Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B7BC8B85FF711F1B6AE4FFACE1D38B0.roa
File: 8B7BC8B85FF711F1B6AE4FFACE1D38B0.roa (raw, json)
Hash identifier: IvhDjJafyWqNlBgRKSYtP8j3Egaho+ip4054eJZXC04=
Subject key identifier: 44:FB:16:A5:F9:52:F8:66:23:05:50:78:93:FB:0F:74:89:A7:D9:88
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D190
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B7BC8B85FF711F1B6AE4FFACE1D38B0.roa
Signing time: Thu 04 Jun 2026 09:27:03 +0000
ROA not before: Thu 04 Jun 2026 09:26:58 +0000
ROA not after: Fri 10 Jul 2026 09:26:58 +0000
asID: 138915
IP address blocks: 154.223.58.0/23 maxlen: 24
154.223.60.0/23 maxlen: 24
154.223.62.0/23 maxlen: 24
154.223.64.0/24 maxlen: 24
154.223.66.0/23 maxlen: 24
154.223.68.0/23 maxlen: 24
154.223.70.0/23 maxlen: 24
154.223.72.0/23 maxlen: 24
154.223.74.0/23 maxlen: 24
154.223.76.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119184 (0x1d190)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 4 09:26:58 2026 GMT
Not After : Jul 10 09:26:58 2026 GMT
Subject: CN=6a2144e7-f874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7f:c0:6a:53:10:f4:f7:67:82:9d:9a:5c:7e:
70:91:3e:4a:95:15:2f:28:29:6b:cf:2a:59:77:a8:
e8:d9:36:85:71:c4:0b:11:4f:6d:9e:f0:91:d9:e0:
e4:bc:fd:53:97:c1:1c:61:a6:94:7a:38:26:b5:58:
90:6d:22:8e:a2:8f:4b:5f:ac:50:c4:23:97:a4:9b:
70:54:21:43:02:ba:cc:0b:27:0a:d9:1a:18:9b:14:
24:4f:8b:b5:78:12:fb:ae:83:1f:8e:f0:1b:89:d7:
de:69:36:2c:83:86:ed:b1:02:92:2f:b4:12:59:6e:
d2:b6:78:42:9f:54:b5:e0:b3:cd:b9:e8:10:3e:7d:
f5:34:9a:df:de:bb:49:28:02:b3:70:c7:97:06:77:
8a:db:e9:89:19:66:21:a7:d7:10:ba:df:a8:85:6f:
4f:cf:20:a7:25:a9:fb:ef:60:68:d9:7a:5b:5f:2d:
d4:83:54:ed:f1:62:d6:82:15:8b:cf:11:8d:71:41:
bc:b9:06:0b:78:2c:24:95:92:52:3e:97:e8:e2:81:
81:61:00:d0:c6:b0:cc:7a:cd:9a:cd:f1:fe:b2:60:
59:f9:f8:0f:42:3f:f3:ad:70:6a:38:82:19:f4:4f:
0e:82:b1:d0:10:19:6c:b2:41:ec:fd:18:a2:0a:19:
fe:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:FB:16:A5:F9:52:F8:66:23:05:50:78:93:FB:0F:74:89:A7:D9:88
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8B7BC8B85FF711F1B6AE4FFACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.58.0-154.223.64.255
154.223.66.0-154.223.77.255
Signature Algorithm: sha256WithRSAEncryption
1c:09:51:db:26:50:20:85:b5:99:e1:28:47:f8:da:dc:14:6a:
b0:5a:0c:c4:01:bf:17:86:25:4a:76:30:08:a0:2e:d2:be:92:
bc:41:21:94:7d:31:97:16:72:0c:bb:55:c6:d3:62:0a:ba:1b:
38:69:9b:24:5a:b6:54:00:54:52:ed:99:d6:0d:6f:29:a7:e3:
7c:65:94:fe:64:55:7a:df:d3:71:97:e7:e4:51:4a:2a:f8:a1:
b6:5d:43:c6:d9:5e:47:60:13:0e:bd:bf:1f:b5:3a:28:21:50:
a2:5c:b9:ff:62:fb:b3:77:9a:28:5f:5f:1a:60:e2:78:de:bd:
a7:c6:0d:88:d0:42:8f:aa:d8:2d:9a:85:0b:f9:c5:4f:1d:36:
a0:af:a6:57:77:4c:be:cd:c4:1b:ef:71:0d:aa:74:b6:1b:a6:
0a:79:cc:2f:a6:5c:db:e0:8e:9c:7e:5b:8d:2e:f8:3b:67:f1:
bd:3f:59:d5:4a:73:58:5e:e9:ea:00:92:12:dc:ec:c0:96:fb:
96:c8:06:3f:3f:e1:92:ce:87:2b:72:60:a3:73:c0:bd:80:1e:
15:02:f7:81:0d:a0:52:de:11:11:65:db:5b:4c:1e:23:57:fa:
b9:63:8f:9d:07:c0:59:93:6d:08:a3:c1:0f:3d:49:c9:be:e2:
52:19:eb:d7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 13 05:45:04 2026 by rpki-client