Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED5AF5927B6111F1842271A0CE1D38B0.roa
File: ED5AF5927B6111F1842271A0CE1D38B0.roa (raw, json)
Hash identifier: GjUVrtgG6COOwtP2qGswhpcCTXAaBykC4EtKItLBjKE=
Subject key identifier: 51:A9:EF:CF:A9:5A:61:8D:71:7C:1D:01:9E:94:20:A3:75:FD:B6:7F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D7A3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED5AF5927B6111F1842271A0CE1D38B0.roa
Signing time: Thu 09 Jul 2026 06:46:35 +0000
ROA not before: Thu 09 Jul 2026 06:46:31 +0000
ROA not after: Sat 01 Aug 2026 06:46:31 +0000
asID: 63099
IP address blocks: 154.193.2.0/24 maxlen: 24
154.193.35.0/24 maxlen: 24
154.196.179.0/24 maxlen: 24
154.196.180.0/24 maxlen: 24
154.200.26.0/24 maxlen: 24
154.200.43.0/24 maxlen: 24
154.200.51.0/24 maxlen: 24
154.200.52.0/24 maxlen: 24
154.200.131.0/24 maxlen: 24
154.200.140.0/24 maxlen: 24
154.200.142.0/24 maxlen: 24
154.200.154.0/24 maxlen: 24
154.200.156.0/24 maxlen: 24
154.200.157.0/24 maxlen: 24
154.200.158.0/24 maxlen: 24
154.200.159.0/24 maxlen: 24
154.200.160.0/24 maxlen: 24
154.200.161.0/24 maxlen: 24
154.200.162.0/24 maxlen: 24
154.200.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120739 (0x1d7a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 9 06:46:31 2026 GMT
Not After : Aug 1 06:46:31 2026 GMT
Subject: CN=6a4f43cb-2623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:77:40:a6:48:70:e1:fd:94:6a:c2:77:e3:c1:
5e:2a:ed:81:84:04:e9:34:2f:c5:61:e4:c7:46:5a:
c7:2f:1c:62:06:2d:9c:a0:bc:1f:d4:54:27:d9:91:
69:10:7e:81:22:f1:d4:e5:24:82:65:8a:77:52:21:
9f:f3:65:08:12:e5:73:12:1b:3b:d2:d3:c3:97:aa:
46:d0:a3:86:9d:be:46:ad:95:61:6c:6b:15:82:bc:
fe:13:ba:06:1c:b0:66:a9:c2:aa:9f:35:06:17:7d:
be:ce:b2:49:9c:83:31:4d:d0:62:e4:73:d7:af:59:
d0:5d:51:83:db:5a:b3:c9:79:75:e7:fb:73:32:1b:
30:0c:f3:18:13:63:c8:86:c9:ae:19:69:97:06:4c:
d1:25:d0:72:3e:cf:b2:41:9e:e8:b3:b4:f4:96:07:
33:03:73:35:2d:cf:bb:8f:4d:5c:9d:a7:f3:29:66:
27:50:92:99:bf:fc:2c:84:26:ef:ad:c4:65:c6:79:
e2:2e:41:3c:21:41:2a:0a:b5:2c:7a:2c:65:07:1a:
56:64:cb:39:15:c4:fb:8e:a5:cd:6e:7a:a1:22:56:
43:02:07:65:3b:f6:56:bb:04:b4:c0:3c:9d:6d:9d:
60:e1:14:2a:c0:49:0b:a4:73:53:27:9b:f9:32:f5:
0a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A9:EF:CF:A9:5A:61:8D:71:7C:1D:01:9E:94:20:A3:75:FD:B6:7F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/ED5AF5927B6111F1842271A0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.2.0/24
154.193.35.0/24
154.196.179.0-154.196.180.255
154.200.26.0/24
154.200.43.0/24
154.200.51.0-154.200.52.255
154.200.131.0/24
154.200.140.0/24
154.200.142.0/24
154.200.154.0/24
154.200.156.0-154.200.162.255
154.200.191.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:8f:f9:48:fc:d2:a7:de:db:f4:f1:e6:e5:b9:fc:4f:b9:7b:
c2:8f:ae:c2:bc:05:07:fc:1a:0c:2f:19:91:6e:0d:7f:4c:30:
ad:c3:d0:13:c2:5b:9d:62:f5:e9:aa:ba:0b:25:15:d6:00:7f:
17:87:db:1e:39:3b:8e:7e:38:4f:7d:48:95:05:38:fd:6f:aa:
46:66:eb:f7:a1:ab:5c:7e:5a:4b:f2:c9:08:43:4a:02:fb:9d:
6a:60:32:1b:32:a5:5b:17:68:1b:a3:e8:d9:78:23:4e:08:40:
06:0b:af:71:19:4c:89:d8:a0:58:aa:0f:bb:4b:ff:f7:a5:4d:
fa:5c:88:34:7c:7b:d8:c2:9c:24:9d:ac:fb:55:22:ec:43:ad:
68:bc:84:c1:c6:1b:f2:1f:00:32:eb:dc:5d:f3:c6:a2:69:33:
9e:c7:7e:ea:e7:71:97:4e:54:3e:a2:96:30:6f:e2:20:be:db:
26:ec:58:20:cb:6b:02:a3:1e:d0:09:77:fb:c0:cd:83:08:1b:
91:b2:56:12:6a:22:9e:03:60:f0:04:8b:fd:00:47:39:af:27:
a6:74:07:a5:0f:d3:c2:9e:9a:a2:d5:e7:53:84:b5:5c:21:10:
3c:c0:95:ee:b2:11:69:9b:96:3d:7b:47:54:3e:03:4c:27:eb:
07:55:07:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:15:41 2026 by rpki-client