Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4773A90713311F1B9FC1606CF1D38B0.roa
File: E4773A90713311F1B9FC1606CF1D38B0.roa (raw, json)
Hash identifier: TR8w2gMak2omi8kV2FCivmAaUlqF/WofGy+A9JV3SKA=
Subject key identifier: 13:91:9A:AC:2A:F8:02:A9:97:6C:D3:89:BC:FA:F6:94:0B:3C:D5:9E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D545
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4773A90713311F1B9FC1606CF1D38B0.roa
Signing time: Fri 26 Jun 2026 07:51:52 +0000
ROA not before: Fri 26 Jun 2026 07:51:47 +0000
ROA not after: Mon 31 Aug 2026 07:51:47 +0000
asID: 399077
IP address blocks: 154.91.88.0/24 maxlen: 24
154.91.89.0/24 maxlen: 24
154.91.90.0/24 maxlen: 24
154.91.91.0/24 maxlen: 24
154.91.92.0/24 maxlen: 24
154.91.93.0/24 maxlen: 24
154.91.94.0/24 maxlen: 24
154.91.95.0/24 maxlen: 24
154.91.96.0/24 maxlen: 24
154.91.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120133 (0x1d545)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 26 07:51:47 2026 GMT
Not After : Aug 31 07:51:47 2026 GMT
Subject: CN=6a3e2f98-a420
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7a:8c:5a:aa:76:03:4b:6e:52:b5:91:0e:7a:
f6:5a:36:b8:84:06:ba:7c:eb:c8:98:97:8b:23:0a:
7f:0e:b6:e5:3b:76:94:44:bc:92:8c:a3:e7:ca:99:
db:3e:67:52:2d:5d:01:66:57:51:1d:1b:49:bd:10:
7a:71:ad:fa:0e:d2:bb:e8:9c:6a:22:41:19:fe:4e:
55:36:88:b3:e0:5c:70:13:b6:22:6a:74:0b:80:ac:
68:56:87:d9:ba:01:6f:63:0c:d9:1a:ef:70:af:81:
ae:12:cc:a1:cb:30:ee:2a:35:14:c7:04:e4:23:4b:
c9:30:fa:c3:56:bb:d4:27:c5:ea:7b:6d:f6:cb:be:
a1:37:bd:99:50:c5:b1:f1:37:4e:f2:d1:c1:92:03:
3d:19:35:6e:d0:2c:c7:d2:33:39:d6:81:6f:04:9e:
ed:48:ff:da:64:5e:10:b1:64:10:10:cb:ec:ef:55:
07:2c:a2:6d:58:6f:5e:4d:43:c7:9c:2d:fd:0f:0e:
3b:d2:01:2c:4b:99:6e:c3:54:8c:23:71:f9:6a:85:
31:59:fe:ca:98:98:93:46:88:6e:19:61:87:9e:e9:
21:f1:e8:75:47:5f:be:29:85:97:e7:42:53:c4:d1:
ca:1b:6b:1e:a0:34:ff:f3:b6:7b:f9:d3:80:e6:c3:
24:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:91:9A:AC:2A:F8:02:A9:97:6C:D3:89:BC:FA:F6:94:0B:3C:D5:9E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E4773A90713311F1B9FC1606CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.88.0-154.91.97.255
Signature Algorithm: sha256WithRSAEncryption
a2:06:31:d6:a9:dc:c4:dc:a1:53:b5:b9:88:46:82:a2:ce:94:
74:3a:5c:72:a6:f7:c8:66:fa:e6:03:bd:0e:73:fb:85:d8:c5:
40:4f:f2:1c:75:0c:84:6b:e1:36:51:ff:26:1c:84:56:d6:e1:
f1:fd:41:e6:da:3d:a8:65:97:e4:14:09:24:b0:0f:03:73:a7:
04:69:11:4a:52:da:33:e4:6e:e0:59:cc:75:85:ef:b9:bd:67:
5e:c0:53:31:92:90:11:8c:85:7d:f8:04:fc:af:7e:da:67:e2:
8e:d1:0c:5c:e6:54:06:d5:39:ca:ce:d1:a6:c8:80:29:97:f3:
01:5a:db:02:d6:67:11:e5:bf:05:50:0d:8c:4b:27:07:17:21:
4f:8f:05:a9:89:0c:a3:b5:7d:47:7a:a8:7a:7a:83:47:20:16:
ee:25:da:bb:96:8e:cb:21:55:37:6f:1b:3d:cb:59:17:cf:c3:
06:7e:f9:10:23:6e:43:79:89:e7:83:35:04:69:13:3f:90:6e:
bf:32:fe:80:83:b9:24:db:ab:c5:17:e6:92:8d:7f:85:f0:65:
0c:be:1d:b7:9b:26:91:37:03:6b:d8:5c:cc:a0:51:60:b7:15:
f2:79:cc:90:16:5a:36:47:a0:cc:f0:3c:bf:e5:cb:72:d0:ca:
af:6d:e7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:24:29 2026 by rpki-client