Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9AB44CA484F211F185C9531CCF1D38B0.roa
File: 9AB44CA484F211F185C9531CCF1D38B0.roa (raw, json)
Hash identifier: 5pkmzjCW3WCUEe0FiWP1O6817GsQ3miraSf706EjLB0=
Subject key identifier: 94:2D:F4:C5:4D:8B:5C:4A:30:60:9D:EF:31:78:B5:4D:2C:6D:12:F1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DA78
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9AB44CA484F211F185C9531CCF1D38B0.roa
Signing time: Tue 21 Jul 2026 10:54:54 +0000
ROA not before: Tue 21 Jul 2026 10:54:50 +0000
ROA not after: Wed 09 Sep 2026 10:54:50 +0000
asID: 63099
IP address blocks: 154.196.160.0/24 maxlen: 24
154.199.4.0/24 maxlen: 24
154.200.54.0/24 maxlen: 24
154.200.63.0/24 maxlen: 24
154.200.80.0/24 maxlen: 24
154.200.129.0/24 maxlen: 24
154.200.130.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121464 (0x1da78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 10:54:50 2026 GMT
Not After : Sep 9 10:54:50 2026 GMT
Subject: CN=6a5f4ffe-032a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1a:d0:20:6b:aa:40:88:5b:88:28:af:c9:7d:
8d:6e:f9:e8:0d:50:91:e3:ef:53:ab:5d:25:77:71:
a7:44:8b:0a:e8:a9:de:50:26:6d:b4:c3:89:bd:65:
f1:c9:2e:18:eb:b7:0b:71:17:ae:72:69:1a:86:72:
bf:5d:22:13:69:d0:78:df:5f:57:04:8f:b0:6d:12:
1b:47:58:79:c1:80:99:1e:0d:c8:31:05:8c:1d:d8:
2a:1d:d3:8e:df:7e:7f:95:95:08:2d:40:2d:95:1e:
53:28:22:6d:78:00:d5:f9:31:1c:bd:d9:f9:94:ff:
3f:0c:c9:9d:5c:69:4e:79:be:a5:07:2c:40:73:b8:
b6:d7:da:8e:a5:ef:87:44:4a:85:28:2b:02:b3:43:
90:21:6e:31:2d:0e:b1:a6:b9:3e:2f:b9:51:af:b6:
be:34:b2:5a:fa:00:cd:4e:84:01:8f:42:c2:e9:aa:
70:1a:c1:1b:c1:49:72:77:8b:e6:80:57:00:f8:0c:
32:07:b8:45:c7:f3:58:17:1e:58:ce:1f:9f:ea:37:
bc:48:78:29:8a:88:8a:d4:b5:85:64:c2:e3:33:84:
4a:5a:7f:6e:12:0b:32:8c:5b:e4:9e:3d:8c:6a:d1:
c1:75:ae:f1:1c:68:31:00:4d:47:94:6d:da:55:97:
b7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:2D:F4:C5:4D:8B:5C:4A:30:60:9D:EF:31:78:B5:4D:2C:6D:12:F1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9AB44CA484F211F185C9531CCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.160.0/24
154.199.4.0/24
154.200.54.0/24
154.200.63.0/24
154.200.80.0/24
154.200.129.0-154.200.130.255
Signature Algorithm: sha256WithRSAEncryption
a8:04:4c:02:f3:ce:f7:34:32:90:f1:6b:f3:08:a7:c0:a3:21:
f9:8c:c9:72:4b:a0:61:b6:8f:51:2d:50:88:4b:45:25:f2:47:
f8:78:68:1e:5b:11:49:1a:2b:cd:df:df:d7:4a:6b:cd:ef:77:
68:7a:da:cb:55:92:d8:73:bc:4a:22:8e:46:97:27:ba:b4:bd:
be:31:08:c4:94:7d:f5:f0:a5:91:54:28:39:65:36:c6:07:27:
ea:6c:eb:dd:62:44:81:92:fa:fd:a2:24:7f:6d:2a:00:0a:f4:
08:1a:7b:31:a3:62:4c:37:98:b3:60:9b:f2:3e:97:2a:89:2b:
c3:03:5c:69:a1:54:43:41:2d:19:17:a9:00:57:cf:f2:7b:bc:
b4:ad:91:9a:f4:91:1d:19:08:ec:7d:8c:0c:31:51:2a:1f:7f:
3f:ca:dd:e3:2f:e4:aa:b7:dd:d7:9c:66:38:80:fd:a4:40:69:
47:81:31:73:bf:5b:5e:a3:55:09:1b:d3:ae:fb:72:93:f9:43:
67:77:52:fe:49:92:98:43:1c:3b:1b:a0:87:8f:62:87:06:f7:
af:2e:82:db:e8:b4:26:0c:57:0b:33:53:ff:e6:90:c1:9b:6e:
59:10:37:4f:1d:54:bc:c1:cc:1f:f7:17:90:cf:7a:0e:e2:3b:
99:fb:1f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:10:01 2026 by rpki-client