Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E87059E7F5111F1AF371112CF1D38B0.roa
File: 8E87059E7F5111F1AF371112CF1D38B0.roa (raw, json)
Hash identifier: H4MnVLndBXGXWvr424LUs4CWvylI3Cp8ZSd8RyFgUm8=
Subject key identifier: CE:96:1D:7F:C5:F8:9D:0E:DF:10:4F:EF:77:72:1A:B9:92:81:39:7D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D8BC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E87059E7F5111F1AF371112CF1D38B0.roa
Signing time: Tue 14 Jul 2026 06:59:29 +0000
ROA not before: Tue 14 Jul 2026 06:59:24 +0000
ROA not after: Mon 17 Aug 2026 06:59:24 +0000
asID: 22773
IP address blocks: 154.82.2.0/24 maxlen: 24
154.82.224.0/19 maxlen: 24
154.85.13.0/24 maxlen: 24
154.85.121.0/24 maxlen: 24
154.85.122.0/24 maxlen: 24
154.90.155.0/24 maxlen: 24
154.90.156.0/24 maxlen: 24
154.90.157.0/24 maxlen: 24
154.90.158.0/24 maxlen: 24
154.94.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121020 (0x1d8bc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 14 06:59:24 2026 GMT
Not After : Aug 17 06:59:24 2026 GMT
Subject: CN=6a55de51-9308
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a6:4e:59:cc:33:9a:7f:95:43:91:06:89:1a:
c5:f6:48:a4:c3:30:44:0e:a1:c5:eb:b1:dc:dd:ad:
89:8a:a9:de:27:e0:bc:17:d9:90:5f:bc:c6:7e:40:
0b:92:72:b3:a1:ab:fd:0b:13:88:5c:85:f5:5a:2a:
39:56:bb:e0:c9:05:b3:08:51:99:1c:bd:ed:ff:f7:
c9:1d:6c:90:f2:2c:99:76:e7:6b:5f:e6:f6:f7:f6:
e3:72:9d:ab:68:98:1c:8e:67:6d:e0:13:67:e5:2d:
ff:a2:17:87:40:ae:fe:38:6c:55:41:d2:7b:d6:c2:
15:c6:e8:af:08:a5:e8:19:35:09:33:1a:ca:6b:fa:
33:d7:29:d6:7b:cb:1b:6a:fe:b4:3d:62:b6:66:c5:
9b:c9:8d:b9:d2:96:f9:d7:3b:93:42:d4:cf:7d:aa:
cc:f4:79:25:48:f5:bf:27:f5:51:90:c3:8d:9f:13:
b8:22:04:d0:dd:68:67:da:e5:a9:f6:35:15:f9:34:
ab:64:8a:c7:06:f6:bd:4d:45:45:77:ca:18:e2:69:
af:82:11:7c:f6:db:5a:b3:53:b9:67:22:f2:2f:3a:
19:0b:06:49:6e:3a:38:de:b1:d1:00:41:5a:c0:2d:
4e:0f:e9:88:5e:1a:83:fc:b9:3c:2d:7f:58:d0:b5:
f4:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:96:1D:7F:C5:F8:9D:0E:DF:10:4F:EF:77:72:1A:B9:92:81:39:7D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8E87059E7F5111F1AF371112CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.2.0/24
154.82.224.0/19
154.85.13.0/24
154.85.121.0-154.85.122.255
154.90.155.0-154.90.158.255
154.94.32.0/24
Signature Algorithm: sha256WithRSAEncryption
56:bc:fe:74:f8:7b:9b:63:50:f4:36:46:07:1a:b1:50:11:24:
23:7f:8a:71:ef:f8:9b:41:84:4b:a0:48:a2:a5:ec:ab:47:7f:
ef:af:44:77:d3:a3:72:a7:86:a2:10:37:c8:82:25:4f:ec:ca:
87:fa:b0:76:2f:1e:2a:19:58:09:dd:65:b8:bb:e3:98:19:f6:
2b:f6:97:0b:69:3f:80:70:bd:5e:29:4f:5a:ad:33:03:6c:6c:
06:72:9e:cc:90:d5:f9:23:28:66:11:0a:a1:e6:b1:1c:95:ca:
e1:6e:46:57:03:22:c9:6d:73:df:7f:81:8d:41:8c:4d:9a:3f:
b7:ba:b7:87:5b:0a:44:5b:d3:b5:80:ca:f0:2a:de:e5:1a:e2:
7f:93:ee:68:3f:9c:d3:39:5e:e5:e2:19:d6:95:ba:f6:80:e5:
9b:81:15:af:90:33:9b:32:62:e8:b8:c1:98:98:1d:1b:cd:86:
d9:58:b0:31:9a:c7:00:bc:9e:a9:2e:bf:09:21:31:89:5e:58:
ff:00:65:c9:62:a2:ed:c7:b4:c8:7f:18:b9:16:cd:b8:43:88:
d3:b5:7e:41:89:3c:12:42:c8:25:24:44:4a:ad:83:89:17:bf:
90:8a:05:da:8d:36:4b:b3:76:e0:57:b2:9e:7a:4c:48:c0:16:
9c:1d:5c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:03:58 2026 by rpki-client