Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/71743ABA647311F1913457B5CE1D38B0.roa
File: 71743ABA647311F1913457B5CE1D38B0.roa (raw, json)
Hash identifier: koh7dWRHfdXrNQawbTrOZ++KTdKxg/u5ktxtukzIwdg=
Subject key identifier: 0E:D8:ED:2E:AF:3F:A3:FA:39:F2:D2:68:E4:C1:90:47:CC:C0:EE:F3
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D250
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/71743ABA647311F1913457B5CE1D38B0.roa
Signing time: Wed 10 Jun 2026 02:24:02 +0000
ROA not before: Wed 10 Jun 2026 02:23:57 +0000
ROA not after: Wed 17 Jun 2026 02:23:57 +0000
asID: 61112
IP address blocks: 154.83.83.0/24 maxlen: 24
154.83.84.0/22 maxlen: 24
154.83.88.0/21 maxlen: 24
154.83.90.0/24 maxlen: 24
154.83.91.0/24 maxlen: 24
154.83.92.0/22 maxlen: 24
154.83.96.0/23 maxlen: 24
154.83.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119376 (0x1d250)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 10 02:23:57 2026 GMT
Not After : Jun 17 02:23:57 2026 GMT
Subject: CN=6a28cac1-8cf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e4:fa:83:8e:95:b2:70:74:c6:1c:aa:73:e4:
18:1e:81:bc:c7:f2:db:ac:8b:f1:6f:7a:3e:52:54:
bb:96:bb:1f:c9:15:58:10:a7:a8:de:71:bc:92:27:
28:39:5f:4d:9f:6d:12:9c:5b:de:e6:ab:1b:fa:e2:
63:b4:b5:21:d1:b2:5d:ca:02:26:1b:a2:a1:1c:ed:
4d:dd:79:5d:bb:ab:af:76:f2:58:e4:33:4c:76:c0:
79:bb:db:8b:99:e8:bc:c7:a7:2b:73:79:43:d9:56:
29:46:3b:f8:83:c3:0b:88:18:83:0f:e7:d0:24:dd:
67:20:90:a5:78:04:2c:91:e7:fa:80:05:dd:89:d7:
fc:24:27:d8:ce:7e:85:87:12:d3:9a:37:5d:fb:77:
68:22:8e:c8:c1:e8:22:55:71:c2:97:87:f7:46:1e:
17:09:a4:e7:d6:a5:66:09:88:f4:78:41:49:92:fc:
e4:2c:5f:83:f6:58:51:1d:c4:32:01:ca:d0:1c:73:
f7:ff:f4:87:46:fb:46:ef:a4:f6:2c:35:69:45:6a:
50:8b:d4:4e:39:df:3a:d7:69:9a:82:10:e9:6c:8a:
5b:fb:bb:38:e5:cb:e8:8e:ee:54:ba:1f:0b:06:00:
4b:90:ad:e0:54:df:95:04:de:6c:d0:67:ef:aa:07:
ed:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D8:ED:2E:AF:3F:A3:FA:39:F2:D2:68:E4:C1:90:47:CC:C0:EE:F3
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/71743ABA647311F1913457B5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.83.0-154.83.98.255
Signature Algorithm: sha256WithRSAEncryption
5a:d3:62:86:35:8d:62:73:4a:62:90:40:d5:18:e5:c6:87:dc:
f7:f2:1c:3c:da:b7:f6:10:45:b1:01:8d:65:6d:83:ec:86:98:
fe:d6:ca:6b:73:4f:6c:2f:86:4f:52:c2:9d:7e:3b:b3:3f:86:
a4:da:0d:8d:0a:56:75:a9:6e:20:9f:f6:ed:27:8d:0c:a1:8c:
92:e3:f3:0c:b2:1e:39:15:bf:56:6b:26:35:24:b4:6f:95:42:
38:d1:a7:41:16:de:6e:41:99:71:aa:76:0f:6a:d8:a5:8d:16:
0d:b3:b9:27:9b:c5:66:7d:65:c9:a6:e4:ff:ed:b3:4f:26:2c:
ce:9c:76:c2:fc:69:40:60:b4:74:80:fe:23:b2:37:28:7e:5a:
cf:65:b8:d6:e9:f7:c8:5e:4c:53:5f:5e:0f:21:0d:64:17:61:
39:5c:ea:6a:52:33:a9:69:49:9a:ac:eb:bf:0c:5a:a3:8b:1b:
cc:b5:47:4c:7f:43:cd:47:38:b2:e9:a8:7e:17:4a:9f:30:93:
fa:37:f5:3d:ae:3f:d8:28:c0:a6:a2:c9:10:4d:27:32:c9:7e:
c1:32:42:c0:18:1f:3d:04:a4:b5:20:0b:32:68:33:80:81:d0:
69:cd:d9:f0:dc:e0:8d:ac:7a:88:fa:f2:79:ce:c6:ac:71:ce:
89:71:0a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:53:37 2026 by rpki-client