Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49B25AF25BC711F1B147BFF5CE1D38B0.roa
File: 49B25AF25BC711F1B147BFF5CE1D38B0.roa (raw, json)
Hash identifier: Sv38rHPZ3G0ZyUXkuBdswnN4ZXZNxjZFrg5m14DyqKU=
Subject key identifier: E1:EF:64:18:38:B1:0C:DE:29:46:E4:E6:02:5B:07:18:1C:D6:E5:9C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D0C6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49B25AF25BC711F1B147BFF5CE1D38B0.roa
Signing time: Sat 30 May 2026 01:31:32 +0000
ROA not before: Sat 30 May 2026 01:31:27 +0000
ROA not after: Wed 01 Jul 2026 01:31:27 +0000
asID: 62240
IP address blocks: 154.194.126.0/24 maxlen: 24
154.195.3.0/24 maxlen: 24
154.195.97.0/24 maxlen: 24
154.195.98.0/24 maxlen: 24
154.195.99.0/24 maxlen: 24
154.195.101.0/24 maxlen: 24
154.196.79.0/24 maxlen: 24
154.196.80.0/24 maxlen: 24
154.196.81.0/24 maxlen: 24
154.196.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118982 (0x1d0c6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 30 01:31:27 2026 GMT
Not After : Jul 1 01:31:27 2026 GMT
Subject: CN=6a1a3df4-475a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a7:5e:37:b8:02:28:8a:93:64:59:49:78:d5:
2b:32:ee:1e:f8:77:d8:5b:40:eb:4c:db:6e:5e:a2:
ae:cb:01:e7:31:69:4b:f2:5f:66:4e:eb:8d:30:38:
c4:1d:b6:5c:10:7e:76:31:4b:62:ed:ef:90:ca:a3:
f3:24:e7:5c:ba:ef:86:e7:41:d6:4a:dd:f4:18:b2:
c0:90:2a:0b:e0:d3:00:a1:0e:ba:6d:fa:39:d2:6d:
7f:d1:ed:b5:2f:7a:20:4b:e0:e0:39:41:b5:67:e3:
e9:65:4e:5e:2a:8f:4e:1c:ee:74:71:8b:99:93:28:
58:bc:32:00:1f:d2:8b:ee:a6:4e:50:6b:5f:98:78:
80:e5:ed:44:79:0a:69:3e:f1:b9:a4:7a:72:65:7d:
13:72:fd:63:c4:c9:20:9e:23:59:b1:99:ae:4d:ed:
8a:14:48:91:1e:32:05:a0:c6:9b:0e:4d:5b:d6:20:
a0:38:ba:35:c7:a8:4d:ee:6b:1b:78:92:c2:87:68:
28:38:05:3a:4d:d1:25:63:c8:7f:8a:3c:dd:7e:84:
a1:f7:a5:40:e5:bb:46:7c:99:3c:0f:dd:b0:0d:71:
ba:00:f3:26:27:ca:ae:19:05:54:81:43:1c:80:c5:
e7:fa:47:e7:1e:c5:97:9c:35:24:c2:b2:3b:ea:5a:
42:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:EF:64:18:38:B1:0C:DE:29:46:E4:E6:02:5B:07:18:1C:D6:E5:9C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49B25AF25BC711F1B147BFF5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.126.0/24
154.195.3.0/24
154.195.97.0-154.195.99.255
154.195.101.0/24
154.196.79.0-154.196.81.255
154.196.87.0/24
Signature Algorithm: sha256WithRSAEncryption
67:8f:06:5c:92:0e:35:b9:44:fe:48:54:a0:13:5b:82:8f:4e:
0a:26:03:94:1f:53:9a:a7:a5:95:e0:2f:7a:4e:6c:72:44:0e:
68:6f:06:6c:97:0b:9b:30:93:9c:0d:fc:a0:dc:2d:36:19:90:
59:27:7f:6c:7e:d4:fb:a7:49:e5:77:0e:94:5a:89:ab:2e:1d:
68:f5:80:d8:91:7d:d4:4f:28:f3:84:67:75:a4:40:6d:50:97:
4e:f2:16:71:a7:68:4d:cd:09:a6:1f:6e:5f:29:86:4b:cd:aa:
b8:92:89:19:ca:39:9e:5f:86:8f:a9:c0:bb:61:74:20:d4:97:
ca:e0:0b:d7:2a:4d:1c:e4:0c:c7:9f:c6:e1:b4:8b:5f:51:9a:
84:2f:73:72:20:39:4b:13:4f:17:e4:78:0d:cc:6f:a3:2b:9b:
e7:60:31:6f:1e:54:99:dc:f5:90:c0:16:5d:8d:71:b3:5c:da:
de:13:20:3e:aa:85:11:6d:d5:67:9a:db:dd:61:74:45:60:4b:
de:58:35:99:1c:46:40:39:8e:6a:02:dc:df:bd:d0:db:a3:ea:
43:cb:2b:8b:d0:22:87:dc:8b:bd:82:02:98:13:eb:f7:a9:9b:
f3:e5:6f:29:fe:9a:1a:2a:7e:17:f2:f4:23:ff:d7:d6:18:6b:
53:07:eb:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:12:27 2026 by rpki-client