Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A1FC7B684FF11F1B20398EBCE1D38B0.roa
File: 9A1FC7B684FF11F1B20398EBCE1D38B0.roa (raw, json)
Hash identifier: ZavzESiSV9vwIJbbx+PVqZrGHwfvMtBUyPiB1PPSbYg=
Subject key identifier: 39:E8:65:85:61:47:93:2C:0E:A6:F1:57:66:91:A4:FE:EC:F8:B0:2D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DA88
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A1FC7B684FF11F1B20398EBCE1D38B0.roa
Signing time: Tue 21 Jul 2026 12:27:57 +0000
ROA not before: Tue 21 Jul 2026 12:27:52 +0000
ROA not after: Mon 07 Sep 2026 12:27:52 +0000
asID: 9304
IP address blocks: 154.193.2.0/24 maxlen: 24
154.193.35.0/24 maxlen: 24
154.194.195.0/24 maxlen: 24
154.196.134.0/24 maxlen: 24
154.196.160.0/24 maxlen: 24
154.196.179.0/24 maxlen: 24
154.196.180.0/24 maxlen: 24
154.199.4.0/24 maxlen: 24
154.200.1.0/24 maxlen: 24
154.200.26.0/24 maxlen: 24
154.200.37.0/24 maxlen: 24
154.200.43.0/24 maxlen: 24
154.200.46.0/24 maxlen: 24
154.200.48.0/24 maxlen: 24
154.200.51.0/24 maxlen: 24
154.200.52.0/24 maxlen: 24
154.200.53.0/24 maxlen: 24
154.200.54.0/24 maxlen: 24
154.200.60.0/24 maxlen: 24
154.200.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121480 (0x1da88)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 12:27:52 2026 GMT
Not After : Sep 7 12:27:52 2026 GMT
Subject: CN=6a5f65cc-51e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f2:e0:d5:73:34:d1:4a:82:0a:63:c6:9d:74:
38:2f:b1:c4:a2:66:66:2d:63:1b:d3:be:7e:3e:4e:
8c:2c:93:b1:f2:5c:c1:86:23:6a:64:38:ab:98:63:
fa:4c:67:0f:48:13:67:b5:13:28:20:8f:ef:a6:be:
1e:dc:93:12:2b:55:d1:51:92:28:57:6b:c5:d3:0c:
74:c2:5c:06:a5:9f:58:08:65:70:c0:dd:2b:1f:f6:
40:86:a8:2a:21:a3:02:d5:73:bd:24:44:c9:b3:e4:
31:60:9c:44:17:ce:ed:57:c0:00:0b:79:d4:23:4f:
a7:96:f3:86:4f:2c:f4:07:60:ed:38:a4:97:a5:f7:
b6:f2:17:14:6e:95:94:c8:bd:a8:f4:fb:83:60:5e:
0a:f0:5f:18:06:8d:52:c5:c4:bd:93:38:a1:00:39:
43:6d:9e:c3:29:7b:e6:35:00:0a:96:c1:4e:27:ea:
7e:aa:c9:86:7e:c2:09:95:7a:f0:79:0f:0c:7e:2c:
6d:4a:4b:0e:d9:89:9a:89:d4:5e:12:34:88:0d:65:
bf:23:dc:0a:be:8e:20:48:b1:82:8d:6f:d9:19:d0:
24:03:8e:4b:39:20:77:8c:8e:b6:f3:cb:62:77:ab:
4f:3c:8c:f2:0c:e2:28:62:3b:45:aa:2c:56:89:4d:
a2:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E8:65:85:61:47:93:2C:0E:A6:F1:57:66:91:A4:FE:EC:F8:B0:2D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9A1FC7B684FF11F1B20398EBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.2.0/24
154.193.35.0/24
154.194.195.0/24
154.196.134.0/24
154.196.160.0/24
154.196.179.0-154.196.180.255
154.199.4.0/24
154.200.1.0/24
154.200.26.0/24
154.200.37.0/24
154.200.43.0/24
154.200.46.0/24
154.200.48.0/24
154.200.51.0-154.200.54.255
154.200.60.0/24
154.200.129.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:82:b1:dd:6b:e9:73:63:75:29:49:b2:b5:94:1b:97:88:db:
63:73:f1:9a:49:ee:8f:c5:0c:96:30:17:54:0b:35:05:2a:9b:
5f:39:d8:f7:b5:33:4d:7b:c1:b1:e4:15:a1:a6:ff:b0:76:9f:
0d:d0:05:13:61:f9:48:03:d3:c6:a4:2f:32:b9:44:81:3c:8b:
d1:64:02:a2:85:e5:aa:6e:a5:3a:96:13:c5:df:6f:0c:ff:a6:
af:4e:0a:d8:45:5e:e4:12:5e:9f:78:03:82:90:48:7d:bd:af:
4a:e0:6d:3d:53:fa:0e:2f:c5:35:1f:43:83:59:1f:7c:58:aa:
91:27:bd:fe:72:26:e4:dd:1b:4e:21:a1:9e:30:fc:c2:f9:c8:
a2:d1:a3:74:77:b2:60:60:0c:30:d8:df:82:bd:df:31:c8:1a:
03:55:d2:74:96:98:81:a3:1f:34:0d:94:23:c7:c2:b8:36:ff:
65:8d:d7:04:ef:3d:0f:25:4f:e5:63:92:b6:ec:be:55:ba:86:
a6:3b:24:0f:e3:c2:a5:f7:75:21:4c:29:c2:37:fc:e2:1e:1a:
93:5c:d6:70:a0:c3:74:56:12:49:3b:90:46:52:17:3c:9d:a4:
53:ed:aa:93:30:56:f5:d4:a1:02:c6:ba:10:f7:40:4a:c6:e5:
cc:b7:d2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:08:22 2026 by rpki-client