Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE3DD3AE873511F1932C10F0CE1D38B0.roa
File: AE3DD3AE873511F1932C10F0CE1D38B0.roa (raw, json)
Hash identifier: zXpfbuCx89/VM4VlRk9FVeA6PwTNe4uoHpImQBoXf64=
Subject key identifier: 4E:78:33:F7:52:D7:8F:DD:B7:E5:1D:C2:6E:EB:7F:BC:65:66:9C:6B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DB2A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE3DD3AE873511F1932C10F0CE1D38B0.roa
Signing time: Fri 24 Jul 2026 08:00:06 +0000
ROA not before: Fri 24 Jul 2026 08:00:01 +0000
ROA not after: Tue 01 Sep 2026 08:00:01 +0000
asID: 11427
IP address blocks: 154.82.28.0/22 maxlen: 24
154.85.100.0/22 maxlen: 24
154.85.124.0/22 maxlen: 24
154.88.32.0/22 maxlen: 24
154.90.160.0/21 maxlen: 24
154.90.176.0/21 maxlen: 24
154.90.192.0/19 maxlen: 24
154.94.16.0/20 maxlen: 24
154.94.128.0/18 maxlen: 24
154.94.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121642 (0x1db2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 24 08:00:01 2026 GMT
Not After : Sep 1 08:00:01 2026 GMT
Subject: CN=6a631b85-e20d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:44:9a:bb:39:e7:31:47:ae:1a:6e:15:68:8a:
11:f2:be:87:1d:22:ed:9c:9f:25:a3:a3:2a:9f:45:
00:44:c8:46:a9:08:ab:80:4f:64:3b:6d:41:2a:42:
5c:d6:25:b3:8d:bd:32:45:6a:db:da:87:d0:da:97:
76:ae:b4:27:25:41:84:df:8b:09:5b:55:0b:09:da:
86:7d:27:40:8b:c3:31:87:fe:cd:88:6e:0b:84:e4:
aa:86:26:11:a5:db:10:b8:c7:b4:26:33:f1:81:65:
98:cc:b5:9a:0c:c0:08:de:df:ba:12:2e:82:5c:d9:
fc:6b:9b:16:05:17:63:11:6f:e0:52:a7:f3:66:04:
54:2d:36:fa:12:b5:4e:4a:38:c8:fb:f8:7a:66:f5:
f6:da:df:c4:2a:55:40:a1:23:61:ed:4c:82:9b:ba:
3d:92:59:10:a6:33:cc:aa:49:12:97:f4:5f:82:0e:
dd:be:71:0a:b6:d2:26:6f:4c:50:1e:40:2f:42:5d:
1a:b2:69:b4:70:67:09:d6:4c:19:47:6a:e1:66:b5:
9e:50:22:18:dc:8a:99:b4:ef:fa:39:cf:35:ec:f1:
15:98:9e:76:66:02:2f:81:de:c9:e4:b8:c3:f4:32:
4e:ce:68:c1:aa:66:5b:68:12:95:e7:63:49:82:99:
22:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:78:33:F7:52:D7:8F:DD:B7:E5:1D:C2:6E:EB:7F:BC:65:66:9C:6B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE3DD3AE873511F1932C10F0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.28.0/22
154.85.100.0/22
154.85.124.0/22
154.88.32.0/22
154.90.160.0/21
154.90.176.0/21
154.90.192.0/19
154.94.16.0/20
154.94.128.0/18
154.94.240.0/20
Signature Algorithm: sha256WithRSAEncryption
96:c2:d7:34:9f:6c:8a:f2:40:dd:79:4b:44:ad:53:6f:c7:9b:
c6:da:b6:3e:06:3f:66:0f:a0:c7:83:04:0a:ca:a7:d6:bf:b5:
ea:e1:ae:32:50:14:4f:4d:f0:63:14:6f:56:12:48:74:92:cf:
00:74:4e:8b:cd:9b:f3:2a:a4:b0:8d:ea:4b:05:ac:83:c3:3b:
7b:a5:20:79:03:58:da:6a:8e:e5:0e:fa:0f:2f:35:da:72:a6:
35:11:aa:39:76:9e:fc:f0:6d:20:22:e6:d1:36:70:26:0d:0f:
ce:04:68:04:74:76:30:5b:09:a9:af:7d:06:c3:69:d4:a0:0a:
19:08:57:30:6e:35:e7:a1:f3:d1:fa:62:b4:55:34:be:66:11:
4b:04:fe:04:8d:d4:ff:04:2a:20:c3:32:48:1f:5c:30:87:23:
82:de:66:e0:d4:f5:30:57:50:e6:46:bf:62:bf:3e:2e:47:49:
6c:64:7f:ee:e3:3c:4f:ab:02:eb:a9:38:26:28:a2:8b:0a:14:
4f:83:e8:01:ae:be:36:c0:d4:d0:41:f5:2b:aa:61:de:ad:c7:
2b:f0:48:2d:eb:5c:0a:6b:ab:a5:eb:3b:e7:3b:4f:bf:23:a7:
b5:bf:36:d7:21:b5:57:4a:f0:ee:4c:2d:a6:f0:09:5f:47:88:
92:36:78:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:43:43 2026 by rpki-client