Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE3830D2850211F1A7EB1BFCCE1D38B0.roa
File: AE3830D2850211F1A7EB1BFCCE1D38B0.roa (raw, json)
Hash identifier: SUKWx1sKK0fhfsRYYxuIQE9NrzliZAC8h6xDk89y8vg=
Subject key identifier: FF:8E:16:F3:BA:28:6B:59:0B:54:2D:69:4E:63:03:F0:3A:B7:99:D3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DA92
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE3830D2850211F1A7EB1BFCCE1D38B0.roa
Signing time: Tue 21 Jul 2026 12:49:59 +0000
ROA not before: Tue 21 Jul 2026 12:49:54 +0000
ROA not after: Mon 07 Sep 2026 12:49:54 +0000
asID: 401783
IP address blocks: 154.200.130.0/24 maxlen: 24
154.200.131.0/24 maxlen: 24
154.200.140.0/24 maxlen: 24
154.200.142.0/24 maxlen: 24
154.200.154.0/24 maxlen: 24
154.200.156.0/24 maxlen: 24
154.200.157.0/24 maxlen: 24
154.200.158.0/24 maxlen: 24
154.200.159.0/24 maxlen: 24
154.200.160.0/24 maxlen: 24
154.200.161.0/24 maxlen: 24
154.200.162.0/24 maxlen: 24
154.200.191.0/24 maxlen: 24
154.211.211.0/24 maxlen: 24
154.223.240.0/24 maxlen: 24
154.223.241.0/24 maxlen: 24
154.223.242.0/24 maxlen: 24
154.223.243.0/24 maxlen: 24
154.223.244.0/24 maxlen: 24
154.223.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 08:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121490 (0x1da92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 12:49:54 2026 GMT
Not After : Sep 7 12:49:54 2026 GMT
Subject: CN=6a5f6af7-c0c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e9:97:5a:a5:b8:dd:db:a6:25:46:15:e7:26:
cb:73:fc:98:07:85:06:bd:11:d8:40:bb:5d:c1:bc:
41:f5:19:1a:9e:83:05:54:02:83:98:d5:54:b1:8d:
ad:f5:68:73:98:45:a2:2f:7c:24:3a:53:c1:15:0e:
df:4a:25:ed:0b:2e:53:4c:05:60:b8:eb:5c:e4:ed:
c4:d6:be:fa:7d:df:8b:dd:7f:fb:5e:9b:68:fd:8d:
b0:8d:14:cf:0a:23:c4:cd:22:2c:b6:a2:98:ce:fa:
fc:1d:65:0b:08:04:c4:04:64:c6:02:aa:4f:21:20:
56:44:51:ed:62:47:a3:2b:fd:53:21:ce:12:e7:37:
90:3a:ad:a9:19:85:b2:6a:1b:3c:db:9d:b9:2d:ab:
a8:cd:b5:9a:3a:fd:e9:75:15:66:3c:f1:42:a1:4e:
7f:4c:8c:cf:bd:57:9e:4c:48:56:3b:02:49:7e:d4:
c0:36:55:67:58:c8:42:30:a8:96:9c:a1:af:1c:7c:
0a:45:98:55:98:d4:75:4a:9a:53:94:95:42:b1:f8:
95:eb:44:86:d1:aa:54:ed:1a:36:49:7e:d7:55:97:
12:75:91:e9:59:99:36:b6:06:ef:20:65:d7:22:f4:
49:d2:51:44:1d:ac:bc:21:86:9b:c5:3e:a1:b4:05:
6e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:8E:16:F3:BA:28:6B:59:0B:54:2D:69:4E:63:03:F0:3A:B7:99:D3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE3830D2850211F1A7EB1BFCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.130.0/23
154.200.140.0/24
154.200.142.0/24
154.200.154.0/24
154.200.156.0-154.200.162.255
154.200.191.0/24
154.211.211.0/24
154.223.240.0-154.223.245.255
Signature Algorithm: sha256WithRSAEncryption
85:9e:7e:c4:9c:5c:2f:be:8b:c6:60:76:7c:13:5a:01:df:d4:
4b:7c:7b:6a:ac:ae:f1:e0:93:92:85:b5:da:b2:13:77:21:7b:
a4:96:74:04:76:fb:88:d0:1e:41:9f:cf:a7:e8:d8:54:5a:37:
88:18:6a:dc:e9:78:69:80:e7:95:78:28:df:83:38:dc:e3:e8:
da:46:51:fb:7b:ff:75:78:a8:43:c7:72:8a:91:dc:d2:8f:77:
76:1e:8a:39:97:2e:0c:4f:a2:ba:99:59:1d:b1:f4:6f:b4:4c:
0e:ae:19:72:71:e7:f0:d0:a9:56:f0:30:e8:b6:26:0d:38:3f:
f7:cd:95:d3:2e:b7:df:4f:84:fa:5d:bb:3b:10:4a:b4:b3:05:
fb:14:5c:b9:d4:30:ca:a4:92:eb:0f:31:64:1f:48:7b:34:74:
52:ea:99:4d:0e:0f:5a:39:67:37:42:f0:80:96:e5:d9:77:20:
eb:44:74:54:31:db:09:9b:19:7b:52:09:8e:10:d8:b8:2d:e1:
f6:ad:0d:e0:2b:67:03:3e:d4:f2:b4:ba:76:bf:8d:b9:7e:68:
3d:98:b8:c9:50:9b:50:9b:f2:c0:9c:98:40:f0:f5:7d:61:9d:
88:35:c6:d6:ce:c1:d1:89:f5:fa:e6:e3:1a:cf:17:fa:d3:23:
eb:3c:26:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:01:41 2026 by rpki-client