Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/386373B862F611F1BF9BD4B5CE1D38B0.roa
File: 386373B862F611F1BF9BD4B5CE1D38B0.roa (raw, json)
Hash identifier: VLOZ62HcUyrnT0gMKhuDb++75+Iih9rgRFhtTUS2EvA=
Subject key identifier: 4A:75:68:B8:E5:D7:64:FA:20:9D:FD:4E:97:83:E9:64:BC:32:F2:B2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D234
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/386373B862F611F1BF9BD4B5CE1D38B0.roa
Signing time: Mon 08 Jun 2026 04:55:08 +0000
ROA not before: Mon 08 Jun 2026 04:55:02 +0000
ROA not after: Tue 16 Jun 2026 04:55:02 +0000
asID: 399077
IP address blocks: 154.211.64.0/18 maxlen: 24
154.211.64.0/24 maxlen: 24
154.211.65.0/24 maxlen: 24
154.211.66.0/24 maxlen: 24
154.211.67.0/24 maxlen: 24
154.211.68.0/24 maxlen: 24
154.211.69.0/24 maxlen: 24
154.211.70.0/24 maxlen: 24
154.211.72.0/24 maxlen: 24
154.211.73.0/24 maxlen: 24
154.211.74.0/24 maxlen: 24
154.211.75.0/24 maxlen: 24
154.211.76.0/24 maxlen: 24
154.211.77.0/24 maxlen: 24
154.211.78.0/24 maxlen: 24
154.211.79.0/24 maxlen: 24
154.211.80.0/24 maxlen: 24
154.211.81.0/24 maxlen: 24
154.211.82.0/24 maxlen: 24
154.211.83.0/24 maxlen: 24
154.211.84.0/24 maxlen: 24
154.211.85.0/24 maxlen: 24
154.211.86.0/24 maxlen: 24
154.211.87.0/24 maxlen: 24
154.211.88.0/24 maxlen: 24
154.211.89.0/24 maxlen: 24
154.211.90.0/24 maxlen: 24
154.211.91.0/24 maxlen: 24
154.211.92.0/24 maxlen: 24
154.211.93.0/24 maxlen: 24
154.211.94.0/24 maxlen: 24
154.211.95.0/24 maxlen: 24
154.211.96.0/24 maxlen: 24
154.211.97.0/24 maxlen: 24
154.211.98.0/24 maxlen: 24
154.211.99.0/24 maxlen: 24
154.211.100.0/24 maxlen: 24
154.211.101.0/24 maxlen: 24
154.211.102.0/24 maxlen: 24
154.211.103.0/24 maxlen: 24
154.211.104.0/24 maxlen: 24
154.211.105.0/24 maxlen: 24
154.211.106.0/24 maxlen: 24
154.211.107.0/24 maxlen: 24
154.211.108.0/24 maxlen: 24
154.211.109.0/24 maxlen: 24
154.211.110.0/24 maxlen: 24
154.211.111.0/24 maxlen: 24
154.211.112.0/24 maxlen: 24
154.211.113.0/24 maxlen: 24
154.211.114.0/24 maxlen: 24
154.211.115.0/24 maxlen: 24
154.211.116.0/24 maxlen: 24
154.211.117.0/24 maxlen: 24
154.211.118.0/24 maxlen: 24
154.211.119.0/24 maxlen: 24
154.211.120.0/24 maxlen: 24
154.211.121.0/24 maxlen: 24
154.211.122.0/24 maxlen: 24
154.211.123.0/24 maxlen: 24
154.211.124.0/24 maxlen: 24
154.211.125.0/24 maxlen: 24
154.211.126.0/24 maxlen: 24
154.211.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119348 (0x1d234)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 8 04:55:02 2026 GMT
Not After : Jun 16 04:55:02 2026 GMT
Subject: CN=6a264b2b-2841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1b:88:91:27:63:fd:00:c3:17:dc:c2:08:83:
c9:a5:7d:8f:b4:01:92:2f:9d:4f:b1:9b:dc:ed:3b:
f6:2a:5f:e4:00:bc:b2:7f:e3:a3:80:cc:41:da:93:
7f:72:7d:4b:a1:2f:04:26:43:f3:6d:82:c6:ab:11:
f1:6a:9a:32:79:6b:36:14:0b:2a:31:de:29:42:6d:
9e:9a:07:a1:05:41:4d:0f:3c:0d:cf:1d:2c:e0:05:
46:df:f0:52:73:5e:bf:57:32:75:cf:0e:61:bc:eb:
a7:fa:62:7f:a9:4d:8f:e8:01:14:e0:2a:a4:93:5a:
cb:1d:71:c1:ff:5c:be:29:16:4c:bf:9b:b7:4a:c6:
4f:a6:90:4c:51:b4:b6:e6:09:c7:b9:5c:9c:90:54:
78:41:57:59:6c:a7:7c:20:79:b4:9a:0b:5a:e4:62:
60:25:5b:9e:0b:6c:96:08:b5:2d:e7:c8:c3:d1:52:
5d:0c:42:a5:cc:58:36:e3:7b:30:5c:5d:59:4f:2f:
9d:e3:8d:fa:62:98:59:17:7e:87:71:88:00:96:e5:
76:6e:ab:ac:c7:04:4d:c9:dd:38:6c:74:c1:ca:20:
c1:78:2a:db:b6:c5:c3:e9:f7:82:30:f9:76:f2:45:
bc:59:6f:76:3f:46:4d:7f:83:41:72:d4:ef:65:04:
29:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:75:68:B8:E5:D7:64:FA:20:9D:FD:4E:97:83:E9:64:BC:32:F2:B2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/386373B862F611F1BF9BD4B5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.211.64.0/18
Signature Algorithm: sha256WithRSAEncryption
52:37:63:48:63:11:72:a5:34:f9:e5:ee:9b:c6:55:81:65:05:
19:e3:09:0e:c6:31:8f:d2:f0:6c:53:89:14:6e:ff:43:7a:b6:
d6:b6:56:e8:fd:ad:6c:14:a9:10:93:b9:18:2f:73:a5:2d:0a:
22:97:b2:d6:61:ff:1f:cb:07:24:44:d7:03:7f:04:4c:c9:1b:
5a:eb:d3:a4:11:22:e0:34:a5:bd:95:e7:0e:56:98:0a:3b:ac:
f9:e1:ec:c2:a5:30:45:79:8f:79:a0:d8:b3:df:4e:38:18:05:
fb:90:b1:4c:6f:ed:e7:34:29:02:9e:91:c5:12:fa:88:17:d9:
a9:1a:1f:bd:16:52:0d:be:8c:62:b7:1e:27:b0:ac:7f:72:84:
a4:27:93:aa:cc:34:6e:f3:39:b1:68:83:de:99:a9:18:a0:12:
8b:4a:b1:de:ba:3f:4b:c0:45:5e:a6:ba:39:b3:c2:68:18:ee:
87:6c:ba:eb:77:7c:14:ac:61:c1:3f:77:a1:38:2f:cf:64:19:
7e:43:dc:89:51:5c:83:be:45:1b:98:fc:73:75:73:18:8c:7d:
9c:15:7f:31:d0:f7:1f:32:84:9b:fd:bd:20:b2:a6:42:10:12:
32:70:d6:df:3f:c7:b7:fc:ea:f2:d8:ab:96:41:63:dd:d2:f6:
68:7e:ff:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:54:36 2026 by rpki-client