Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/85E62B0085F411F189C6F3BCCE1D38B0.roa
File: 85E62B0085F411F189C6F3BCCE1D38B0.roa (raw, json)
Hash identifier: dOY4D4+8bBuARyw+bfgtX7RnVeCbAOjfMmxaQNoJiyA=
Subject key identifier: BC:14:02:59:95:E9:C0:1E:C7:61:8D:59:FA:C3:0B:11:4F:2D:B7:1C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DAD5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/85E62B0085F411F189C6F3BCCE1D38B0.roa
Signing time: Wed 22 Jul 2026 17:41:09 +0000
ROA not before: Wed 22 Jul 2026 17:41:05 +0000
ROA not after: Wed 09 Sep 2026 17:41:05 +0000
asID: 395793
IP address blocks: 154.81.50.0/24 maxlen: 24
154.82.162.0/23 maxlen: 24
154.82.164.0/22 maxlen: 24
154.83.8.0/24 maxlen: 24
154.83.24.0/24 maxlen: 24
154.91.152.0/24 maxlen: 24
154.91.153.0/24 maxlen: 24
154.91.154.0/24 maxlen: 24
154.91.155.0/24 maxlen: 24
154.91.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121557 (0x1dad5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 22 17:41:05 2026 GMT
Not After : Sep 9 17:41:05 2026 GMT
Subject: CN=6a6100b5-e2cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e3:52:b2:e2:a3:e5:1b:a2:ac:9b:1b:29:fa:
80:72:1c:af:25:e8:9a:ec:87:7c:48:94:11:99:15:
44:2a:c3:2a:0b:ba:9e:9f:8f:12:01:45:32:63:07:
4a:81:07:35:ce:32:03:0f:fc:4d:60:0b:bb:d6:64:
15:de:37:5a:e0:ac:13:82:65:4d:83:9f:0c:80:84:
50:99:b9:3a:fe:ec:b7:c5:2c:70:3b:33:f2:c6:10:
e2:a1:fc:3f:d8:b9:bb:15:7e:54:e8:67:1f:d8:40:
c0:51:ef:a7:d8:71:c5:a2:1d:72:1f:7a:a5:a2:25:
36:4f:c6:43:8e:5e:a9:57:fb:32:37:7e:da:d9:62:
81:25:d8:76:a8:c5:eb:ef:16:0c:e6:61:38:e1:a5:
96:89:f0:76:35:1d:29:c7:9b:03:1e:75:30:de:66:
ef:db:12:27:b7:b7:3c:cd:b8:7f:07:2c:e7:69:6f:
a5:34:dc:31:69:c9:f5:1a:4d:50:03:e3:c8:11:ae:
5d:23:0d:d6:b2:77:87:5c:0a:74:e9:dc:9e:3a:12:
56:fe:76:06:87:a8:8a:17:40:71:12:53:a3:f2:06:
e7:b5:49:2a:d1:78:18:a6:d6:e0:c6:e9:80:44:4a:
89:10:5b:64:fc:fc:01:56:e4:d5:78:22:f3:c1:37:
fc:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:14:02:59:95:E9:C0:1E:C7:61:8D:59:FA:C3:0B:11:4F:2D:B7:1C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/85E62B0085F411F189C6F3BCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.50.0/24
154.82.162.0-154.82.167.255
154.83.8.0/24
154.83.24.0/24
154.91.152.0-154.91.156.255
Signature Algorithm: sha256WithRSAEncryption
b3:28:76:46:e2:31:15:0f:8e:cd:43:6e:63:aa:98:eb:65:6f:
a8:6e:e3:23:6c:51:b9:15:03:d6:41:21:fc:87:f8:4c:15:9d:
4c:ec:5f:85:5f:6c:2a:40:e2:61:71:14:0a:f1:45:c2:78:80:
08:09:e2:a1:51:a0:b6:c1:83:66:a3:de:f5:9e:54:3f:57:0b:
cf:85:a0:1d:e7:5a:cd:c6:31:a6:22:75:c4:f7:5b:bc:89:21:
06:41:74:30:3f:f9:ca:06:b9:15:e6:1d:ea:8c:f8:33:27:a8:
1d:95:20:d1:c3:03:74:90:b1:3c:fe:4a:69:8b:62:1e:41:2b:
8e:87:e0:7a:a9:20:d9:77:6e:eb:f0:dd:12:0a:c5:c3:3b:8d:
37:90:47:d2:15:f3:81:b2:5f:61:1b:f5:05:df:a2:c0:31:f5:
45:29:60:b3:b0:7f:89:d0:16:4d:ca:53:35:ce:82:fa:2b:ff:
bd:9b:3c:38:8d:44:e2:b7:33:9d:7f:14:ae:61:19:f9:63:b0:
95:db:38:b7:e1:de:61:30:57:49:50:06:ae:01:b9:c8:67:61:
0d:e5:f0:63:ec:06:9b:4d:3f:e6:cd:89:b6:25:1a:07:df:f7:
9b:ad:90:04:bf:3b:39:41:9b:10:a7:f0:24:9c:b1:f6:dc:e0:
3a:24:39:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:34:46 2026 by rpki-client