Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3DA2AA2842D11F1A602CFE8CE1D38B0.roa
File: B3DA2AA2842D11F1A602CFE8CE1D38B0.roa (raw, json)
Hash identifier: 8jHXlSGvTnwpIllcfA2Ywkp4F6QFJBQcQNDUv1M9ZUU=
Subject key identifier: 12:61:57:EA:A8:7A:67:B6:18:E0:FD:BE:58:05:BE:7C:6D:B6:36:6E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DA0E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3DA2AA2842D11F1A602CFE8CE1D38B0.roa
Signing time: Mon 20 Jul 2026 11:25:25 +0000
ROA not before: Mon 20 Jul 2026 11:25:21 +0000
ROA not after: Thu 27 Aug 2026 11:25:21 +0000
asID: 154177
IP address blocks: 154.205.128.0/24 maxlen: 24
154.205.129.0/24 maxlen: 24
154.205.130.0/24 maxlen: 24
154.205.133.0/24 maxlen: 24
154.205.134.0/24 maxlen: 24
154.205.136.0/23 maxlen: 24
154.205.138.0/24 maxlen: 24
154.205.139.0/24 maxlen: 24
154.205.140.0/24 maxlen: 24
154.205.141.0/24 maxlen: 24
154.205.142.0/23 maxlen: 24
154.205.144.0/24 maxlen: 24
154.205.145.0/24 maxlen: 24
154.205.146.0/24 maxlen: 24
154.205.147.0/24 maxlen: 24
154.205.148.0/24 maxlen: 24
154.205.149.0/24 maxlen: 24
154.205.150.0/24 maxlen: 24
154.205.155.0/24 maxlen: 24
154.205.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 08:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121358 (0x1da0e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 20 11:25:21 2026 GMT
Not After : Aug 27 11:25:21 2026 GMT
Subject: CN=6a5e05a5-54e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:76:b7:3b:6c:8a:50:8a:f3:f1:ee:89:cd:31:
9c:a6:c8:62:86:c0:7e:5d:c6:b3:56:05:42:ab:0e:
0a:b0:6d:61:c8:cb:9d:a9:4c:1b:83:92:5f:c8:2d:
4d:d9:35:1b:54:f0:3d:37:76:5d:83:be:3f:5f:f7:
f0:5d:20:2c:aa:2b:c4:d0:5a:3b:20:4c:00:32:67:
4c:4a:bb:eb:d3:d1:2e:4b:a2:5c:b8:e1:22:f8:70:
bf:7e:e6:1c:83:1e:46:85:b9:d8:c2:ee:3d:ee:23:
7e:0c:24:85:09:e0:6f:e1:6f:af:3f:3c:61:c8:09:
03:f9:c1:56:0c:37:04:7a:37:9f:7e:55:33:6f:1b:
24:1f:96:2e:d5:1d:1b:27:4f:5c:92:97:de:ad:d9:
2b:4d:e1:bd:fb:9d:ec:f4:a5:60:8b:a0:67:75:d2:
d0:93:ec:80:e4:15:59:58:7b:4f:8c:be:45:a9:23:
62:54:99:3a:13:1c:db:53:9b:75:a5:55:b4:8f:48:
23:32:8a:c9:0a:c7:38:73:b7:08:3b:b0:9f:55:b9:
71:93:ea:b1:b9:53:bb:be:a7:fc:1f:d0:4e:49:54:
3f:fb:ad:cb:a3:b8:f7:64:77:9c:81:6a:24:b4:34:
d2:d3:44:f7:d8:1d:92:44:dd:04:b0:9c:a2:2c:a6:
a5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:61:57:EA:A8:7A:67:B6:18:E0:FD:BE:58:05:BE:7C:6D:B6:36:6E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3DA2AA2842D11F1A602CFE8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.128.0-154.205.130.255
154.205.133.0-154.205.134.255
154.205.136.0-154.205.150.255
154.205.155.0/24
154.205.157.0/24
Signature Algorithm: sha256WithRSAEncryption
89:fb:61:f7:a9:89:53:d7:71:21:5e:e9:cb:53:cd:9a:df:e6:
a2:6a:59:41:b7:96:90:e2:45:70:17:8b:4d:58:6e:96:86:0f:
99:67:61:be:d1:60:35:b4:37:4d:ac:2a:3c:d1:c0:5c:4f:af:
8d:d2:a8:2d:39:ea:af:6e:e3:1a:66:35:fa:60:7d:10:12:6c:
f5:34:e0:5e:6a:93:26:a3:a8:b7:63:ee:a7:6a:27:8a:8d:76:
04:d1:2a:bf:29:6c:7e:16:7f:84:83:15:4b:a6:0f:86:30:4e:
54:1e:b2:70:80:1a:a2:4f:b9:27:f5:32:0e:15:7c:e9:33:1e:
05:17:32:5f:b3:6c:71:8f:72:3f:c3:4d:2c:6a:46:ab:36:af:
03:62:ca:70:7b:e6:77:4c:8f:13:7e:b4:74:89:86:09:2e:a3:
88:d5:40:a9:1e:7a:64:d3:61:f8:ce:1e:5a:40:46:33:2d:e4:
19:0f:13:57:77:a9:e4:2a:99:28:08:bd:59:11:74:a1:2a:23:
23:33:93:ad:c9:1f:b5:b2:3e:a7:97:bf:23:ec:cf:43:b3:58:
f9:44:fa:bc:f1:73:6a:65:54:0d:72:72:68:57:9d:9a:03:f8:
61:7b:45:d8:68:96:2e:d4:b1:92:62:aa:57:be:05:aa:a1:e7:
9d:e5:c1:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:26:48 2026 by rpki-client