Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D99B59E850111F1A2B1CBF7CE1D38B0.roa
File: 9D99B59E850111F1A2B1CBF7CE1D38B0.roa (raw, json)
Hash identifier: dbspQsDeLOfw2LcYQBqgkI8PznsxWmFhJ5qjVJCwKv8=
Subject key identifier: A8:2A:A5:24:63:11:5D:F6:75:A7:C8:7F:29:0B:CA:88:0D:BE:BC:C9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DA90
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D99B59E850111F1A2B1CBF7CE1D38B0.roa
Signing time: Tue 21 Jul 2026 12:42:21 +0000
ROA not before: Tue 21 Jul 2026 12:42:17 +0000
ROA not after: Mon 07 Sep 2026 12:42:17 +0000
asID: 401783
IP address blocks: 154.193.2.0/24 maxlen: 24
154.193.35.0/24 maxlen: 24
154.194.195.0/24 maxlen: 24
154.196.134.0/24 maxlen: 24
154.196.160.0/24 maxlen: 24
154.196.179.0/24 maxlen: 24
154.196.180.0/24 maxlen: 24
154.199.4.0/24 maxlen: 24
154.200.1.0/24 maxlen: 24
154.200.26.0/24 maxlen: 24
154.200.37.0/24 maxlen: 24
154.200.43.0/24 maxlen: 24
154.200.46.0/24 maxlen: 24
154.200.48.0/24 maxlen: 24
154.200.51.0/24 maxlen: 24
154.200.52.0/24 maxlen: 24
154.200.53.0/24 maxlen: 24
154.200.54.0/24 maxlen: 24
154.200.60.0/24 maxlen: 24
154.200.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 08:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121488 (0x1da90)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 12:42:17 2026 GMT
Not After : Sep 7 12:42:17 2026 GMT
Subject: CN=6a5f692d-617b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9b:a5:5a:78:f9:4e:4b:55:38:de:76:25:3b:
8a:87:f2:c9:78:e7:89:af:35:ca:1f:da:e8:e3:24:
30:56:14:e1:95:de:9a:c3:47:3b:28:c5:01:7d:c5:
f3:66:4f:41:3f:37:43:b7:50:6e:cb:84:9b:ff:24:
3f:e4:b2:32:90:70:be:5f:3d:49:45:49:80:99:11:
6d:f4:02:9c:f2:13:16:51:db:37:4e:58:73:be:4c:
0c:7a:2a:b5:84:85:b5:9a:73:87:92:0f:0a:63:29:
e6:ac:69:8b:41:79:3b:a5:63:dd:1c:b3:7a:88:a2:
9b:e1:a2:4a:33:43:1a:53:63:62:09:f4:46:d4:96:
6b:ae:08:62:a6:65:d3:2b:38:21:0b:d9:38:13:72:
f7:a2:66:96:77:8c:1f:2a:c0:8c:d1:4e:22:c1:5e:
04:26:9e:dc:70:9e:2d:cf:6b:a3:15:6f:ac:9b:f5:
74:13:0b:bd:7f:53:df:11:74:bc:b2:da:20:37:83:
b1:d2:80:aa:f3:19:e8:f1:1c:c8:68:db:00:b2:3b:
e1:a9:7c:c9:20:22:dc:0b:da:c4:ed:8c:95:3e:b0:
bf:1c:16:0b:fc:48:cd:e1:f9:fe:6b:5a:e6:76:ca:
95:c2:3d:38:6a:37:a1:d4:c0:c3:1b:f7:c5:0e:28:
11:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:2A:A5:24:63:11:5D:F6:75:A7:C8:7F:29:0B:CA:88:0D:BE:BC:C9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9D99B59E850111F1A2B1CBF7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.2.0/24
154.193.35.0/24
154.194.195.0/24
154.196.134.0/24
154.196.160.0/24
154.196.179.0-154.196.180.255
154.199.4.0/24
154.200.1.0/24
154.200.26.0/24
154.200.37.0/24
154.200.43.0/24
154.200.46.0/24
154.200.48.0/24
154.200.51.0-154.200.54.255
154.200.60.0/24
154.200.129.0/24
Signature Algorithm: sha256WithRSAEncryption
d3:3e:6d:87:89:f0:b5:47:2f:e1:2b:93:d6:ad:7a:b3:a5:e8:
57:cf:27:29:18:bf:19:91:9c:b7:08:fd:62:e1:66:e5:69:f9:
39:a9:da:8b:59:af:ba:fa:11:cb:0c:7a:47:8c:f4:c8:80:d7:
83:90:26:b9:ba:e1:51:17:e4:f1:dd:e3:d4:f6:d9:8d:1b:48:
52:b9:f8:ea:be:04:c3:87:ff:be:c1:22:53:f4:b0:cd:e7:69:
9f:f2:06:f3:4e:8f:c9:0e:b2:5e:65:61:af:d2:4c:df:05:24:
eb:48:53:b9:b8:68:c8:c9:52:f5:fa:db:6a:05:10:82:cd:1d:
db:01:80:7a:9f:32:e3:7c:9f:09:af:09:c6:40:cd:ce:2b:d6:
5c:63:de:79:95:74:46:4d:db:61:47:f2:22:bc:05:16:9c:29:
d1:75:f3:85:80:f8:fc:2e:39:f6:72:9a:3e:bf:51:27:b7:3a:
ff:b2:47:46:34:66:6a:2c:ba:dc:ca:50:55:cb:00:d7:b6:fc:
74:6b:2b:a9:cc:ab:b0:1a:72:2a:b8:19:b2:e4:54:eb:8e:05:
5b:5f:7c:2c:81:df:9b:50:76:71:79:b2:25:3a:f4:72:67:ec:
76:a0:00:db:6e:0f:f3:f6:cc:57:c3:91:84:7b:b8:83:ee:82:
3e:0c:48:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:05:49 2026 by rpki-client