Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F05ED6E89A011F1BFE7A2ADCE1D38B0.roa
File: 9F05ED6E89A011F1BFE7A2ADCE1D38B0.roa (raw, json)
Hash identifier: d9fA6TU0K5lJVxqy4uNO4F08swV0rOaLYT3KH5j7xRA=
Subject key identifier: 4C:C8:8F:1F:1C:BD:3E:38:66:F6:51:5C:57:6E:27:31:2D:5E:BE:6D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DB87
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F05ED6E89A011F1BFE7A2ADCE1D38B0.roa
Signing time: Mon 27 Jul 2026 09:50:38 +0000
ROA not before: Mon 27 Jul 2026 09:50:34 +0000
ROA not after: Mon 31 Aug 2026 09:50:34 +0000
asID: 62240
IP address blocks: 154.195.189.0/24 maxlen: 24
154.195.190.0/24 maxlen: 24
154.195.191.0/24 maxlen: 24
154.196.33.0/24 maxlen: 24
154.196.90.0/24 maxlen: 24
154.196.91.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121735 (0x1db87)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 27 09:50:34 2026 GMT
Not After : Aug 31 09:50:34 2026 GMT
Subject: CN=6a6729ee-2a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cd:31:4f:6b:f0:87:fc:a0:59:ae:3d:57:f5:
53:42:34:0f:3d:bd:2e:10:08:3d:28:93:2b:4d:ae:
df:6c:dd:15:71:75:47:f1:54:f2:4f:15:b0:6c:0e:
83:5d:a8:19:23:4a:58:9f:3e:03:77:1c:cc:f8:7b:
57:5a:8f:8a:81:ac:b1:87:92:0a:68:38:2f:e8:ac:
25:8b:34:ec:b3:fa:df:67:62:25:a3:82:a2:61:7e:
b5:1e:f9:d8:c8:13:9b:5b:2f:9a:c6:cd:f9:9a:49:
1a:6c:5f:d9:d1:a2:00:61:d9:2d:8b:18:58:7c:19:
1b:8c:b7:29:70:7c:a5:9c:f0:68:9e:02:62:49:04:
b3:b4:68:a4:8c:df:26:31:28:a4:28:0e:9c:49:f8:
d8:e4:fc:9a:91:2e:92:19:c0:bf:3c:e9:12:31:12:
43:3f:e8:69:79:95:48:07:3a:63:61:35:68:33:79:
ae:f8:ca:0f:0c:52:e4:ed:7d:be:04:2f:e3:de:f5:
8b:ca:a8:a0:e6:ce:8f:bc:27:02:05:64:b5:91:74:
4e:2f:78:40:dc:1d:74:ef:14:9c:42:e7:b5:98:3e:
48:f6:f8:eb:23:33:01:1b:90:5e:cf:03:79:52:3b:
31:4a:32:fb:81:1e:0c:71:92:0d:d6:ad:40:18:03:
a8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C8:8F:1F:1C:BD:3E:38:66:F6:51:5C:57:6E:27:31:2D:5E:BE:6D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F05ED6E89A011F1BFE7A2ADCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.189.0-154.195.191.255
154.196.33.0/24
154.196.90.0/23
Signature Algorithm: sha256WithRSAEncryption
34:34:98:ac:e0:cd:23:7a:ea:f2:09:50:e5:34:77:65:bc:15:
5e:ba:37:79:97:11:51:6f:f6:d8:05:4c:57:8b:c4:cc:fa:c7:
52:93:ed:74:25:5a:56:28:28:ae:dc:7f:78:bd:71:ff:d0:50:
46:d3:42:6f:87:0c:68:aa:d4:fe:d6:d1:60:63:b2:97:c6:d6:
f0:45:a7:68:0f:6e:61:f2:b7:8f:29:c8:62:a6:58:7f:2d:c0:
93:0f:43:26:ba:0c:a2:a0:95:f2:58:df:e9:a4:13:c9:29:5a:
08:f1:69:cb:83:58:de:94:d0:c2:4b:d2:8d:4b:a7:dd:88:4f:
cb:b5:e1:ca:19:31:bf:19:cb:22:26:c3:c0:2c:32:29:ea:aa:
e8:fe:4c:88:47:9e:d5:6d:4c:7f:24:5e:ba:36:d4:31:42:2a:
0a:fc:1a:7b:59:30:3b:71:b6:2e:ec:3b:60:3a:eb:ac:5f:70:
c3:a6:68:a4:95:28:67:e6:b6:38:bd:45:ca:e7:92:57:ff:cb:
02:87:7c:29:8e:72:de:47:81:4b:83:35:74:f5:a5:02:a9:11:
be:a9:f3:7e:c0:14:5f:94:da:d2:d4:58:fc:98:b2:d1:2e:98:
d2:60:d6:f0:cf:96:c2:c8:c6:35:fd:1f:dd:d1:d3:e1:6d:fe:
05:79:86:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:27:54 2026 by rpki-client