Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C085F170713411F1B9B63A0ACF1D38B0.roa
File: C085F170713411F1B9B63A0ACF1D38B0.roa (raw, json)
Hash identifier: Gu88ekfDs2KYYFCBeVhHmCdJLPM6HMMq+uW7aXMMRAU=
Subject key identifier: 99:8B:72:5F:9C:4B:8D:A1:60:42:86:64:54:66:8A:55:8C:3B:9E:42
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D547
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C085F170713411F1B9B63A0ACF1D38B0.roa
Signing time: Fri 26 Jun 2026 07:58:01 +0000
ROA not before: Fri 26 Jun 2026 07:57:56 +0000
ROA not after: Mon 31 Aug 2026 07:57:56 +0000
asID: 399077
IP address blocks: 154.91.81.0/24 maxlen: 24
154.91.82.0/24 maxlen: 24
154.91.83.0/24 maxlen: 24
154.91.84.0/24 maxlen: 24
154.91.85.0/24 maxlen: 24
154.91.86.0/24 maxlen: 24
154.91.87.0/24 maxlen: 24
154.91.124.0/24 maxlen: 24
154.91.125.0/24 maxlen: 24
154.91.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120135 (0x1d547)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 26 07:57:56 2026 GMT
Not After : Aug 31 07:57:56 2026 GMT
Subject: CN=6a3e3109-8934
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b2:c9:c5:b9:15:a4:5c:4d:85:5c:82:91:ce:
b5:ca:ea:3f:46:f5:7a:af:a9:e5:ab:0b:90:c8:6e:
73:ed:97:17:0d:39:56:bd:73:4d:ea:4f:db:37:95:
a3:84:36:0e:cc:59:f7:e2:8f:58:6e:f5:26:a3:34:
2d:0d:25:8b:f5:bd:93:be:3d:aa:4f:78:af:f5:0a:
bf:90:ca:d3:ac:7e:ca:53:1e:69:fb:cd:db:2d:d3:
d8:cc:26:12:44:cd:b4:2e:c4:e4:b7:94:8c:c2:1a:
0f:8b:7a:4d:db:6e:d7:b3:21:1b:55:43:68:b6:e8:
39:ac:cb:0b:ac:73:23:6a:b2:86:de:64:4f:e5:30:
73:60:02:d4:c0:6d:44:9e:bc:85:87:14:4c:11:52:
cd:8a:6a:cd:f4:78:8a:d7:c5:28:99:aa:52:87:fa:
fe:11:d7:91:a9:08:33:35:e0:82:52:71:fb:fe:ac:
42:6b:3b:4d:81:7b:7d:ea:06:c2:26:e1:cf:f4:51:
62:1d:8b:8d:78:d3:9a:f7:db:64:ba:53:bd:1c:8b:
13:37:81:d2:7d:49:24:c4:9a:66:de:59:eb:82:17:
5b:c8:6d:b6:6d:99:5f:be:5d:b3:dc:75:e5:1a:b4:
4b:9e:bf:9b:26:62:d1:07:a8:8e:19:6c:bd:39:60:
b4:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:8B:72:5F:9C:4B:8D:A1:60:42:86:64:54:66:8A:55:8C:3B:9E:42
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C085F170713411F1B9B63A0ACF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.81.0-154.91.87.255
154.91.124.0-154.91.126.255
Signature Algorithm: sha256WithRSAEncryption
44:cb:4e:83:2e:f9:cc:43:13:1b:c0:10:ce:60:16:8e:49:ca:
87:d7:4f:76:19:e6:f4:cf:3a:6b:96:09:b0:24:ea:4d:ca:c0:
30:14:48:af:50:6a:4b:58:33:06:45:e7:60:2b:1f:76:cf:cf:
79:b8:86:bd:5f:e3:86:d1:f6:49:62:4c:3b:51:3f:25:b4:3d:
a6:f9:a1:38:30:5c:ac:71:98:20:8f:cb:5e:b8:c9:75:19:53:
cb:32:e0:04:07:4a:49:d0:f6:72:52:6d:cb:dd:82:52:64:23:
79:7d:6c:89:c5:18:b6:0c:3f:6d:86:9f:73:ac:d8:1e:03:01:
44:1c:7c:26:4c:11:63:45:31:b3:0c:55:14:13:bc:36:14:c0:
11:b1:db:84:3f:fc:bf:f8:28:47:dc:72:a1:8e:1b:45:38:6a:
55:9a:78:08:3e:4f:b3:b1:07:ec:6d:c3:8d:c5:58:ea:fc:d1:
52:65:7b:ef:e3:ee:b7:d9:be:14:fc:32:41:a1:4a:63:67:d5:
e9:22:8b:bb:4c:1b:ed:0d:23:bb:18:3a:f0:29:77:69:6e:66:
86:6c:0a:b5:81:1d:74:64:42:ab:08:6c:e5:c4:82:58:08:d3:
66:4e:d9:71:4b:d2:0a:1b:25:06:57:4c:47:2a:b4:f6:c6:0a:
f4:cb:c1:d5
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:31:02 2026 by rpki-client