Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A02126C4842C11F19CEE24E4CE1D38B0.roa
File: A02126C4842C11F19CEE24E4CE1D38B0.roa (raw, json)
Hash identifier: vRSmm/Zv5WSsUgUVuiGBRrYbZKIIWfFgOtS2ZYNXvCM=
Subject key identifier: FF:A5:D1:AF:D5:EE:0F:2B:43:8C:F3:06:32:80:78:FC:01:45:42:9B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DA02
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A02126C4842C11F19CEE24E4CE1D38B0.roa
Signing time: Mon 20 Jul 2026 11:17:43 +0000
ROA not before: Mon 20 Jul 2026 11:17:39 +0000
ROA not after: Thu 27 Aug 2026 11:17:39 +0000
asID: 140666
IP address blocks: 154.93.87.0/24 maxlen: 24
154.93.88.0/22 maxlen: 24
154.93.94.0/24 maxlen: 24
154.93.100.0/23 maxlen: 24
154.93.104.0/23 maxlen: 24
154.94.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121346 (0x1da02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 20 11:17:39 2026 GMT
Not After : Aug 27 11:17:39 2026 GMT
Subject: CN=6a5e03d7-ebe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:3e:12:37:de:2e:64:06:04:6c:62:58:5e:5e:
85:f4:40:3f:0a:06:72:f8:f2:09:87:f1:7f:bb:cb:
cb:ec:b8:a3:21:3c:6d:00:d2:46:3b:ae:35:c7:06:
80:b3:76:b6:c1:3f:2e:b6:f1:4c:11:19:5d:77:82:
8a:23:af:eb:05:b2:50:2e:31:0e:70:89:c9:c0:0f:
1f:6e:87:f4:90:59:1b:91:d5:2a:b0:c9:c6:2f:91:
ab:ff:53:de:ea:2e:0b:fb:5e:aa:f2:c5:54:15:8c:
6e:c2:5d:7a:65:f0:a6:c4:5d:77:b0:91:b4:6d:5d:
f1:1e:3f:16:9e:6c:a3:1c:32:e4:99:d8:f0:11:55:
c8:78:19:1d:9a:f3:67:0a:ee:e0:62:7b:4d:e8:ce:
62:85:e2:b1:83:4d:4a:e8:34:b7:79:c2:3a:4a:aa:
f0:74:f2:da:48:88:eb:ca:b0:d5:7d:fe:36:51:6e:
c9:30:4c:42:8c:e1:1e:d6:b1:65:7e:a8:c7:c1:b6:
d2:24:6b:a2:fb:b0:0a:00:ca:75:fd:d3:0f:e5:f8:
3b:20:b2:c6:2b:0c:b1:3a:ab:0b:b7:45:a2:86:14:
3c:48:1e:2b:93:ea:1b:e9:c9:1d:5f:72:de:4f:4e:
66:d9:b9:fc:72:8d:3c:86:41:67:55:23:f9:95:93:
11:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:A5:D1:AF:D5:EE:0F:2B:43:8C:F3:06:32:80:78:FC:01:45:42:9B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A02126C4842C11F19CEE24E4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.87.0-154.93.91.255
154.93.94.0/24
154.93.100.0/23
154.93.104.0/23
154.94.68.0/24
Signature Algorithm: sha256WithRSAEncryption
13:39:de:a7:e9:52:29:24:83:7d:42:be:2f:fe:08:27:ec:8f:
b0:fa:84:94:96:42:aa:0a:04:bf:49:de:bd:ce:ec:5b:62:e3:
e0:c0:d4:7b:73:b5:d8:94:09:e8:6f:73:8a:55:13:fb:c2:52:
12:76:3c:e4:e4:8e:1a:f2:94:80:5c:d8:07:71:e2:a9:b2:20:
62:8f:1d:b1:44:fb:af:23:88:9c:12:ba:f8:37:29:bb:40:ab:
89:ae:7f:d1:d9:bb:f0:d8:b5:0c:01:a2:dc:eb:8a:91:8d:1e:
b2:c5:7d:c4:57:15:29:76:ac:c8:f6:f7:4d:8b:ab:63:c5:b4:
84:ae:5f:74:af:50:08:75:39:e1:07:0a:fa:d9:cd:71:57:05:
e7:94:fd:d3:46:c9:bd:e1:d8:d1:bd:37:22:65:2b:4c:44:88:
a8:7a:a8:de:d2:6a:f7:a7:6a:5b:b0:cb:0c:36:77:bb:a2:b9:
87:d6:04:90:76:a1:8d:6f:0b:50:fe:c7:2f:8c:2c:03:a7:f1:
1f:02:39:28:6f:30:a2:09:cf:09:7d:eb:6c:24:00:df:97:a5:
27:28:15:16:f8:86:99:72:16:51:d2:e4:cc:20:7e:41:e1:3b:
c1:37:f7:18:32:83:8d:0e:be:8d:ec:a7:14:69:b4:3e:04:15:
28:0e:a3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:04:10 2026 by rpki-client