Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/876EDFAA599711F1B0EE6CC4CE1D38B0.roa
File: 876EDFAA599711F1B0EE6CC4CE1D38B0.roa (raw, json)
Hash identifier: QKqTrSZiJYCLxGPAOux69kALHAgtS/AFT53jOKGDZmM=
Subject key identifier: 95:7F:4A:9D:90:32:78:C4:FC:83:EC:B7:F9:F8:14:26:DC:79:5E:FE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CFDE
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/876EDFAA599711F1B0EE6CC4CE1D38B0.roa
Signing time: Wed 27 May 2026 06:44:38 +0000
ROA not before: Wed 27 May 2026 06:44:33 +0000
ROA not after: Fri 04 Sep 2026 06:44:33 +0000
asID: 18229
IP address blocks: 154.210.135.0/24 maxlen: 24
154.210.136.0/24 maxlen: 24
154.210.137.0/24 maxlen: 24
154.210.138.0/24 maxlen: 24
154.210.139.0/24 maxlen: 24
154.210.140.0/24 maxlen: 24
154.210.141.0/24 maxlen: 24
154.210.142.0/24 maxlen: 24
154.210.143.0/24 maxlen: 24
154.210.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118750 (0x1cfde)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 27 06:44:33 2026 GMT
Not After : Sep 4 06:44:33 2026 GMT
Subject: CN=6a1692d5-0601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:bd:b5:fa:ef:73:b5:f8:9b:49:57:3c:fd:f1:
fd:4b:d3:45:ba:6b:84:90:64:b8:55:84:59:59:38:
83:33:9f:78:6a:00:42:91:47:65:22:e3:53:b8:5b:
44:3c:2c:47:89:46:87:39:1f:a2:21:cf:f1:a1:97:
ec:12:dd:ef:f5:c5:79:fa:46:34:22:94:54:e5:fb:
49:e9:a7:c8:e0:b4:a4:8c:6e:22:08:01:83:32:59:
34:32:aa:4d:0f:09:8e:65:5f:82:5e:0d:89:5e:d0:
ae:ef:98:23:51:37:f6:55:e1:8a:9f:ac:a1:2b:0b:
e6:a8:1e:d9:2f:2a:9c:f1:f2:f2:93:14:e9:2e:1c:
08:fb:6d:77:2e:ad:f7:ed:39:e9:7a:46:0a:6f:35:
34:f9:b2:07:56:45:68:13:41:a7:4d:95:85:e1:88:
97:38:bd:bd:52:5d:eb:ae:8a:8e:2c:cf:82:6d:aa:
fd:cf:4d:ef:c3:39:94:9f:3b:d6:a7:72:a1:6e:ae:
75:86:cc:2c:62:c6:ad:41:cb:80:fd:83:65:d5:fd:
59:06:16:e4:46:e5:85:0d:e6:ed:a2:b8:a0:25:35:
db:8a:be:b6:98:f4:f8:ea:fb:4d:4c:28:4e:2d:7f:
11:fa:90:a7:ba:34:f3:2e:60:74:03:c9:39:d9:6c:
f8:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:7F:4A:9D:90:32:78:C4:FC:83:EC:B7:F9:F8:14:26:DC:79:5E:FE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/876EDFAA599711F1B0EE6CC4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.210.135.0-154.210.144.255
Signature Algorithm: sha256WithRSAEncryption
88:75:af:ee:a0:2d:1b:75:81:4d:cd:da:a9:57:fb:1b:d9:6a:
b8:67:d4:21:c8:c1:05:02:1a:e1:5b:60:38:16:86:26:93:c6:
af:d7:71:5b:ce:10:b9:50:2c:ba:84:0c:a1:ab:e4:09:b3:50:
8e:47:58:b6:dd:c3:07:ee:0f:a5:40:9b:6c:a4:da:ea:39:5b:
bb:e3:6f:29:6d:81:d9:67:3a:6a:1c:b7:25:d7:98:1a:68:42:
67:fc:7c:dc:6d:ee:0f:b3:3a:ed:de:3c:08:9b:7c:fe:19:26:
b1:14:1c:44:53:a0:19:6d:4b:b7:ab:c6:99:4c:62:ec:42:0d:
b7:37:1e:18:2e:a4:b4:ef:25:f9:63:ba:da:9b:35:ec:74:42:
f4:6f:55:fc:52:1b:88:7e:da:64:89:a8:f6:56:ea:dc:d5:93:
03:c2:5c:71:58:07:87:a1:1b:bb:2f:83:16:d9:0e:0a:a2:74:
92:a1:25:e0:de:aa:5c:6f:06:95:38:84:79:91:3b:8a:ad:3c:
8a:f7:b7:22:94:90:fe:68:f7:5f:70:c5:41:89:7d:cb:1b:13:
3a:b0:62:dd:e6:91:f7:95:bf:8a:6d:91:fe:95:7e:94:52:d6:
0d:fe:bb:4b:93:ab:c1:6b:08:c5:a0:03:61:74:6d:c1:bd:41:
8d:b2:83:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 06:51:51 2026 by rpki-client