Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0100A5E864BE11F18844E401CF1D38B0.roa
File: 0100A5E864BE11F18844E401CF1D38B0.roa (raw, json)
Hash identifier: AbjpV/eBgVqpdSAOiq2WcgrTHGpLzhB+TtUQVncuke0=
Subject key identifier: D3:C5:04:62:5F:4A:64:D2:84:94:1C:4D:76:19:49:48:BB:68:FC:90
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D280
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0100A5E864BE11F18844E401CF1D38B0.roa
Signing time: Wed 10 Jun 2026 11:17:45 +0000
ROA not before: Wed 10 Jun 2026 11:17:40 +0000
ROA not after: Fri 17 Jul 2026 11:17:40 +0000
asID: 22773
IP address blocks: 154.194.3.0/24 maxlen: 24
154.194.6.0/24 maxlen: 24
154.194.63.0/24 maxlen: 24
154.194.66.0/24 maxlen: 24
154.194.240.0/23 maxlen: 24
154.198.6.0/23 maxlen: 24
154.198.14.0/23 maxlen: 24
154.198.17.0/24 maxlen: 24
154.198.18.0/23 maxlen: 24
154.198.190.0/24 maxlen: 24
154.202.24.0/24 maxlen: 24
154.202.25.0/24 maxlen: 24
154.202.26.0/24 maxlen: 24
154.202.27.0/24 maxlen: 24
154.202.28.0/24 maxlen: 24
154.202.99.0/24 maxlen: 24
154.213.218.0/24 maxlen: 24
154.213.219.0/24 maxlen: 24
154.213.221.0/24 maxlen: 24
154.213.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119424 (0x1d280)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 10 11:17:40 2026 GMT
Not After : Jul 17 11:17:40 2026 GMT
Subject: CN=6a2947d9-805e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1c:24:3b:aa:c8:a8:88:99:b6:98:17:a8:08:
4c:eb:56:89:20:13:a5:2f:b4:40:6e:88:24:c3:8f:
c9:2e:85:1c:71:0b:80:9a:c9:f3:5b:9d:94:8b:93:
00:fb:52:0b:b6:4a:2a:5f:79:80:5b:45:76:56:fc:
61:d4:44:bd:c3:51:39:08:0f:d9:f2:cb:c4:65:da:
d8:6c:c5:8d:37:48:47:2e:c8:9d:26:d6:7b:6b:91:
ee:03:29:a3:a8:fa:eb:74:a1:ad:21:8d:3d:70:8b:
9b:9d:1d:cd:d5:d5:d4:1c:96:62:c3:85:dd:21:a6:
05:8c:6e:00:f4:e1:76:45:b0:ef:16:f4:75:59:46:
f9:6c:d2:9a:44:e8:f0:5d:8b:76:33:65:31:51:6d:
fd:e7:0a:49:d5:f5:d5:96:d2:66:3d:c7:39:c5:12:
b6:17:6d:37:ee:42:ec:07:57:48:bb:47:b9:ac:f8:
eb:af:e9:3e:40:d7:9f:0f:e1:8c:84:c6:77:49:d8:
6b:84:8d:a5:e7:67:c9:e8:f8:2b:4b:56:e0:34:f8:
37:ef:6f:66:1b:1a:22:7b:a6:b9:9f:f0:a8:c0:67:
16:e7:a8:95:d6:d2:d4:64:b2:f2:37:2b:e2:83:d7:
2f:8e:cf:83:4b:33:1d:d2:3a:c1:57:7f:f6:99:d7:
a4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C5:04:62:5F:4A:64:D2:84:94:1C:4D:76:19:49:48:BB:68:FC:90
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0100A5E864BE11F18844E401CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.3.0/24
154.194.6.0/24
154.194.63.0/24
154.194.66.0/24
154.194.240.0/23
154.198.6.0/23
154.198.14.0/23
154.198.17.0-154.198.19.255
154.198.190.0/24
154.202.24.0-154.202.28.255
154.202.99.0/24
154.213.218.0/23
154.213.221.0-154.213.222.255
Signature Algorithm: sha256WithRSAEncryption
aa:e1:24:68:2c:a9:00:98:d5:48:01:8c:18:00:28:15:42:77:
70:87:df:12:98:26:68:e1:ec:8e:19:20:f6:c8:02:e8:14:a6:
da:2a:ef:98:1f:7e:78:d2:eb:be:29:77:04:3a:e0:4e:11:87:
0f:ec:31:a9:d1:07:bd:5a:74:c7:6c:6f:ca:90:9b:76:06:43:
a0:ba:98:16:f4:f7:70:3d:22:d1:00:7d:06:87:44:1b:c8:1f:
2b:50:6b:11:6d:52:77:27:27:d5:a1:cc:d9:8b:32:d4:b7:ba:
e0:8c:7f:92:fd:b5:63:0f:68:e3:b3:3b:38:11:c5:32:ca:0e:
42:76:c2:35:a1:4a:b2:31:17:ba:bb:fb:c8:c6:3b:12:c5:e9:
14:d2:41:18:4c:06:2f:d6:f1:9c:6f:a0:5d:71:07:70:0e:f0:
e5:c8:2f:86:e1:f8:c2:5e:12:20:f8:2d:c4:b8:29:71:58:cc:
81:cb:1f:32:a6:4a:f6:b5:b0:64:b9:12:52:0a:1e:0f:dc:09:
a4:5d:d5:45:7c:8e:f3:28:fd:d1:10:21:51:09:98:ea:55:d7:
12:b8:6a:29:67:6d:21:bc:e4:86:ee:77:53:7c:53:99:fb:bf:
cc:5a:56:78:98:42:7f:7b:77:ff:d3:93:22:0e:45:43:d9:11:
49:7b:a2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:20:17 2026 by rpki-client