Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/015923E664D011F1B88432ECCE1D38B0.roa
File: 015923E664D011F1B88432ECCE1D38B0.roa (raw, json)
Hash identifier: t0OSXizBLCph4kuMZsMSn+uX2vV/74gCehmvE2GGAUE=
Subject key identifier: 71:0F:20:A0:FA:0E:7F:DD:2E:B5:3E:60:FE:74:9F:EE:56:EC:5B:90
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D286
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/015923E664D011F1B88432ECCE1D38B0.roa
Signing time: Wed 10 Jun 2026 13:26:37 +0000
ROA not before: Wed 10 Jun 2026 13:26:32 +0000
ROA not after: Fri 17 Jul 2026 13:26:32 +0000
asID: 54801
IP address blocks: 154.81.136.0/24 maxlen: 24
154.81.140.0/24 maxlen: 24
154.81.164.0/24 maxlen: 24
154.81.166.0/24 maxlen: 24
154.81.178.0/24 maxlen: 24
154.81.181.0/24 maxlen: 24
154.81.191.0/24 maxlen: 24
154.82.18.0/24 maxlen: 24
154.82.20.0/24 maxlen: 24
154.83.128.0/24 maxlen: 24
154.83.135.0/24 maxlen: 24
154.83.137.0/24 maxlen: 24
154.83.141.0/24 maxlen: 24
154.83.158.0/24 maxlen: 24
154.83.187.0/24 maxlen: 24
154.83.190.0/24 maxlen: 24
154.83.191.0/24 maxlen: 24
154.83.209.0/24 maxlen: 24
154.83.211.0/24 maxlen: 24
154.83.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119430 (0x1d286)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 10 13:26:32 2026 GMT
Not After : Jul 17 13:26:32 2026 GMT
Subject: CN=6a29660d-7f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:cc:ed:55:28:65:ed:49:80:46:85:9f:d7:76:
0e:41:5c:25:96:0e:2b:76:7d:e4:31:e4:e3:62:59:
d8:5d:c0:3d:1c:94:30:c7:1c:1e:b1:e5:63:de:1e:
f9:48:98:11:9b:75:e7:e8:9b:4d:ec:b6:f2:92:65:
de:e3:50:7a:a2:ff:17:b3:3a:28:e1:12:92:fd:93:
66:60:ac:0a:67:0a:75:68:65:3e:04:53:1a:35:94:
76:ce:16:7a:4f:86:78:fd:be:62:f2:14:d0:7f:bf:
25:9a:c3:60:77:d5:8d:9a:0e:98:11:75:a7:2c:e5:
3d:4e:ac:01:3c:4e:73:7e:48:d9:00:08:da:f6:95:
75:2d:c0:3e:41:fe:7e:9a:01:a8:7f:70:73:1a:36:
a6:2f:1f:20:29:e4:0a:54:b8:fd:d6:82:3b:9a:b6:
2c:b3:1f:63:bd:62:d0:70:67:92:60:70:fe:f0:2e:
80:c7:43:6c:dc:49:88:a5:46:0f:3b:2e:04:65:7c:
0b:df:86:76:ce:ad:26:96:a9:dd:86:de:17:bb:79:
3a:65:66:ef:16:cd:9f:6d:e1:55:83:3f:07:5c:2b:
55:53:80:48:ef:10:18:a5:92:41:4e:e4:77:6d:69:
e7:25:3a:3f:35:42:fe:6b:37:d2:b3:f4:15:41:1e:
8f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:0F:20:A0:FA:0E:7F:DD:2E:B5:3E:60:FE:74:9F:EE:56:EC:5B:90
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/015923E664D011F1B88432ECCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.136.0/24
154.81.140.0/24
154.81.164.0/24
154.81.166.0/24
154.81.178.0/24
154.81.181.0/24
154.81.191.0/24
154.82.18.0/24
154.82.20.0/24
154.83.128.0/24
154.83.135.0/24
154.83.137.0/24
154.83.141.0/24
154.83.158.0/24
154.83.187.0/24
154.83.190.0/23
154.83.209.0/24
154.83.211.0/24
154.83.247.0/24
Signature Algorithm: sha256WithRSAEncryption
62:01:c4:e7:1a:21:1f:20:ed:b1:90:90:7f:e9:08:49:06:ca:
81:36:13:fb:23:32:37:9f:dc:50:e6:69:7e:9d:36:02:f3:31:
2e:3d:4b:c2:74:03:4b:f7:78:e7:5a:67:ac:ed:a1:0a:c2:a7:
1b:93:53:d2:87:70:5f:8e:82:32:b2:bb:c5:93:ac:73:b1:c7:
64:dc:cc:dc:38:92:a4:a2:44:0d:60:6f:ad:7a:3f:52:9e:a0:
6e:09:7f:b7:d0:95:73:2e:a4:d9:03:26:95:c7:a1:0f:70:8c:
d4:d6:f3:ad:57:8b:92:2d:2d:55:ac:2a:67:7b:0f:43:06:36:
cc:a8:87:da:0b:4b:69:fc:53:8d:5e:55:f1:65:b4:d3:77:e9:
a8:47:f3:ea:95:c8:1c:63:1c:17:54:19:c2:64:c1:3e:52:e5:
43:70:8e:93:c6:8f:10:f6:69:aa:c2:b6:1b:96:22:9c:7f:70:
82:23:91:43:f3:b8:3e:e1:21:01:6d:66:4c:42:c1:41:bc:bf:
2e:30:83:ca:f6:95:a2:55:1f:43:77:c7:1d:9c:b5:c7:c2:e4:
cd:30:7a:e2:74:4e:e8:a6:78:ff:69:4f:1e:55:81:d3:8f:01:
b8:de:6a:39:7e:cd:94:7f:72:9c:25:43:12:07:59:07:eb:06:
53:63:47:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:20:37 2026 by rpki-client