Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E530618633611F1AAAEBBB7CE1D38B0.roa
File: 3E530618633611F1AAAEBBB7CE1D38B0.roa (raw, json)
Hash identifier: o9/SGgPuBH5SRDK75n1toFNK/NlziqnpyfcWljcgw7c=
Subject key identifier: 3D:56:0B:7C:42:E0:9A:3F:EE:B3:00:06:21:11:CA:C5:CF:7D:14:60
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D240
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E530618633611F1AAAEBBB7CE1D38B0.roa
Signing time: Mon 08 Jun 2026 12:33:25 +0000
ROA not before: Mon 08 Jun 2026 12:33:21 +0000
ROA not after: Thu 08 Jul 2027 12:33:21 +0000
asID: 328888
IP address blocks: 154.198.56.0/24 maxlen: 24
154.198.57.0/24 maxlen: 24
154.198.59.0/24 maxlen: 24
154.198.61.0/24 maxlen: 24
154.198.62.0/24 maxlen: 24
154.198.165.0/24 maxlen: 24
154.198.166.0/24 maxlen: 24
154.198.167.0/24 maxlen: 24
154.198.174.0/24 maxlen: 24
154.200.207.0/24 maxlen: 24
154.200.208.0/24 maxlen: 24
154.200.209.0/24 maxlen: 24
154.200.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119360 (0x1d240)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 8 12:33:21 2026 GMT
Not After : Jul 8 12:33:21 2027 GMT
Subject: CN=6a26b695-70d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4f:39:03:20:99:30:cb:44:67:ba:ca:34:56:
89:40:8e:05:f9:b8:0c:ae:24:45:57:1f:5d:23:ec:
e5:e4:ae:04:02:66:c5:ff:13:19:66:35:f0:e7:8c:
aa:e5:69:27:bf:17:a0:dc:a5:17:7c:a9:44:57:a4:
75:98:91:a7:18:94:5e:66:ef:0c:f5:81:47:c6:d3:
a7:10:41:44:fc:35:a8:5a:d2:e4:80:ce:ae:14:78:
10:bb:21:5b:1e:cf:4d:a3:6b:d1:31:95:6a:28:b0:
e9:25:2a:a2:ca:66:ab:d3:5c:28:05:a6:4a:f8:f1:
80:6f:9a:bf:7a:95:ea:9f:bc:4b:f2:32:7c:aa:71:
5b:a4:67:89:36:f7:21:cd:19:e8:20:d1:df:5c:12:
03:57:d8:1b:5e:f8:92:4b:86:b2:6a:0d:56:6f:4e:
7b:20:0d:c0:46:13:f3:a8:84:57:41:b3:73:c9:50:
8e:0c:38:a0:32:48:08:40:3d:1f:46:62:9a:fd:6a:
ea:96:e3:8a:03:42:fd:ef:64:f8:6f:47:a4:65:e4:
21:f0:fa:70:4e:be:9e:5c:f7:c8:7e:58:ce:9c:7d:
fd:a6:68:8f:87:d1:5d:2e:b7:9b:c9:31:f2:3d:3f:
bd:b5:0f:91:39:bc:90:6f:44:a2:70:e3:a5:95:21:
b1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:56:0B:7C:42:E0:9A:3F:EE:B3:00:06:21:11:CA:C5:CF:7D:14:60
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3E530618633611F1AAAEBBB7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.56.0/23
154.198.59.0/24
154.198.61.0-154.198.62.255
154.198.165.0-154.198.167.255
154.198.174.0/24
154.200.207.0-154.200.210.255
Signature Algorithm: sha256WithRSAEncryption
90:48:f2:ae:ad:fe:0f:55:17:8f:3a:0c:a5:f4:89:cb:a4:9f:
a3:82:b1:ee:7e:59:6f:d2:e3:d3:0a:c8:b7:2f:cc:1e:8d:a7:
aa:d2:98:61:c3:e6:ea:3f:19:62:10:9b:65:e8:3d:2f:f7:c5:
59:49:70:44:96:28:d8:5d:08:59:ea:85:1f:84:24:05:4d:4a:
80:ee:df:d2:12:d6:1a:30:a9:e7:af:c1:f0:85:8b:b4:8f:e4:
39:07:16:c4:8d:3b:1d:2e:33:83:b1:4e:15:80:f3:4e:08:d1:
40:d6:78:2e:df:32:7f:cc:c4:96:bd:2c:09:21:d0:29:e2:4d:
fc:28:cb:0c:d9:45:0b:a9:38:6c:02:84:87:49:6a:79:de:af:
e9:8a:41:2f:2a:b4:22:20:6a:57:07:27:ca:34:40:06:7f:f6:
85:a2:24:11:5e:2c:fb:14:51:4b:0a:bd:2e:a9:c8:52:0d:86:
b5:66:4f:f1:37:89:eb:f6:02:6e:fa:ba:71:f6:67:04:22:da:
8d:7c:76:f2:9f:9a:4c:21:6e:ef:7b:bb:2d:2d:72:74:ff:d9:
0c:f9:1a:2f:e1:63:70:2a:e4:2f:32:67:12:06:2d:f7:bc:49:
10:b4:6b:f5:9e:7b:8f:40:2d:9a:3d:d1:e6:4a:ea:c9:56:f8:
24:6c:54:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:20:20 2026 by rpki-client