Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8AA4104084FE11F18C18EAE3CE1D38B0.roa
File: 8AA4104084FE11F18C18EAE3CE1D38B0.roa (raw, json)
Hash identifier: bfAspmCx8We6xDplaSRoUiQfrn+N3fm9XwyZAIwYSJo=
Subject key identifier: 6D:67:14:88:F1:51:4F:2B:83:CC:E7:A6:53:16:A1:FA:78:08:7F:BF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DA86
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8AA4104084FE11F18C18EAE3CE1D38B0.roa
Signing time: Tue 21 Jul 2026 12:20:21 +0000
ROA not before: Tue 21 Jul 2026 12:20:17 +0000
ROA not after: Wed 09 Sep 2026 12:20:17 +0000
asID: 401783
IP address blocks: 154.81.162.0/24 maxlen: 24
154.81.165.0/24 maxlen: 24
154.81.167.0/24 maxlen: 24
154.81.168.0/24 maxlen: 24
154.81.169.0/24 maxlen: 24
154.81.171.0/24 maxlen: 24
154.83.10.0/24 maxlen: 24
154.83.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121478 (0x1da86)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 12:20:17 2026 GMT
Not After : Sep 9 12:20:17 2026 GMT
Subject: CN=6a5f6405-90ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:c1:91:a1:1c:79:d2:c2:6a:ae:ac:15:49:22:
38:bb:63:5e:30:fc:60:c1:97:55:50:ec:0a:96:d7:
5f:3f:22:e6:e7:0a:0b:71:5c:7b:05:10:ad:e6:45:
a2:b0:21:70:b2:1c:07:df:b8:6a:3d:88:d7:6f:78:
25:8c:ce:19:bd:81:d9:71:89:ea:f9:c2:ec:24:ec:
07:39:96:fb:3c:78:99:8d:b2:38:cd:5d:93:cc:35:
b5:07:f7:b6:70:7e:70:65:6e:e7:b6:8f:68:fe:6e:
8c:97:59:9d:b1:32:fd:0e:ff:33:cf:21:fa:55:96:
2c:d5:b3:47:36:65:19:0f:a5:bd:f6:ed:27:a4:c4:
19:90:de:e3:fd:b7:1b:e2:94:09:03:ed:64:cf:b6:
3b:c3:cc:e0:87:99:60:55:88:dc:eb:9c:88:c2:9b:
ed:d9:b3:97:76:95:53:dd:32:12:60:91:8f:7c:d4:
30:d9:84:5a:6a:d1:83:49:ba:a8:17:f0:11:03:b4:
7d:66:f3:fb:2d:d6:6c:66:dc:6e:bb:1f:3c:7b:15:
f4:9d:44:31:84:59:35:f9:26:a5:88:97:bc:ca:24:
58:42:9c:52:57:ce:13:ce:c3:bb:11:42:9d:37:b2:
05:4d:43:c3:39:b8:99:b5:25:16:de:88:cf:3f:bb:
93:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:67:14:88:F1:51:4F:2B:83:CC:E7:A6:53:16:A1:FA:78:08:7F:BF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8AA4104084FE11F18C18EAE3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.162.0/24
154.81.165.0/24
154.81.167.0-154.81.169.255
154.81.171.0/24
154.83.10.0/24
154.83.24.0/24
Signature Algorithm: sha256WithRSAEncryption
71:a6:00:64:3e:58:7c:43:49:c7:e9:00:d9:5b:92:93:7a:e8:
b0:7b:6b:98:f4:a3:cf:7a:db:af:47:eb:d4:26:77:b3:65:f8:
c1:ba:01:89:bf:93:4f:0a:a7:e6:d0:d6:45:19:85:72:91:b9:
1f:55:e7:78:e6:fb:c3:f0:8e:2c:25:dc:03:b3:d6:52:dd:31:
e7:23:af:16:0e:2f:70:74:be:a2:7e:da:40:b4:98:23:98:1a:
78:dd:74:38:77:4f:21:54:39:05:4d:89:92:be:7f:58:72:18:
30:c2:f2:29:5e:b6:76:09:af:c4:d9:1d:e5:01:4a:52:69:28:
b2:d7:7a:c4:57:d2:10:1a:72:1d:21:0d:3f:91:e3:40:b6:9c:
3e:bd:77:9b:ff:ea:e1:0b:0f:d3:79:69:fa:31:c8:ac:ff:3d:
10:53:6b:07:7a:91:d8:d0:df:ce:e2:20:1c:11:fb:d6:d4:3e:
b1:fe:65:36:98:8d:97:0f:8f:0a:23:86:e0:e8:4d:c1:ac:fe:
79:5c:94:3b:5e:2a:19:03:0a:08:07:39:8e:1b:d2:47:d5:6b:
e4:a6:41:85:cc:d0:8e:29:a5:cd:5e:0f:4f:11:18:b3:1e:92:
23:d5:2e:dc:2f:63:5c:59:83:4a:60:3e:2d:4b:d6:a7:f0:e0:
c5:b3:24:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:28:16 2026 by rpki-client