Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F6062BE618011F1A5102CD5CE1D38B0.roa
File: 9F6062BE618011F1A5102CD5CE1D38B0.roa (raw, json)
Hash identifier: Fk3591bqAZ6dmcdFuADbH2G0PzaHptc3+MLrjvczc1w=
Subject key identifier: C9:0F:78:32:97:C4:10:EF:F2:67:11:DE:D9:1D:CB:F4:8E:A9:98:56
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D1EB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F6062BE618011F1A5102CD5CE1D38B0.roa
Signing time: Sat 06 Jun 2026 08:20:48 +0000
ROA not before: Sat 06 Jun 2026 08:20:43 +0000
ROA not after: Thu 09 Jul 2026 08:20:43 +0000
asID: 151347
IP address blocks: 154.84.192.0/24 maxlen: 24
154.84.193.0/24 maxlen: 24
154.84.196.0/24 maxlen: 24
154.84.197.0/24 maxlen: 24
154.84.198.0/24 maxlen: 24
154.84.199.0/24 maxlen: 24
154.84.200.0/24 maxlen: 24
154.84.201.0/24 maxlen: 24
154.84.202.0/24 maxlen: 24
154.84.203.0/24 maxlen: 24
154.84.204.0/24 maxlen: 24
154.84.205.0/24 maxlen: 24
154.84.206.0/24 maxlen: 24
154.84.207.0/24 maxlen: 24
154.84.208.0/24 maxlen: 24
154.84.209.0/24 maxlen: 24
154.84.210.0/24 maxlen: 24
154.84.237.0/24 maxlen: 24
154.84.243.0/24 maxlen: 24
154.84.250.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119275 (0x1d1eb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 6 08:20:43 2026 GMT
Not After : Jul 9 08:20:43 2026 GMT
Subject: CN=6a23d860-851a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c2:f6:92:49:ea:16:84:c1:b9:a7:2a:1b:ab:
b0:51:1a:89:1b:27:b7:ea:d5:a7:17:47:8b:94:d6:
4a:48:31:9f:8d:c1:a8:c3:ae:0f:9b:71:cc:ff:69:
a1:69:d4:37:f4:4c:cd:a1:e5:46:8d:ef:e2:2b:83:
7a:7e:06:2c:33:6e:1f:56:de:8e:8a:ce:07:7d:95:
15:81:7f:d4:c2:70:fc:40:c4:33:a4:29:11:c9:f2:
5b:66:d5:aa:36:e8:21:74:7c:2f:05:a4:47:b7:0a:
7c:1b:20:ab:d8:6d:87:3d:3b:77:30:72:61:23:7a:
ac:9e:0e:84:b5:d2:41:81:c9:a0:59:28:b6:a1:de:
27:00:e4:b0:05:88:73:b4:f6:cf:5a:34:e7:f8:a2:
6a:48:9e:66:41:d4:63:8d:54:ce:26:e6:ac:b4:73:
6f:40:50:4c:c3:f9:9c:c4:9f:37:c6:b6:78:7b:db:
48:3d:b9:10:05:8f:40:97:6b:de:dc:43:2b:74:3f:
4b:1e:6f:ac:10:13:14:b0:f1:d7:42:67:af:b0:01:
ee:cf:74:cd:58:2b:79:56:c1:19:bf:97:c8:3c:67:
1c:90:fb:93:55:49:18:5e:c2:33:74:29:b4:73:0d:
e0:f8:65:3d:00:f9:0a:68:b4:f3:da:9e:88:f5:dd:
f5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:0F:78:32:97:C4:10:EF:F2:67:11:DE:D9:1D:CB:F4:8E:A9:98:56
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9F6062BE618011F1A5102CD5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.192.0/23
154.84.196.0-154.84.210.255
154.84.237.0/24
154.84.243.0/24
154.84.250.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:c0:dc:b6:2f:34:07:b3:be:3b:46:a5:38:a9:36:72:c2:25:
bf:9e:a3:e9:1d:0d:cb:fc:b4:15:1d:af:85:24:71:c2:c4:e8:
b0:c2:57:d9:e0:2b:50:2f:48:f9:d1:73:83:f2:7d:d8:a8:ac:
45:19:e0:a3:8c:58:15:c8:12:c1:5a:6b:18:cf:41:94:b7:d9:
c1:e6:7f:be:01:a5:f0:31:18:31:c5:3b:a5:1e:16:e5:d1:06:
a5:29:9f:ec:c8:26:b5:2b:ce:50:d3:4c:23:0b:f8:92:b9:75:
04:31:36:30:39:df:e5:f1:e6:ee:d0:35:fd:21:16:77:07:e3:
e4:80:2d:b6:b5:1f:23:c0:6c:4a:fb:ce:e8:ce:11:b7:90:69:
a7:61:68:d1:51:d0:fa:3f:7d:2c:b4:21:68:a4:0c:2c:13:bb:
de:cd:94:8a:8d:7d:77:18:2f:b2:1e:1a:99:c9:74:ac:4b:5c:
eb:2e:e9:50:d1:be:3f:8a:ac:d6:12:48:f6:56:b3:04:d4:60:
2d:af:61:64:79:ce:04:1b:36:10:41:69:58:ed:ea:74:9b:f1:
b0:3e:5d:8d:c1:04:0a:37:61:4c:f7:d8:64:99:ff:59:c3:71:
12:0f:8d:de:c6:18:6b:91:5a:59:88:ad:ba:fb:0c:f9:04:3d:
f4:57:da:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:00:56 2026 by rpki-client