Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC082FE284E411F1AB1FE1C9CE1D38B0.roa
File: AC082FE284E411F1AB1FE1C9CE1D38B0.roa (raw, json)
Hash identifier: 4t++W3G/yFSMa+V9s9YeyAObppCw0bcWuIoDkFbnPYk=
Subject key identifier: A9:C4:7C:16:A4:A3:47:9A:CC:1C:7A:0C:D9:7F:56:6A:F4:0F:45:EC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DA64
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC082FE284E411F1AB1FE1C9CE1D38B0.roa
Signing time: Tue 21 Jul 2026 09:15:10 +0000
ROA not before: Tue 21 Jul 2026 09:15:06 +0000
ROA not after: Thu 27 Aug 2026 09:15:06 +0000
asID: 154177
IP address blocks: 154.205.128.0/24 maxlen: 24
154.205.129.0/24 maxlen: 24
154.205.130.0/24 maxlen: 24
154.205.133.0/24 maxlen: 24
154.205.134.0/24 maxlen: 24
154.205.136.0/23 maxlen: 24
154.205.138.0/24 maxlen: 24
154.205.139.0/24 maxlen: 24
154.205.140.0/24 maxlen: 24
154.205.141.0/24 maxlen: 24
154.205.142.0/23 maxlen: 24
154.205.144.0/24 maxlen: 24
154.205.145.0/24 maxlen: 24
154.205.146.0/24 maxlen: 24
154.205.147.0/24 maxlen: 24
154.205.148.0/24 maxlen: 24
154.205.149.0/24 maxlen: 24
154.205.150.0/24 maxlen: 24
154.205.155.0/24 maxlen: 24
154.205.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 08:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121444 (0x1da64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 09:15:06 2026 GMT
Not After : Aug 27 09:15:06 2026 GMT
Subject: CN=6a5f389e-d045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:52:ec:be:57:e5:9d:45:a5:f6:4b:94:b5:9e:
98:f5:a3:6c:02:bd:18:31:97:b0:51:8f:53:cf:27:
94:80:b3:d6:53:13:64:9d:eb:87:a6:5e:ff:60:47:
0a:f4:1c:7e:39:43:08:38:c4:29:d9:6a:66:84:0f:
3f:67:21:00:d4:d3:2c:34:fd:ba:54:1f:97:15:a1:
09:f4:9f:87:fb:c0:d3:30:66:bf:3d:93:7e:bf:64:
fd:9a:28:29:85:bd:65:ee:67:f0:5b:d0:60:0c:f8:
94:52:09:97:2c:36:5b:6f:4d:49:37:bb:33:55:ce:
cd:c6:c4:28:63:0d:f0:f7:21:05:32:88:12:e5:06:
6a:50:c9:ac:62:0d:96:a1:79:c8:be:74:e1:b4:df:
70:99:d6:64:15:c1:40:cf:97:fe:00:cd:05:b3:51:
27:80:dd:21:40:b2:30:11:e1:04:4d:1a:20:2c:03:
df:68:6d:54:c1:32:61:d2:c3:b2:c7:e1:02:5d:97:
5d:4a:fb:b5:d9:a1:20:72:2c:e1:fb:22:c1:89:88:
77:c5:13:fb:9f:3c:24:dc:7d:4d:42:2c:d0:c6:02:
52:5c:62:7a:91:ee:bc:b1:5f:6a:a2:c9:c5:98:3d:
27:22:93:42:28:69:15:91:c5:f0:72:8d:01:90:04:
d0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C4:7C:16:A4:A3:47:9A:CC:1C:7A:0C:D9:7F:56:6A:F4:0F:45:EC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC082FE284E411F1AB1FE1C9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.128.0-154.205.130.255
154.205.133.0-154.205.134.255
154.205.136.0-154.205.150.255
154.205.155.0/24
154.205.157.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:00:67:ac:11:ee:1d:01:3d:c1:07:89:aa:2d:3f:3d:30:d2:
90:07:ff:f3:b6:1f:ac:26:4f:42:24:7a:7d:9d:fd:03:97:d1:
4c:c3:12:28:e7:2a:b0:ff:3a:e7:b4:af:7d:9a:5b:a1:fc:6e:
23:b4:fc:32:a4:43:61:85:8f:91:30:b3:5a:02:be:c1:8c:07:
5b:21:71:ea:be:69:09:4f:55:38:f1:b8:3c:cb:e6:aa:4b:71:
76:03:6a:c0:a4:ee:51:2d:10:1e:41:0c:0e:80:fa:fc:8d:18:
99:42:57:24:19:fe:de:35:98:15:48:1c:cc:9f:3e:b0:02:13:
e6:e3:b8:f2:4a:f8:89:ed:11:06:8e:c1:33:6f:d2:3b:cc:c2:
a6:c4:93:cb:23:dd:93:ec:4c:66:f9:61:0d:09:43:db:a1:2b:
67:90:b3:b2:02:ee:ce:56:3a:54:36:67:00:88:19:34:fe:2a:
74:05:1b:a3:6b:82:5b:d7:05:9d:99:c3:bd:67:a9:0e:83:b0:
71:89:64:25:fd:b2:78:68:6b:ba:e9:e5:85:18:26:1d:a5:87:
68:39:c9:87:f5:7e:cf:5c:02:ed:0f:24:fa:31:47:fd:ef:0f:
06:14:94:ff:2b:fc:97:7d:05:3f:42:dc:18:00:46:bd:14:09:
29:14:2a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:34:48 2026 by rpki-client