Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F93F0A88842111F1832EA0A6CE1D38B0.roa
File: F93F0A88842111F1832EA0A6CE1D38B0.roa (raw, json)
Hash identifier: 1jLsIBMUOxLOrpZdOarKhCFI48lic0QdfhZH7A2fK3M=
Subject key identifier: 98:CC:59:24:46:6F:C3:2E:28:F9:80:90:DB:C3:11:EE:74:10:CF:59
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D9EC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F93F0A88842111F1832EA0A6CE1D38B0.roa
Signing time: Mon 20 Jul 2026 10:01:28 +0000
ROA not before: Mon 20 Jul 2026 10:01:24 +0000
ROA not after: Thu 27 Aug 2026 10:01:24 +0000
asID: 63139
IP address blocks: 154.194.68.0/24 maxlen: 24
154.203.160.0/24 maxlen: 24
154.203.161.0/24 maxlen: 24
154.203.162.0/24 maxlen: 24
154.203.163.0/24 maxlen: 24
154.203.164.0/24 maxlen: 24
154.203.165.0/24 maxlen: 24
154.203.166.0/24 maxlen: 24
154.203.167.0/24 maxlen: 24
154.203.168.0/24 maxlen: 24
154.203.169.0/24 maxlen: 24
154.203.170.0/24 maxlen: 24
154.203.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121324 (0x1d9ec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 20 10:01:24 2026 GMT
Not After : Aug 27 10:01:24 2026 GMT
Subject: CN=6a5df1f8-b728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2c:95:16:95:50:bf:f4:fe:3f:bc:00:80:b3:
ea:3d:0e:4f:92:aa:94:de:d2:e0:06:e0:48:e2:21:
d5:1a:d1:31:b2:90:25:1a:8e:f9:48:6a:2a:5c:4e:
66:74:75:69:d5:64:c0:e9:40:2c:4c:44:cc:1d:bf:
50:6c:53:f4:ed:ee:09:e5:69:c6:29:c4:07:18:56:
5e:1f:ac:1d:81:ea:9e:0a:0b:0a:93:2e:01:0a:48:
e5:84:3b:fa:09:2d:af:20:e2:1f:78:f5:34:58:dd:
5f:d5:49:3a:d7:68:83:86:c2:f6:ef:95:34:0d:4e:
f5:ac:ea:8a:95:ce:c9:cd:e4:11:ce:38:3f:ef:01:
df:af:38:e5:a4:d4:0f:b4:c6:35:bc:ab:70:15:e7:
4e:e1:9e:f7:18:aa:55:b9:d5:a3:1d:19:31:45:90:
45:06:96:f8:61:5f:19:39:3a:5d:03:53:e5:60:53:
ef:54:e2:a6:03:83:ed:80:64:12:56:ca:8c:ff:17:
5b:7f:a9:4f:ac:a4:ef:37:75:c6:80:d8:87:d7:68:
b6:d0:7d:5c:b9:0c:6f:9b:ac:f6:cd:d3:52:fd:e6:
76:68:fb:9e:d7:63:83:47:3d:d6:50:4d:3d:63:e3:
58:77:b6:d6:78:70:79:6b:fb:da:8d:b4:9d:8d:3d:
37:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:CC:59:24:46:6F:C3:2E:28:F9:80:90:DB:C3:11:EE:74:10:CF:59
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F93F0A88842111F1832EA0A6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.68.0/24
154.203.160.0-154.203.171.255
Signature Algorithm: sha256WithRSAEncryption
a7:46:c3:52:35:50:7e:0d:d2:87:7d:46:8d:be:61:83:c1:9f:
19:97:b8:c8:30:f1:7b:9a:40:60:f4:6a:0f:40:2c:c9:26:7e:
45:6e:8e:f2:3f:c0:58:69:38:d3:09:9e:90:e5:7d:96:fd:c9:
db:a6:81:90:ca:b3:4e:a0:6b:94:87:c0:8f:90:bc:c7:e7:8f:
e7:b5:35:bf:7c:8d:64:56:80:1b:3f:35:23:8c:41:c6:42:b2:
3e:78:81:0e:f3:43:bd:32:50:a4:e8:2f:3e:67:20:f2:a0:7d:
88:7e:2e:ac:f1:bc:26:61:e0:a9:28:67:04:7d:72:24:ac:bf:
b5:7e:4e:57:71:0e:68:86:77:54:98:77:6b:f8:58:a2:58:43:
86:f2:dc:b2:07:4b:d9:55:6e:a2:d0:ff:ca:b3:a8:c5:1f:f6:
e7:d2:d9:96:06:50:a2:be:81:2f:a9:ea:08:6b:42:99:d9:1b:
2d:a6:f7:3d:4d:86:b1:68:ff:16:09:68:db:51:4f:09:0c:1e:
db:22:d2:06:a3:0d:e6:71:b9:07:cf:20:fc:0b:e4:6d:62:1f:
b5:e7:8d:d2:17:81:33:5b:b3:55:0e:76:a3:32:4b:26:4b:ff:
2f:f2:3b:17:90:6e:e5:50:37:e4:21:cf:50:f3:b6:49:2c:e7:
d7:fb:c9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:20:14 2026 by rpki-client