111F1963B0F12CF1D38B0.roa
Signing time: Tue 14 Jul 2026 06:59:11 +0000
ROA not before: Tue 14 Jul 2026 06:59:06 +0000
ROA not after: Sun 16 Aug 2026 06:59:06 +0000
asID: 22773
IP address blocks: 154.85.112.0/24 maxlen: 24
154.85.113.0/24 maxlen: 24
154.85.114.0/24 maxlen: 24
154.85.115.0/24 maxlen: 24
154.85.116.0/24 maxlen: 24
154.85.117.0/24 maxlen: 24
154.85.118.0/24 maxlen: 24
154.85.119.0/24 maxlen: 24
154.90.2.0/24 maxlen: 24
154.90.3.0/24 maxlen: 24
154.90.4.0/24 maxlen: 24
154.90.5.0/24 maxlen: 24
154.90.6.0/24 maxlen: 24
154.90.7.0/24 maxlen: 24
154.90.8.0/24 maxlen: 24
154.90.9.0/24 maxlen: 24
154.90.10.0/24 maxlen: 24
154.90.11.0/24 maxlen: 24
154.90.12.0/24 maxlen: 24
154.90.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 08:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121018 (0x1d8ba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 14 06:59:06 2026 GMT
Not After : Aug 16 06:59:06 2026 GMT
Subject: CN=6a55de3f-cb10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d0:e6:2e:2e:3f:ee:6c:2c:8a:85:5e:f2:71:
57:dd:fb:28:c7:10:c1:fe:d5:4b:26:f4:2c:30:5d:
52:4f:84:7a:42:57:15:a4:1b:31:03:1d:a0:fc:48:
8c:1f:2a:ca:98:5e:fb:69:ed:f4:fb:a2:83:3f:b5:
e2:9d:fa:30:75:7f:b3:37:7a:5b:d5:2d:70:0a:50:
1b:bf:ad:66:2f:ba:22:93:53:61:87:00:77:e9:12:
ae:3d:11:3f:2f:99:da:6c:dd:7a:76:62:03:a7:15:
05:a6:66:98:10:d6:4c:92:8c:2a:43:75:15:b6:59:
23:5a:f6:b8:29:0a:16:94:90:c6:57:b1:03:3a:0d:
1a:16:f4:e0:d0:9d:2f:37:88:55:58:92:91:d0:a8:
74:55:3a:c3:ad:73:6d:c1:20:06:6b:98:9d:2b:38:
c9:8f:84:4c:fc:c4:a1:4a:6c:8d:7c:8a:d6:91:1d:
3a:d7:3e:c5:6a:3f:12:a7:06:34:d1:b5:c3:03:ce:
aa:d7:32:f0:90:2e:25:10:38:4f:20:38:8e:f9:21:
4e:66:f8:79:15:51:32:c3:ba:a8:8c:2e:94:70:87:
08:4f:3e:95:07:90:a4:a8:c7:f4:ab:83:78:ad:a1:
a4:11:6b:28:98:f1:44:b9:48:ab:4e:92:3f:db:34:
43:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:92:DA:41:D1:98:C7:78:D6:85:B6:46:B1:15:55:E0:5B:14:31:38
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/83C96B2E7F5111F1963B0F12CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.112.0/21
154.90.2.0-154.90.13.255
Signature Algorithm: sha256WithRSAEncryption
aa:b7:6c:9b:b5:e4:6e:c0:aa:a8:9d:77:d5:94:73:d5:23:a6:
45:60:ad:11:ca:2d:9f:c1:dd:c5:57:87:fb:26:17:23:ed:32:
cf:02:d2:a5:c1:48:64:c0:ff:e3:b0:c2:bb:08:95:a9:56:5d:
90:77:5d:cd:af:d6:b6:37:f2:e5:ee:c6:b8:66:68:5c:67:ac:
56:3d:a2:47:b2:95:21:7b:14:61:90:bf:88:9a:c4:10:a1:ce:
4c:f3:ec:46:f3:87:e2:08:97:58:8a:c8:b3:48:df:43:42:95:
d3:85:e5:bf:c3:5c:c8:ad:3a:96:c4:1d:58:d0:a0:7b:d5:65:
0a:2e:5f:8d:6d:2e:fc:a9:7f:1a:ef:fd:35:ca:56:8e:03:35:
1e:03:66:b7:59:2d:9b:27:7a:40:c3:0f:7a:de:de:2d:a4:e2:
25:23:1f:3c:0a:73:ac:9e:eb:0f:4f:ad:76:68:6c:b4:06:7c:
76:a9:04:b4:e8:83:cf:ac:7b:88:ac:fb:ae:7b:81:a2:18:d6:
1f:d4:22:f9:bd:e1:91:9f:5a:af:9e:81:a6:4e:9d:44:eb:62:
34:28:ba:ce:da:69:f0:ee:bc:6e:58:76:49:4c:c7:98:ab:4b:
a7:d1:5f:40:ac:46:a1:1a:32:10:91:ac:00:70:84:b2:4c:76:
bf:b1:4d:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:26:52 2026 by rpki-client