Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3492090264A911F189415307CF1D38B0.roa
File: 3492090264A911F189415307CF1D38B0.roa (raw, json)
Hash identifier: KASp9awi0sO85JZDcaL0di1/a/J/n92kBR5/aD74d6U=
Subject key identifier: E6:87:C1:4F:C2:38:C7:4E:8E:B6:D5:75:60:1B:82:D6:D1:35:B4:D5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D260
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3492090264A911F189415307CF1D38B0.roa
Signing time: Wed 10 Jun 2026 08:48:52 +0000
ROA not before: Wed 10 Jun 2026 08:48:44 +0000
ROA not after: Fri 10 Jul 2026 08:48:44 +0000
asID: 141883
IP address blocks: 154.204.0.0/24 maxlen: 24
154.208.12.0/22 maxlen: 24
154.208.16.0/20 maxlen: 24
154.212.128.0/24 maxlen: 24
154.215.0.0/24 maxlen: 24
154.218.0.0/24 maxlen: 24
154.221.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119392 (0x1d260)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 10 08:48:44 2026 GMT
Not After : Jul 10 08:48:44 2026 GMT
Subject: CN=6a2924f4-e54b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2a:fc:8b:61:82:8c:66:98:e1:f5:cd:39:c7:
c8:e1:84:5d:54:59:8a:9b:a9:ef:f9:fb:34:37:f0:
e5:f2:d1:fc:81:81:c6:c1:46:40:96:c7:fa:45:19:
9a:3e:4f:6b:61:a1:85:ed:f6:f5:42:49:11:2b:34:
af:f5:36:ff:0e:64:c6:55:27:7c:db:33:c8:49:34:
eb:20:39:05:b0:95:fa:8d:36:37:cf:d4:3f:8b:b0:
96:2e:b4:89:74:5c:7d:d3:b3:40:10:3b:30:17:1f:
4f:07:d8:ea:bf:64:78:0a:2a:db:93:e1:e2:73:df:
07:6a:c2:95:03:0f:9e:a2:62:48:8c:96:ce:0e:df:
75:6b:cf:4f:a3:b4:65:23:74:44:54:27:19:fc:42:
c2:5f:30:91:80:47:08:ae:fd:0b:8a:fe:2f:b7:8c:
87:6f:06:b5:ff:e5:5b:dc:d8:31:33:35:e9:cd:dd:
c6:af:e8:84:c0:f6:d9:6f:ec:e9:3c:8c:19:f7:62:
84:55:fb:11:19:34:95:5c:79:0a:fc:4b:31:f9:22:
20:f9:47:18:dd:07:3c:33:c1:75:0f:5b:73:de:cb:
7c:af:71:94:0f:57:2d:8a:21:c2:83:c5:7c:61:6d:
bc:ad:9e:e5:68:c5:99:e4:d0:2f:88:6a:c3:2b:1c:
5a:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:87:C1:4F:C2:38:C7:4E:8E:B6:D5:75:60:1B:82:D6:D1:35:B4:D5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3492090264A911F189415307CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.0.0/24
154.208.12.0-154.208.31.255
154.212.128.0/24
154.215.0.0/24
154.218.0.0/24
154.221.0.0/24
Signature Algorithm: sha256WithRSAEncryption
54:9c:b5:25:7e:27:c4:12:6d:60:2a:71:f0:73:a6:5a:f2:30:
83:d5:d8:6a:d6:38:ae:b2:53:53:7c:a5:a7:f7:27:c6:c8:bc:
9c:2b:40:bc:da:76:22:52:c5:7f:b0:d3:75:c2:35:5f:22:9f:
f7:c8:66:fb:71:c5:2f:5a:6f:f7:c3:f8:ba:d0:3a:93:84:8f:
df:18:d4:da:dd:5f:70:a6:e1:b9:31:ce:5a:ab:98:35:17:0c:
d2:74:2a:62:c8:6d:a1:9c:b0:37:9e:b9:38:9a:dc:88:9a:73:
66:d7:40:38:a5:51:25:87:54:5f:64:3c:0c:68:ea:3d:00:6c:
39:5a:c6:e4:cc:90:0c:69:7b:40:c1:3b:f5:a4:17:d5:40:3d:
60:42:8d:87:8e:c5:f2:c2:50:1a:95:19:3b:04:52:6c:20:42:
28:2c:e6:0c:4d:30:d1:0d:28:7d:ea:d6:c4:57:74:e4:e5:83:
fd:df:3a:a7:17:91:d6:b4:aa:ec:28:28:d6:1b:8a:06:41:90:
d0:d6:92:08:7c:df:63:b3:a0:54:8c:67:36:37:1e:ff:d6:fa:
7d:c5:53:86:e9:20:be:76:87:9c:d9:4e:09:9d:01:7c:db:bb:
3e:9f:f0:96:45:09:c7:35:58:59:af:8a:a2:c9:36:f1:e1:79:
14:8b:16:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:20:23 2026 by rpki-client