Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1DFB3747C3E11F1BEDC48E1CE1D38B0.roa
File: D1DFB3747C3E11F1BEDC48E1CE1D38B0.roa (raw, json)
Hash identifier: YidHdCWByMfI1yQwzi59RxN/tQ+GhiBucGbW5ZliM94=
Subject key identifier: DB:09:44:19:98:E3:6E:BA:34:7C:E1:0B:0A:2D:7C:4F:07:C3:3B:D4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D7E7
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1DFB3747C3E11F1BEDC48E1CE1D38B0.roa
Signing time: Fri 10 Jul 2026 09:07:48 +0000
ROA not before: Fri 10 Jul 2026 09:07:43 +0000
ROA not after: Mon 17 Aug 2026 09:07:43 +0000
asID: 139613
IP address blocks: 154.81.61.0/24 maxlen: 24
154.81.140.0/24 maxlen: 24
154.81.161.0/24 maxlen: 24
154.81.164.0/24 maxlen: 24
154.81.178.0/24 maxlen: 24
154.81.181.0/24 maxlen: 24
154.81.191.0/24 maxlen: 24
154.82.18.0/24 maxlen: 24
154.82.20.0/24 maxlen: 24
154.83.128.0/24 maxlen: 24
154.83.135.0/24 maxlen: 24
154.83.137.0/24 maxlen: 24
154.83.141.0/24 maxlen: 24
154.83.158.0/24 maxlen: 24
154.83.187.0/24 maxlen: 24
154.83.190.0/24 maxlen: 24
154.83.191.0/24 maxlen: 24
154.83.209.0/24 maxlen: 24
154.83.211.0/24 maxlen: 24
154.83.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120807 (0x1d7e7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 10 09:07:43 2026 GMT
Not After : Aug 17 09:07:43 2026 GMT
Subject: CN=6a50b664-661d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f3:4a:70:61:d3:75:53:eb:fc:c4:96:58:bc:
8c:8a:44:f5:11:49:5b:1e:01:ef:75:8a:bd:83:2b:
a4:c9:7b:ff:90:70:83:ce:7a:0e:b1:9b:32:b7:df:
03:d2:92:6a:07:e5:65:d9:88:56:78:92:5b:2c:9c:
8e:9f:85:d9:ed:af:bd:86:d5:9e:08:bf:ed:20:55:
33:25:af:9e:1e:2a:bc:e5:26:9e:65:86:29:7a:11:
c0:12:42:56:e9:a5:0a:fe:83:e5:44:e9:47:d0:06:
a6:7c:c1:76:c5:43:6f:3e:b4:07:5f:1a:40:6e:9f:
36:47:11:05:38:d7:69:66:99:b8:b1:3e:5b:94:7b:
72:04:6d:39:2e:20:fd:88:76:fc:9c:ab:74:d1:fd:
a0:0c:a5:1d:d7:37:0b:fb:27:b3:57:29:69:30:03:
c7:4a:71:af:4b:59:ca:da:e3:46:ee:d8:1e:99:e8:
ab:12:38:07:2f:62:32:ac:2f:9f:e9:6d:64:4d:f3:
a8:66:86:cd:e3:59:33:13:da:19:66:ca:62:11:2b:
f8:35:01:aa:1f:1e:2d:d4:35:51:66:94:33:1f:ee:
02:04:7b:7d:a9:5e:97:6d:6e:de:3f:04:c1:e9:a3:
f0:2c:82:f6:ee:99:a0:b0:85:9c:04:31:3a:0e:ee:
49:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:09:44:19:98:E3:6E:BA:34:7C:E1:0B:0A:2D:7C:4F:07:C3:3B:D4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D1DFB3747C3E11F1BEDC48E1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.61.0/24
154.81.140.0/24
154.81.161.0/24
154.81.164.0/24
154.81.178.0/24
154.81.181.0/24
154.81.191.0/24
154.82.18.0/24
154.82.20.0/24
154.83.128.0/24
154.83.135.0/24
154.83.137.0/24
154.83.141.0/24
154.83.158.0/24
154.83.187.0/24
154.83.190.0/23
154.83.209.0/24
154.83.211.0/24
154.83.247.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:9f:99:01:4a:d1:e1:2d:91:c3:51:b4:e4:94:a6:cd:41:f2:
74:71:54:1a:8b:6d:f1:0d:4d:e0:da:1b:85:25:59:af:49:c7:
00:2e:06:cc:ba:bd:77:4b:29:31:b4:3c:f9:58:c7:fa:00:99:
e8:78:fa:02:91:02:3c:3d:51:e1:7e:f2:05:98:1e:28:c4:d3:
96:8d:28:e4:04:9e:19:54:f1:17:fc:92:55:ee:d2:19:c2:95:
7e:d6:04:bf:15:eb:da:ab:c4:bc:b7:0f:da:b8:62:77:19:b5:
f6:0e:32:7d:1f:f2:91:d4:7e:94:b9:a4:5f:6e:50:ea:ea:a0:
01:7e:72:95:e0:42:43:7c:8d:98:5c:b2:3d:bb:e7:a0:4b:d4:
e8:05:88:3b:1c:a8:f4:d2:26:3f:c7:dc:fa:bc:3b:78:19:35:
be:a0:62:e6:d6:18:3f:a5:11:11:4b:90:9f:23:dd:c0:19:33:
6c:e3:72:86:0a:d0:e6:03:d7:90:16:6e:3f:6f:4f:22:a4:6d:
02:74:f0:09:80:1a:c5:64:0b:37:8f:a4:f0:d4:5c:05:4e:83:
6b:22:b0:ea:2f:a4:cc:9e:94:35:ff:47:69:4f:9f:51:48:bb:
b7:95:f5:0a:60:f0:a3:3b:22:ea:fe:f6:9d:38:09:6d:8c:99:
fe:a5:09:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:21:01 2026 by rpki-client