Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/020B2FF6527D11F19291CDF9CE1D38B0.roa
File: 020B2FF6527D11F19291CDF9CE1D38B0.roa (raw, json)
Hash identifier: +FQZdNFPOkfgtZ6XmdvO6Jn4oQ6JswpuXnhNFRRiB08=
Subject key identifier: 55:15:70:28:15:0E:1A:EC:DB:B6:37:B0:0D:F8:47:54:07:65:19:AA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CC41
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/020B2FF6527D11F19291CDF9CE1D38B0.roa
Signing time: Mon 18 May 2026 05:47:09 +0000
ROA not before: Mon 18 May 2026 05:47:04 +0000
ROA not after: Sat 08 Aug 2026 05:47:04 +0000
asID: 137443
IP address blocks: 154.223.168.0/24 maxlen: 24
154.223.169.0/24 maxlen: 24
154.223.170.0/24 maxlen: 24
154.223.171.0/24 maxlen: 24
154.223.176.0/24 maxlen: 24
154.223.177.0/24 maxlen: 24
154.223.178.0/24 maxlen: 24
154.223.179.0/24 maxlen: 24
154.223.180.0/24 maxlen: 24
154.223.181.0/24 maxlen: 24
154.223.182.0/24 maxlen: 24
154.223.183.0/24 maxlen: 24
154.223.188.0/24 maxlen: 24
154.223.189.0/24 maxlen: 24
154.223.190.0/24 maxlen: 24
154.223.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117825 (0x1cc41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 18 05:47:04 2026 GMT
Not After : Aug 8 05:47:04 2026 GMT
Subject: CN=6a0aa7dd-2623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ae:c8:bc:b5:ad:9a:fd:44:fa:61:be:2c:2a:
c5:c6:b1:7e:a6:59:c3:7d:58:c4:a6:20:3c:28:7e:
8d:f0:27:3c:9f:70:e2:37:b0:56:dd:68:2f:3a:93:
d8:05:8c:fa:0c:8d:03:d9:70:14:35:d5:14:4d:54:
67:00:a8:39:eb:9d:97:13:ad:79:12:05:02:e4:8f:
9e:80:be:31:d0:37:e3:dd:72:b1:22:3f:c8:d4:a7:
64:fe:71:7c:5e:ad:5f:0d:50:eb:84:1f:eb:3b:f0:
78:ce:84:64:a1:b5:72:a0:e7:d5:af:3b:89:4d:2b:
22:79:18:c2:c5:c8:f6:93:93:44:d0:14:c6:81:46:
42:d1:9d:56:af:d4:30:ee:50:f1:f7:dd:91:dc:fe:
6b:00:d0:18:9a:1d:7e:5b:ab:45:b5:b6:75:79:dc:
c3:26:d5:63:a2:82:1b:aa:d1:b5:f4:3e:e8:2a:ce:
73:ba:d3:2e:3b:bd:cf:52:06:f6:dd:6c:90:28:1b:
37:6d:54:e6:29:3b:20:76:7e:a3:b7:ae:37:6f:3c:
f6:8a:a2:11:b0:74:71:66:fb:19:11:24:be:64:74:
17:60:fc:11:17:c4:dc:32:f2:e6:8e:9b:62:9b:83:
a2:8b:2f:2d:8c:fe:70:8d:89:48:56:94:3e:93:1b:
fb:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:15:70:28:15:0E:1A:EC:DB:B6:37:B0:0D:F8:47:54:07:65:19:AA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/020B2FF6527D11F19291CDF9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.168.0/22
154.223.176.0/21
154.223.188.0/22
Signature Algorithm: sha256WithRSAEncryption
93:1a:d3:5e:fc:88:ad:16:ad:70:62:54:22:d1:ef:f5:3a:45:
ab:ae:ee:6a:62:a4:26:d3:bd:ef:c7:c5:7c:4a:a9:4e:af:d4:
79:d3:cf:de:aa:aa:d0:40:7b:b2:c0:87:13:26:b0:d2:8f:29:
d3:49:70:b4:1a:29:72:0a:38:a9:d8:e5:a3:7d:52:58:0b:19:
96:b6:3b:b4:92:cc:85:ae:5a:ea:3d:6c:9d:3c:25:35:6a:3f:
35:b2:c1:5a:6b:fc:92:b5:ca:55:e7:1b:13:5b:bf:1b:a5:c6:
dd:4f:67:0f:8a:97:54:59:2f:7a:7f:6f:10:23:36:3b:ca:20:
61:81:0d:0f:43:1f:ed:17:87:6e:7c:27:d4:77:10:23:f3:d9:
ae:6b:3c:04:8b:e8:b1:5e:43:18:b2:07:9c:65:77:fa:d6:1b:
4e:46:b1:82:85:e5:85:67:32:c0:c1:f2:1e:74:0e:75:7d:47:
eb:62:6c:ad:e1:74:a0:aa:97:be:51:9f:b9:a1:5e:a9:09:6c:
f8:1a:94:60:fc:2e:6b:05:af:b9:23:9a:69:26:21:1d:1d:db:
59:a5:c6:f0:8f:e6:2d:e6:f6:55:ea:a0:07:47:64:7b:d4:3e:
9a:3d:f1:ec:0a:46:c2:65:cc:dd:54:06:1a:7f:f9:17:1d:81:
50:df:e6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:52:54 2026 by rpki-client