Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8B50DEC7F5311F1A67ED9A3CE1D38B0.roa
File: F8B50DEC7F5311F1A67ED9A3CE1D38B0.roa (raw, json)
Hash identifier: Jobxm8s73osUOK2sciR7SkgsQkXuaOlnh2CPGA5ZSEA=
Subject key identifier: 2A:EA:ED:8C:1C:8B:A1:34:EC:FF:F0:10:4F:EF:CD:B2:9B:F4:EA:20
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D8C6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8B50DEC7F5311F1A67ED9A3CE1D38B0.roa
Signing time: Tue 14 Jul 2026 07:16:46 +0000
ROA not before: Tue 14 Jul 2026 07:16:41 +0000
ROA not after: Mon 17 Aug 2026 07:16:41 +0000
asID: 22773
IP address blocks: 154.194.3.0/24 maxlen: 24
154.194.6.0/24 maxlen: 24
154.194.63.0/24 maxlen: 24
154.194.66.0/24 maxlen: 24
154.194.240.0/23 maxlen: 24
154.198.6.0/23 maxlen: 24
154.198.14.0/23 maxlen: 24
154.198.17.0/24 maxlen: 24
154.198.18.0/23 maxlen: 24
154.198.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 08:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121030 (0x1d8c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 14 07:16:41 2026 GMT
Not After : Aug 17 07:16:41 2026 GMT
Subject: CN=6a55e25e-3a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a1:07:a0:0d:61:18:84:31:23:74:77:2a:ad:
9d:f3:7e:25:a4:28:9a:9c:23:22:e9:d8:16:ad:fa:
8e:21:de:bc:a4:40:22:ed:4a:7f:48:a3:fc:c5:9b:
3c:a5:9e:6d:0d:63:3a:03:a6:37:45:69:a8:5f:7e:
66:d1:65:bf:64:af:5a:17:eb:74:a9:4a:02:bc:16:
fd:c5:0c:87:f2:cd:0c:b5:64:16:7d:e3:4e:7b:d5:
37:63:a2:11:ca:17:6f:89:8e:63:d7:bf:62:cd:b3:
46:dc:4f:94:6b:3c:47:2d:6f:9e:d1:ce:aa:60:3d:
fa:ed:8c:7e:b7:da:f2:07:47:96:f1:58:0b:b8:8b:
74:40:71:27:be:3e:2f:fa:ab:ef:10:95:88:c4:02:
0b:9c:ff:f3:3b:d7:4b:73:1f:b3:81:ea:53:fc:93:
98:1a:5d:1b:9a:22:20:ee:2d:30:80:8c:7a:a0:a1:
c3:7b:c3:28:87:8c:ce:2a:b8:65:0e:a7:2a:d3:fe:
93:6b:1b:06:f6:da:ad:e9:71:cf:38:ba:3a:06:be:
dc:65:97:7b:9e:04:2d:1a:41:60:66:f4:30:a1:38:
9a:38:cf:15:b2:21:4b:7c:ed:6b:2b:49:41:ea:21:
85:ba:ed:e9:25:8f:02:9a:9f:05:b5:37:4e:ac:5a:
af:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:EA:ED:8C:1C:8B:A1:34:EC:FF:F0:10:4F:EF:CD:B2:9B:F4:EA:20
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F8B50DEC7F5311F1A67ED9A3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.3.0/24
154.194.6.0/24
154.194.63.0/24
154.194.66.0/24
154.194.240.0/23
154.198.6.0/23
154.198.14.0/23
154.198.17.0-154.198.19.255
154.198.190.0/24
Signature Algorithm: sha256WithRSAEncryption
15:98:50:af:7f:33:1f:db:53:d4:20:ee:c7:da:db:0e:28:f8:
60:62:71:8d:4e:5d:f1:71:19:39:14:02:db:07:46:5f:4c:6d:
dc:bf:68:b5:d8:cf:77:19:9d:ca:6b:a2:7d:0b:2b:a6:c5:9e:
d3:84:c2:01:e8:02:9b:72:a6:7c:42:15:79:0b:47:9b:ae:a1:
2c:2e:d8:de:8e:47:03:e2:51:80:7e:5d:d0:2d:a7:dd:bf:d1:
ec:2d:9b:af:1a:46:a3:31:a2:4f:f9:ef:e7:5e:aa:ae:4d:b9:
f3:d9:3e:fe:37:a3:9a:31:2d:ec:cb:6a:b9:24:7b:c5:7b:da:
22:7c:c3:66:56:c6:34:a3:64:5d:78:2a:2b:d1:5f:30:f6:a5:
39:14:5c:25:78:46:2b:6e:e9:f3:74:f4:5a:2b:44:bc:58:ba:
a8:45:fb:62:8c:b8:f8:29:ad:0e:78:59:fe:fa:9c:e9:0b:b2:
56:10:87:87:a1:a8:e2:ee:2d:8d:56:8d:09:14:1d:b6:a1:ee:
d1:f1:47:90:0a:df:d0:5b:5f:02:98:c5:3d:18:62:8e:a9:29:
b1:96:5e:a8:40:a6:c8:51:aa:da:57:91:48:2b:4f:18:36:0e:
99:3d:ea:d7:0d:c1:b0:8f:e5:c2:12:93:37:ca:a9:3e:3e:93:
77:60:8f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:34:23 2026 by rpki-client