Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/469E642E5BA311F18A2D251DCF1D38B0.roa
File: 469E642E5BA311F18A2D251DCF1D38B0.roa (raw, json)
Hash identifier: MAMX14Du1IYOWXxC8nhGLYqxdMjeQeh2QwkOPeKXqKo=
Subject key identifier: AD:D6:3A:BA:26:05:CF:D1:C9:83:24:33:3F:C1:88:C2:B3:62:77:0D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D093
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/469E642E5BA311F18A2D251DCF1D38B0.roa
Signing time: Fri 29 May 2026 21:13:45 +0000
ROA not before: Fri 29 May 2026 21:13:40 +0000
ROA not after: Wed 01 Jul 2026 21:13:40 +0000
asID: 62240
IP address blocks: 154.195.124.0/24 maxlen: 24
154.195.135.0/24 maxlen: 24
154.195.136.0/24 maxlen: 24
154.195.137.0/24 maxlen: 24
154.195.138.0/24 maxlen: 24
154.195.140.0/24 maxlen: 24
154.196.29.0/24 maxlen: 24
154.196.32.0/24 maxlen: 24
154.196.34.0/24 maxlen: 24
154.196.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118931 (0x1d093)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 29 21:13:40 2026 GMT
Not After : Jul 1 21:13:40 2026 GMT
Subject: CN=6a1a0189-71b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1d:94:8e:14:ba:ff:5f:55:a5:22:3c:bf:6f:
3a:51:20:7d:87:fc:97:70:9e:e1:c2:93:ce:43:34:
12:98:5c:87:3a:b2:0d:49:21:75:f4:06:fc:cd:7a:
c8:eb:5e:5e:a9:a0:aa:78:4c:e8:5b:35:d9:34:13:
e4:6e:b8:8a:25:99:54:52:e2:9c:fc:77:66:5c:e0:
e3:27:8d:4b:18:9c:b1:4a:47:95:79:4a:9b:1c:db:
55:a3:c2:41:11:f7:eb:e2:63:9f:33:94:94:e1:95:
ac:08:9c:cf:e7:62:48:4a:5f:f5:fd:05:7a:81:d2:
be:ed:ba:8f:de:c6:d5:f3:b9:7b:e9:f8:66:8d:7d:
09:a0:c8:7f:50:50:81:a2:38:b9:26:b2:5b:0b:f9:
6b:df:2b:97:ae:fe:7e:03:cc:54:22:aa:ed:1a:71:
30:21:02:27:22:ba:a6:b4:fd:91:eb:27:af:11:9d:
a4:f8:00:c0:14:55:f8:f2:0a:fa:2b:f6:82:6b:b2:
f8:ec:6f:53:3c:c8:c0:14:5a:81:f4:45:19:9b:3c:
0d:07:27:3a:01:ad:7f:13:f0:b0:65:36:55:4f:fd:
56:6c:08:79:bb:f1:d5:16:c1:e8:52:1a:80:c7:91:
85:fa:ac:d3:b9:fd:fc:26:4d:fd:c8:03:06:c8:9b:
3b:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:D6:3A:BA:26:05:CF:D1:C9:83:24:33:3F:C1:88:C2:B3:62:77:0D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/469E642E5BA311F18A2D251DCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.124.0/24
154.195.135.0-154.195.138.255
154.195.140.0/24
154.196.29.0/24
154.196.32.0/24
154.196.34.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:24:d9:c0:9f:2b:c0:fe:c6:2e:68:a0:a7:08:de:ef:ad:cd:
d0:21:75:a0:91:34:f8:51:8f:a4:7d:c6:c2:ff:eb:a5:29:72:
a0:ab:b5:7c:3c:5f:5e:80:7c:93:6f:a2:a8:4b:76:ba:bc:f4:
1a:7c:28:a8:54:c1:59:55:92:ef:62:de:ef:51:1c:72:86:54:
b3:5b:4c:98:27:16:8c:c2:82:ba:3d:aa:9c:70:2d:a7:66:f3:
e5:31:c5:9c:32:e5:a6:16:36:0e:10:a9:5f:90:25:1f:36:97:
d5:59:b0:ef:76:86:36:f7:b1:56:97:5a:4d:7a:1f:59:b1:6e:
66:2f:aa:c3:25:47:e3:d6:0b:bd:21:80:85:ab:5e:03:9e:e7:
dc:a9:a1:98:a3:24:dc:02:4e:a3:02:12:f8:4d:20:e8:a2:5c:
e3:72:29:ca:d6:fc:d2:ed:b5:e2:25:8c:b9:45:a4:29:c3:10:
9f:45:f7:d8:68:f1:99:5e:13:01:49:81:56:bc:0a:4b:21:7d:
4b:26:09:5f:f7:71:67:ca:5a:80:90:e6:1a:d5:e3:48:20:72:
7d:38:25:06:36:51:9b:82:18:a7:20:72:cd:20:f7:0c:b9:7f:
ee:87:ed:60:7e:13:29:e2:78:44:c8:4b:18:d4:5d:92:e2:8c:
27:dd:57:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:05:59 2026 by rpki-client