Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8EE601D4850011F186EFC6EFCE1D38B0.roa
File: 8EE601D4850011F186EFC6EFCE1D38B0.roa (raw, json)
Hash identifier: L/2/cFZV4vsBWiY4E3xNnxY6J6nrN8XxHP4ucutfY3Y=
Subject key identifier: DC:C3:1A:B3:B6:F6:D9:86:91:1A:2D:12:B7:9C:60:EE:C3:CE:82:AF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DA8E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8EE601D4850011F186EFC6EFCE1D38B0.roa
Signing time: Tue 21 Jul 2026 12:34:47 +0000
ROA not before: Tue 21 Jul 2026 12:34:43 +0000
ROA not after: Mon 07 Sep 2026 12:34:43 +0000
asID: 9304
IP address blocks: 154.200.130.0/24 maxlen: 24
154.200.131.0/24 maxlen: 24
154.200.140.0/24 maxlen: 24
154.200.142.0/24 maxlen: 24
154.200.154.0/24 maxlen: 24
154.200.156.0/24 maxlen: 24
154.200.157.0/24 maxlen: 24
154.200.158.0/24 maxlen: 24
154.200.159.0/24 maxlen: 24
154.200.160.0/24 maxlen: 24
154.200.161.0/24 maxlen: 24
154.200.162.0/24 maxlen: 24
154.200.191.0/24 maxlen: 24
154.211.24.0/21 maxlen: 24
154.211.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121486 (0x1da8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 12:34:43 2026 GMT
Not After : Sep 7 12:34:43 2026 GMT
Subject: CN=6a5f6767-8551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:98:a1:85:44:e2:ac:f8:2d:30:ef:ea:b8:f7:
6b:19:44:b3:49:9c:d8:81:87:43:6f:5b:0b:b6:19:
1d:f6:5f:66:69:c0:4a:fa:b5:53:d2:a9:39:e1:32:
ee:f3:ed:64:20:9b:f7:11:a7:92:06:0d:6e:4e:9b:
bc:1a:94:6c:17:18:a4:ea:46:2d:51:35:b6:ca:a1:
7e:0a:21:f2:e9:f3:18:ac:93:93:c0:1c:fd:d3:ca:
fd:45:49:9b:5b:c9:d6:7d:59:12:8c:68:10:25:60:
32:06:f3:ff:b8:5a:fa:cb:5c:db:ef:9a:c9:56:8b:
e5:ac:96:3d:fb:39:68:2c:f7:cd:ef:45:2a:67:39:
21:35:e8:de:70:c3:ad:ef:91:27:e2:ec:a7:68:42:
f6:a9:e2:f1:ab:c8:b7:1d:1a:7c:54:61:b8:37:70:
d2:43:c2:70:f3:cc:4f:00:3a:6a:b3:6c:80:eb:51:
9c:ce:eb:84:95:d5:a5:9e:39:73:0e:70:0f:bc:35:
36:7d:f0:99:54:12:b4:dd:3e:0d:1d:67:28:3d:d6:
5a:e0:43:70:31:ce:62:cc:89:60:60:a5:f3:2d:0c:
e3:8b:00:be:f6:b1:e5:e7:80:28:50:14:37:e4:c1:
a1:a9:26:4b:ee:b8:94:4a:17:6c:ed:fe:30:d0:f2:
49:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C3:1A:B3:B6:F6:D9:86:91:1A:2D:12:B7:9C:60:EE:C3:CE:82:AF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8EE601D4850011F186EFC6EFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.130.0/23
154.200.140.0/24
154.200.142.0/24
154.200.154.0/24
154.200.156.0-154.200.162.255
154.200.191.0/24
154.211.24.0/21
154.211.211.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:86:57:7c:8f:e5:ac:91:e5:0c:fa:c9:37:de:0e:10:07:fb:
8c:a4:c4:0e:7c:dc:41:ab:3d:16:8f:df:b8:4c:3f:1f:e6:8d:
02:1b:97:06:15:28:01:51:67:b4:6f:3d:10:55:02:01:d3:94:
f7:c5:f0:d4:05:f2:45:40:55:05:b9:94:d6:fc:e4:ea:85:cf:
45:5c:e7:2b:bf:d7:a6:04:3e:db:83:cc:30:9d:b2:56:dc:e1:
a0:8d:9e:2e:19:0f:6d:69:82:5c:d9:8e:a9:6f:05:06:31:dd:
96:b4:94:14:9b:74:fb:6d:0d:89:32:ff:a4:3a:cd:c2:a9:2b:
f8:11:7e:60:0f:46:4b:75:97:38:63:e6:61:28:41:1f:a0:14:
2d:53:55:a7:dc:24:7d:63:fd:e6:c6:09:8f:0c:44:2e:bd:8e:
c5:c3:2a:41:d1:8f:07:ab:b6:02:16:a0:cb:f3:ba:a7:dc:c5:
e9:54:28:3e:ca:7b:ec:66:ca:60:23:93:d5:7f:7b:cc:b6:2b:
e4:6f:39:84:8a:fe:9b:4d:39:13:94:69:76:94:32:c4:24:8e:
69:5c:e2:12:a7:11:25:1d:60:90:de:a3:30:9f:d5:12:43:60:
f9:4c:c9:b1:ee:7d:98:8b:29:9c:c6:a8:9d:33:5c:f6:64:77:
2f:35:d2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:38:22 2026 by rpki-client