Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB719CB884FC11F1A7AC42DBCE1D38B0.roa
File: AB719CB884FC11F1A7AC42DBCE1D38B0.roa (raw, json)
Hash identifier: d+lk/2VfH05jy+5uNnBeIUEY/JTECjucJxjlzF8+ZDc=
Subject key identifier: 9E:8F:9E:23:8F:23:7A:91:CD:EC:61:79:3D:A9:21:B6:22:D9:BA:05
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DA7E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB719CB884FC11F1A7AC42DBCE1D38B0.roa
Signing time: Tue 21 Jul 2026 12:06:57 +0000
ROA not before: Tue 21 Jul 2026 12:06:53 +0000
ROA not after: Mon 07 Sep 2026 12:06:53 +0000
asID: 9304
IP address blocks: 154.82.134.0/24 maxlen: 24
154.82.148.0/24 maxlen: 24
154.82.153.0/24 maxlen: 24
154.82.158.0/24 maxlen: 24
154.82.196.0/24 maxlen: 24
154.82.197.0/24 maxlen: 24
154.82.198.0/24 maxlen: 24
154.82.199.0/24 maxlen: 24
154.83.65.0/24 maxlen: 24
154.83.67.0/24 maxlen: 24
154.89.132.0/24 maxlen: 24
154.90.65.0/24 maxlen: 24
154.90.67.0/24 maxlen: 24
154.90.128.0/24 maxlen: 24
154.90.134.0/24 maxlen: 24
154.90.136.0/24 maxlen: 24
154.90.137.0/24 maxlen: 24
154.90.140.0/24 maxlen: 24
154.90.189.0/24 maxlen: 24
154.92.216.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121470 (0x1da7e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 12:06:53 2026 GMT
Not After : Sep 7 12:06:53 2026 GMT
Subject: CN=6a5f60e1-9943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:17:19:64:44:ff:b4:64:eb:67:0c:a0:e3:a6:
a1:0d:3b:b8:40:50:15:8c:48:9c:1f:1f:e2:17:54:
08:9c:7b:12:1c:81:e4:df:c8:85:49:32:63:78:ee:
45:af:70:50:25:ae:6d:66:b9:94:b9:a6:85:60:7c:
b8:77:50:7c:51:c3:7d:3f:5b:82:5f:2a:3b:9b:97:
ea:80:18:b9:c4:a1:71:b8:2c:db:7f:2e:64:2c:cb:
cb:37:a1:e9:4d:f6:95:a1:3b:fe:73:6a:94:55:b4:
96:06:b3:b9:91:15:44:83:0b:cc:1e:e7:58:ed:01:
ce:76:8f:0f:c4:75:e0:36:08:a5:f0:30:49:77:08:
a2:df:1c:6b:68:a8:ab:67:7e:bf:ac:0e:a8:1d:d2:
ac:3a:00:cb:52:81:e4:cf:2a:7d:65:4d:6d:f7:c0:
3d:b5:d4:1a:94:46:4a:f7:0c:1c:dc:af:d4:fd:e3:
48:07:17:b1:dc:6a:e8:9d:5c:6d:f3:7d:cd:ba:0e:
dd:68:09:32:41:4c:33:a1:db:3b:cd:08:fa:4f:48:
3f:ec:16:fc:50:48:29:7d:8d:80:07:2f:26:c9:65:
4e:3e:4d:e5:86:69:0c:05:e2:8d:b6:39:5f:20:92:
70:42:ba:e6:92:db:6b:0a:da:b9:30:69:dc:8a:12:
a8:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:8F:9E:23:8F:23:7A:91:CD:EC:61:79:3D:A9:21:B6:22:D9:BA:05
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AB719CB884FC11F1A7AC42DBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.134.0/24
154.82.148.0/24
154.82.153.0/24
154.82.158.0/24
154.82.196.0/22
154.83.65.0/24
154.83.67.0/24
154.89.132.0/24
154.90.65.0/24
154.90.67.0/24
154.90.128.0/24
154.90.134.0/24
154.90.136.0/23
154.90.140.0/24
154.90.189.0/24
154.92.216.0/21
Signature Algorithm: sha256WithRSAEncryption
37:66:cb:15:ba:82:55:49:7f:08:22:e4:7e:fd:7e:6b:0d:ba:
18:41:bd:78:a3:75:1a:51:8a:8d:02:6c:a2:95:d5:4e:7d:2d:
b7:62:93:66:e4:b6:5d:26:80:c8:5b:9e:d8:0d:89:8c:f2:16:
63:8f:5c:7f:51:f2:52:e2:a2:9c:36:41:a3:09:f6:7a:bf:29:
0e:cd:db:80:41:e4:d4:82:4c:dd:a8:e9:2e:c5:1d:a6:63:0f:
58:98:89:d0:53:9f:43:8c:63:81:f0:07:09:9e:45:46:ba:bd:
04:5a:d5:6c:68:d7:75:09:ba:6c:7d:7c:90:36:45:e9:1e:89:
3e:8b:b6:4f:cd:3a:02:ee:fd:33:67:37:e0:14:02:49:75:c2:
06:84:ad:4a:55:82:f3:ca:3e:94:8c:3c:45:5e:61:7e:73:99:
c8:a1:3f:92:42:cb:a6:07:75:cf:c6:8b:b1:01:4e:b3:60:c4:
d0:85:2f:b7:f9:c1:82:9f:89:4d:98:62:aa:ed:9c:2a:f5:e7:
c2:8b:f7:84:1d:d0:6d:26:87:88:f8:13:e9:e6:fd:07:00:b8:
4d:0f:0a:39:09:d9:1c:aa:c8:60:d7:26:9a:af:f3:19:00:c1:
36:33:30:6f:92:ae:15:80:eb:6a:05:a0:d7:77:79:55:eb:59:
79:bf:44:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:03:28 2026 by rpki-client