Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C494B3E07B4411F1ADF681E2CE1D38B0.roa
File: C494B3E07B4411F1ADF681E2CE1D38B0.roa (raw, json)
Hash identifier: c02myiXX8xyerDKiRGMQ1tSBpRBBYXgWEEP/qtKxF74=
Subject key identifier: 35:EB:84:01:4D:08:25:ED:76:9A:92:19:61:63:AB:83:F4:86:C2:44
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D79F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C494B3E07B4411F1ADF681E2CE1D38B0.roa
Signing time: Thu 09 Jul 2026 03:17:51 +0000
ROA not before: Thu 09 Jul 2026 03:17:47 +0000
ROA not after: Sat 25 Jul 2026 03:17:47 +0000
asID: 63099
IP address blocks: 154.193.2.0/24 maxlen: 24
154.193.35.0/24 maxlen: 24
154.196.160.0/24 maxlen: 24
154.196.179.0/24 maxlen: 24
154.196.180.0/24 maxlen: 24
154.199.4.0/24 maxlen: 24
154.200.26.0/24 maxlen: 24
154.200.43.0/24 maxlen: 24
154.200.51.0/24 maxlen: 24
154.200.52.0/24 maxlen: 24
154.200.54.0/24 maxlen: 24
154.200.129.0/24 maxlen: 24
154.200.130.0/24 maxlen: 24
154.200.131.0/24 maxlen: 24
154.200.140.0/24 maxlen: 24
154.200.142.0/24 maxlen: 24
154.200.154.0/24 maxlen: 24
154.200.156.0/24 maxlen: 24
154.200.157.0/24 maxlen: 24
154.200.158.0/24 maxlen: 24
154.200.159.0/24 maxlen: 24
154.200.160.0/24 maxlen: 24
154.200.161.0/24 maxlen: 24
154.200.162.0/24 maxlen: 24
154.200.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 03:17:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120735 (0x1d79f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 9 03:17:47 2026 GMT
Not After : Jul 25 03:17:47 2026 GMT
Subject: CN=6a4f12df-148c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ff:93:ce:b0:3e:19:f5:fb:a1:c2:98:5d:9b:
bb:b7:b4:9b:37:ba:21:8f:2e:0a:ba:ee:1f:5a:d9:
77:5d:2f:bb:05:0b:21:5f:2d:87:78:84:e5:e4:b6:
5e:f1:fd:7c:ca:ff:e7:2c:2b:d1:9c:71:dc:b3:8d:
23:7d:a9:88:5e:88:f1:f8:34:d8:88:ce:cd:76:60:
2e:0f:d9:ea:95:d8:3e:6f:09:34:77:09:f9:f2:22:
05:e9:d9:b3:b5:14:4d:de:69:3a:45:ed:dc:19:3e:
0b:72:f6:35:4c:3d:2a:d3:a8:68:6b:4b:2c:b1:74:
48:42:9a:04:ac:70:7b:81:61:c8:63:4c:70:0f:45:
a7:8f:ad:60:b2:c5:4a:d5:13:74:5f:cb:1c:02:1c:
e5:2e:07:93:93:aa:94:1c:b2:ba:48:46:68:87:ef:
18:fb:81:40:0a:0d:7a:bf:1a:0a:21:a4:76:af:fe:
e7:26:b0:73:23:03:ec:8d:e8:43:a8:7d:bd:bf:d1:
e1:3b:04:45:cd:7a:60:ac:3e:c7:fc:4e:5c:9b:98:
27:ed:9d:90:d0:dd:7e:23:10:65:8c:eb:3a:43:cd:
c2:13:ec:dc:10:3d:51:15:c1:f4:80:88:bf:66:4e:
93:fd:6a:f6:27:4a:e9:31:7d:49:47:73:99:0f:70:
4f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:EB:84:01:4D:08:25:ED:76:9A:92:19:61:63:AB:83:F4:86:C2:44
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C494B3E07B4411F1ADF681E2CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.2.0/24
154.193.35.0/24
154.196.160.0/24
154.196.179.0-154.196.180.255
154.199.4.0/24
154.200.26.0/24
154.200.43.0/24
154.200.51.0-154.200.52.255
154.200.54.0/24
154.200.129.0-154.200.131.255
154.200.140.0/24
154.200.142.0/24
154.200.154.0/24
154.200.156.0-154.200.162.255
154.200.191.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:8d:6f:5d:eb:0f:1e:f3:f8:1a:a9:b1:fd:28:95:27:77:e0:
73:0e:16:64:99:29:4e:2c:94:9f:25:78:0b:67:fd:c6:b5:83:
ac:1b:64:3d:24:e8:56:c9:b0:38:d4:40:b6:d9:32:2d:da:9f:
b8:48:aa:6c:bd:b0:8c:7e:d4:61:3c:f7:9b:33:74:48:1d:ea:
e8:34:b8:38:a9:fc:97:da:ad:1c:46:b8:25:1f:32:4d:25:ae:
a3:b2:58:1c:8c:99:c7:9d:0f:19:79:11:fe:8b:c4:99:7c:56:
73:e7:bd:78:0a:ad:92:ea:ee:2b:a1:17:a0:84:1c:44:ad:ac:
5a:27:99:a6:26:e1:d0:fe:f7:44:fb:1d:62:3a:31:45:67:ff:
4b:59:e8:71:26:9d:70:5a:a4:a0:3b:7f:d8:02:a6:ee:ea:c7:
ee:a6:95:35:83:f2:0c:5c:31:5f:29:5c:78:ac:44:df:71:85:
81:6c:4a:11:4a:03:b0:9f:ab:7f:36:1f:df:53:2a:37:76:2e:
82:b8:1d:4f:95:f8:3d:59:a5:56:fa:61:25:e0:93:a5:18:4a:
2c:32:fb:a3:9d:d0:8b:ee:e5:03:a2:6f:17:22:c8:b4:00:a9:
af:d7:d9:c9:10:a0:ec:56:04:d0:5a:b5:8d:bb:ec:b5:d8:f9:
7e:a0:89:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:00:46 2026 by rpki-client