Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8A7E382740C11F18AE0A7C6CE1D38B0.roa
File: D8A7E382740C11F18AE0A7C6CE1D38B0.roa (raw, json)
Hash identifier: +SGCMWtnu90Ra7P4YAoKRSQS0idF7LGNkz3NsD+zMfo=
Subject key identifier: AB:89:30:C4:3A:84:1A:A5:35:7A:47:BE:5E:ED:B9:03:C3:0D:AC:8F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D626
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8A7E382740C11F18AE0A7C6CE1D38B0.roa
Signing time: Mon 29 Jun 2026 22:49:55 +0000
ROA not before: Mon 29 Jun 2026 22:49:50 +0000
ROA not after: Thu 06 Aug 2026 22:49:50 +0000
asID: 49505
IP address blocks: 154.209.218.0/24 maxlen: 24
154.209.219.0/24 maxlen: 24
154.209.220.0/24 maxlen: 24
154.209.221.0/24 maxlen: 24
154.209.222.0/24 maxlen: 24
154.209.223.0/24 maxlen: 24
154.211.9.0/24 maxlen: 24
154.211.10.0/24 maxlen: 24
154.211.11.0/24 maxlen: 24
154.211.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120358 (0x1d626)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 29 22:49:50 2026 GMT
Not After : Aug 6 22:49:50 2026 GMT
Subject: CN=6a42f693-dbd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:80:e6:9d:85:f9:16:51:b2:47:b5:d9:c6:01:
21:3d:2d:77:ff:01:ba:26:e1:53:ae:9e:ac:f5:d2:
41:54:29:1e:a1:4b:f8:9e:54:e3:1f:8e:14:8b:49:
7a:93:2f:26:e7:5b:a0:d0:db:bf:61:e6:c7:e4:b9:
65:16:90:88:28:2c:30:d4:a6:82:21:74:a5:5a:6d:
e8:6a:bb:7b:fc:63:4f:ef:0e:fb:20:5b:3f:9b:00:
96:e6:08:96:45:52:9c:76:4d:b9:fd:7f:1d:76:19:
76:2c:29:f0:6d:09:c8:28:ed:cb:ff:98:7a:a8:29:
10:67:02:12:51:6e:6d:1a:6b:a5:7b:87:21:e9:70:
23:d4:a1:a3:fe:2c:15:5b:ec:2f:84:67:26:58:c4:
7e:26:7a:8c:a6:0a:36:bc:d4:68:86:d2:05:e7:a8:
a3:07:3a:61:50:ea:bc:ff:f8:dc:2f:69:20:a3:04:
d8:7f:3b:e7:0d:01:60:6f:48:78:6d:87:7e:48:cd:
e9:0d:41:89:48:51:ee:1e:a0:a0:9b:e7:69:db:a3:
b9:49:cf:3a:d6:78:79:a5:02:b2:fa:37:3a:27:a5:
49:2e:04:50:46:23:d2:e8:5b:98:7d:a0:c9:88:e6:
95:56:cc:c0:f5:41:0b:18:81:cd:c5:8c:86:a4:2b:
11:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:89:30:C4:3A:84:1A:A5:35:7A:47:BE:5E:ED:B9:03:C3:0D:AC:8F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D8A7E382740C11F18AE0A7C6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.218.0-154.209.223.255
154.211.9.0-154.211.11.255
154.211.16.0/24
Signature Algorithm: sha256WithRSAEncryption
21:d8:90:c0:df:05:fa:3a:63:d6:b3:ba:f9:ed:b1:3a:2c:49:
04:b9:d6:51:f7:75:3f:6d:6e:7f:e3:20:b6:26:e5:73:a3:0c:
fb:86:e8:ee:05:8d:41:61:7e:b1:48:c1:6b:63:c4:ce:50:e9:
cc:8a:b9:ad:ee:fd:3a:5c:e1:3e:44:86:8e:ba:65:8e:94:ff:
25:d8:65:1d:a2:32:a3:42:eb:6c:21:20:10:3c:b6:11:50:75:
56:f4:9c:47:ca:86:47:8e:23:3f:a4:b9:1e:bc:e2:e0:7b:df:
d5:5f:d0:b9:4e:58:5c:03:4e:8a:3a:9a:c1:cc:c2:28:e4:01:
21:af:f3:30:0b:64:e6:73:8a:4d:ef:f2:c1:79:13:80:96:2e:
d3:ee:a2:71:86:48:53:b0:b2:6a:de:ef:96:39:4e:82:0e:52:
c2:c4:17:ab:1d:ff:3f:5a:fe:2f:11:b7:ba:00:5b:77:eb:43:
6f:1e:f4:74:21:b9:7d:d3:81:ab:d7:5e:79:47:1b:31:12:e2:
23:7b:17:30:c3:3d:07:a1:d3:90:a6:3c:7c:f1:0f:ac:48:b4:
25:bb:ef:54:3e:97:1b:64:d1:4a:e9:cf:6f:c7:54:59:8f:be:
f2:d3:9f:c9:9f:04:e5:f7:e3:ff:f9:94:e3:03:bb:cf:2e:c2:
1a:f3:ea:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:18:13 2026 by rpki-client