Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/920D54245B3511F18E1A1413CF1D38B0.roa
File: 920D54245B3511F18E1A1413CF1D38B0.roa (raw, json)
Hash identifier: ZP4QlCKbZJVPHJpx5gBqIF5DwzT98pcvpX4YbGeecqo=
Subject key identifier: 9F:46:C6:81:02:4F:7D:1C:06:4C:7D:B2:BB:DB:4C:7B:13:EC:6B:CF
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D042
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/920D54245B3511F18E1A1413CF1D38B0.roa
Signing time: Fri 29 May 2026 08:08:27 +0000
ROA not before: Fri 29 May 2026 08:08:22 +0000
ROA not after: Wed 01 Jul 2026 08:08:22 +0000
asID: 62240
IP address blocks: 154.194.114.0/24 maxlen: 24
154.194.115.0/24 maxlen: 24
154.194.116.0/24 maxlen: 24
154.195.2.0/24 maxlen: 24
154.195.24.0/24 maxlen: 24
154.195.25.0/24 maxlen: 24
154.195.182.0/24 maxlen: 24
154.195.183.0/24 maxlen: 24
154.195.184.0/24 maxlen: 24
154.195.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118850 (0x1d042)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 29 08:08:22 2026 GMT
Not After : Jul 1 08:08:22 2026 GMT
Subject: CN=6a19497b-822b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:c3:3c:29:2e:f7:00:de:b6:aa:ce:98:b3:6c:
83:44:61:9d:c5:93:4e:f3:c6:d9:e7:38:ad:95:23:
ab:a6:69:8d:e3:f8:07:a9:d6:b3:66:6d:6f:ff:ab:
a8:c8:02:98:a4:bc:b4:b8:a4:2c:31:3c:ea:68:21:
52:58:6a:16:e1:37:b0:43:12:d7:a4:1b:99:7d:1e:
c6:35:fc:9e:c9:3a:fa:35:00:27:8d:10:d2:0b:39:
9a:1d:6d:57:54:c7:ae:b1:17:34:1f:26:b5:eb:21:
86:5c:75:cc:64:a5:73:1e:49:b7:51:fd:36:4c:6e:
9a:b0:81:a9:c3:4a:c7:d6:cc:23:0e:df:57:03:6a:
e0:1c:40:b8:e3:10:52:db:75:6c:ac:1b:a7:ff:ce:
f3:2f:2c:f3:59:fd:79:07:eb:24:b5:2e:f2:52:ea:
53:d5:1d:5b:26:be:33:b2:9c:01:20:64:34:ce:f1:
42:4e:7b:d1:39:20:c6:70:60:42:92:84:c8:98:fa:
21:6e:c1:45:1d:75:13:51:8c:d1:c2:ad:a6:fc:f9:
42:c5:b5:ef:09:36:7a:19:67:4a:08:e6:6a:0d:40:
64:e8:24:3c:63:1e:2f:09:59:b0:ab:98:f1:2c:f5:
e8:d3:04:d8:c6:79:d9:ac:d3:47:25:88:67:0b:91:
cf:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:46:C6:81:02:4F:7D:1C:06:4C:7D:B2:BB:DB:4C:7B:13:EC:6B:CF
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/920D54245B3511F18E1A1413CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.114.0-154.194.116.255
154.195.2.0/24
154.195.24.0/23
154.195.182.0-154.195.185.255
Signature Algorithm: sha256WithRSAEncryption
54:89:87:46:a0:5a:94:0d:71:b0:05:a7:91:f5:0d:c7:b5:4f:
d6:73:f7:62:e8:93:b9:b1:54:9a:ea:73:fc:c1:2b:67:93:fd:
96:42:fe:0e:f5:55:c9:3b:ed:e3:99:36:77:db:e7:11:a5:68:
b2:9f:c3:3f:68:ab:aa:7b:1e:e5:f4:14:3a:47:ae:cf:35:3d:
08:ae:c9:9a:0c:1a:83:4a:12:86:f6:76:f0:90:c5:5b:43:eb:
7a:fd:56:a6:3b:fc:0c:80:8d:c7:9c:17:3e:a7:1a:56:a9:88:
2e:f7:29:42:94:45:16:45:b0:08:02:56:f3:67:af:7c:a6:14:
a4:17:15:05:22:12:c7:d0:0d:f3:8c:ff:9a:16:d0:f2:6a:17:
3a:86:ff:54:d7:2e:ee:de:b4:91:a9:16:cc:fb:e0:b8:08:d8:
a5:25:ad:1f:75:f1:7c:45:2e:cc:85:fb:8a:c9:97:4f:ec:66:
30:3c:63:d5:05:36:53:15:b8:53:4e:ba:6a:d9:4b:8b:e0:f6:
dd:69:a3:14:fc:00:23:ad:a1:47:43:15:cb:c4:da:c1:cd:59:
61:ae:2f:eb:ff:83:4e:d1:1c:12:eb:4c:94:ee:3d:9e:a6:81:
ff:64:95:08:d4:f2:a3:e7:ef:fa:71:08:f0:d1:d3:28:dd:32:
fa:6f:20:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:20:20 2026 by rpki-client