Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0547EB0850611F1A41C8915CF1D38B0.roa
File: D0547EB0850611F1A41C8915CF1D38B0.roa (raw, json)
Hash identifier: 9odZ/ZdutOWBAqSUAOnws6oRIv5FMq4b460W+Uiy3UI=
Subject key identifier: 16:AB:38:66:11:90:63:D2:6A:6C:55:36:62:F1:2C:E2:D5:E2:E4:80
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DA9C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0547EB0850611F1A41C8915CF1D38B0.roa
Signing time: Tue 21 Jul 2026 13:19:34 +0000
ROA not before: Tue 21 Jul 2026 13:19:30 +0000
ROA not after: Thu 13 Aug 2026 13:19:30 +0000
asID: 17497
IP address blocks: 154.217.192.0/20 maxlen: 24
154.222.140.0/22 maxlen: 24
154.222.140.0/24 maxlen: 24
154.222.141.0/24 maxlen: 24
154.222.142.0/24 maxlen: 24
154.222.143.0/24 maxlen: 24
154.222.148.0/24 maxlen: 24
154.222.149.0/24 maxlen: 24
154.222.150.0/24 maxlen: 24
154.222.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121500 (0x1da9c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 13:19:30 2026 GMT
Not After : Aug 13 13:19:30 2026 GMT
Subject: CN=6a5f71e6-c16e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:13:73:f5:be:77:6a:ed:70:a3:6f:bf:ac:80:
5e:a3:e7:da:02:5b:22:6b:a1:63:5f:8c:eb:4e:78:
67:77:35:48:ce:c8:94:7e:eb:19:a3:96:55:82:56:
4b:20:1d:29:75:f2:6f:2d:41:a9:ff:51:2d:56:29:
cd:f0:8f:65:2e:c0:32:1f:f0:8a:fa:84:0f:7c:2f:
ef:4a:59:23:8f:b7:4c:07:1f:1a:39:e3:2f:24:39:
42:88:4d:7f:b6:8a:c8:49:b8:8f:d0:5f:ea:57:42:
7b:0d:e9:08:8d:f6:ff:5a:cf:22:35:29:7f:af:a6:
93:bb:9b:fd:6a:bc:1b:93:ea:7f:1f:40:b0:4f:70:
b3:85:64:ae:d1:76:36:d9:f0:e4:23:80:b3:cc:77:
14:69:61:6c:a6:4b:c7:1e:bb:4f:38:32:51:d9:ad:
ef:44:7f:20:37:8b:10:1f:41:52:bc:30:8e:85:a5:
f2:51:9a:86:20:d3:0b:88:95:36:8a:c6:b0:74:b1:
e5:ce:c3:53:c1:b5:ae:40:1b:39:75:d1:e0:2e:63:
8b:28:c1:96:b3:2d:d1:13:b0:d7:ce:0a:51:a3:33:
98:d6:83:0a:ce:c3:e3:21:30:05:83:66:75:50:dd:
06:09:2a:ca:1e:0f:3a:d3:42:fa:0c:49:aa:c5:18:
b5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:AB:38:66:11:90:63:D2:6A:6C:55:36:62:F1:2C:E2:D5:E2:E4:80
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0547EB0850611F1A41C8915CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.192.0/20
154.222.140.0/22
154.222.148.0/22
Signature Algorithm: sha256WithRSAEncryption
31:64:47:03:a2:62:0b:42:f5:fb:96:56:9c:a4:c7:b5:23:3d:
84:cf:d0:07:60:bf:f8:a2:79:66:26:20:7f:37:17:5e:17:bb:
4a:70:8a:de:19:e8:53:8d:04:54:55:e7:2a:03:a7:4c:6e:f0:
c4:d5:7a:4f:c9:07:81:44:c5:d8:8b:6a:5b:7a:32:6e:1d:65:
d6:c9:fa:19:b8:96:3e:44:1b:bb:d6:da:83:46:ba:36:90:52:
13:75:46:00:75:d2:4f:29:50:df:32:87:5a:fb:7e:5c:a5:4a:
eb:42:41:31:b4:89:e6:72:9e:43:8f:33:64:84:53:b2:5c:3f:
1b:77:85:99:a7:09:af:c9:53:88:f6:24:bc:47:bc:cb:de:9b:
4c:ce:fd:36:b3:e8:ae:97:95:8d:40:53:53:a5:5c:97:7e:6f:
c6:5c:8e:f7:f6:f2:d5:f6:94:32:4b:93:1f:e4:8c:5f:4d:1a:
d4:22:f0:e0:ab:91:8e:72:44:f0:24:4f:8b:00:f9:06:8e:f7:
46:c6:71:49:7e:f5:bd:cb:23:f9:9c:03:d4:42:77:e7:0d:af:
dc:5d:fc:31:c7:f9:9f:72:a6:48:2a:8e:0e:d9:c3:91:1e:8d:
92:b3:14:4a:fc:71:67:99:e8:1f:ec:44:47:3e:cd:40:55:73:
ed:1d:1a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:43:21 2026 by rpki-client