Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8DA4FC25B9911F1929349E4CE1D38B0.roa
File: A8DA4FC25B9911F1929349E4CE1D38B0.roa (raw, json)
Hash identifier: AjWh/aOQzlPXF8zq+kjyjOVtHn3rUIeB6RXBtKJBFIw=
Subject key identifier: 61:77:61:6B:88:A0:D7:EE:FB:15:D3:6C:50:B6:68:8F:5E:7E:5C:D2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D06F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8DA4FC25B9911F1929349E4CE1D38B0.roa
Signing time: Fri 29 May 2026 20:04:55 +0000
ROA not before: Fri 29 May 2026 20:04:47 +0000
ROA not after: Wed 01 Jul 2026 20:04:47 +0000
asID: 62240
IP address blocks: 154.194.4.0/24 maxlen: 24
154.194.81.0/24 maxlen: 24
154.195.102.0/24 maxlen: 24
154.195.103.0/24 maxlen: 24
154.195.104.0/24 maxlen: 24
154.195.105.0/24 maxlen: 24
154.195.106.0/24 maxlen: 24
154.195.109.0/24 maxlen: 24
154.195.110.0/24 maxlen: 24
154.195.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118895 (0x1d06f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 29 20:04:47 2026 GMT
Not After : Jul 1 20:04:47 2026 GMT
Subject: CN=6a19f167-9a2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fe:cf:5b:fd:e6:93:19:68:44:b9:b8:f5:84:
78:8a:6a:88:fb:98:7b:e4:e3:89:64:21:33:3b:26:
27:21:b4:fa:dc:ee:14:d6:84:ea:a3:8c:19:6c:d8:
09:0a:53:05:50:16:be:c9:a9:ea:a2:b0:2a:45:9b:
f8:91:0c:12:e1:9f:40:d8:70:79:7d:0e:bf:d0:4c:
d0:12:77:10:cd:cd:12:dc:e5:fb:07:85:71:a2:e4:
de:d6:d4:7b:66:26:09:4d:e9:39:85:ff:72:c5:5f:
d6:f5:2f:3c:c6:70:34:98:66:48:5a:55:e6:8e:f1:
f1:3b:97:1a:a8:bc:36:36:cb:b2:b6:12:73:c8:00:
04:5e:3d:85:69:92:e9:3b:2d:d4:3f:47:be:23:81:
ce:10:7a:1b:18:b8:b9:d7:7c:ea:56:e3:bd:a0:c9:
b1:3b:4e:10:f8:c4:1e:06:e8:1e:34:b1:cf:2c:b4:
23:03:ac:d9:77:c4:22:be:9e:77:b6:11:15:45:0f:
74:78:c8:29:cc:75:30:8d:ce:0f:c0:d6:91:08:9d:
1a:32:ce:75:ea:db:6b:3c:05:31:b8:84:dd:24:0d:
06:bc:a9:fe:88:3d:fc:ae:90:71:44:31:80:0e:2f:
85:cc:d5:91:00:69:5c:7f:f5:d9:4f:00:ba:1b:26:
53:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:77:61:6B:88:A0:D7:EE:FB:15:D3:6C:50:B6:68:8F:5E:7E:5C:D2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A8DA4FC25B9911F1929349E4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.4.0/24
154.194.81.0/24
154.195.102.0-154.195.106.255
154.195.109.0-154.195.110.255
154.195.114.0/24
Signature Algorithm: sha256WithRSAEncryption
cf:22:25:21:26:6f:bd:26:e4:f7:6d:ad:23:57:bf:5e:79:78:
78:bc:b4:39:e8:10:c1:33:21:9b:00:ce:df:e9:80:f9:85:cd:
f7:e6:a7:51:17:1a:91:9e:27:75:74:83:3e:fd:ac:14:1e:0a:
a2:39:cb:af:7d:36:83:5f:9c:36:75:ce:c8:00:32:cc:bf:3d:
e3:77:f2:dd:61:b4:7c:0a:5a:b5:02:a1:e4:8b:5c:a3:3f:f8:
5d:7e:6a:47:47:7c:6b:cb:88:b9:03:3d:25:77:f4:99:99:d5:
d3:8c:1f:c4:d4:a0:51:77:d1:e7:b3:a0:a2:60:61:33:cd:65:
ec:3e:fc:87:71:0f:64:86:ea:e4:5b:8a:ae:b1:33:f9:39:fb:
c3:39:63:17:7c:53:2d:19:27:92:bd:0c:fa:3a:1a:67:e7:77:
15:1d:4f:a3:eb:1e:57:69:33:28:9e:a1:c6:f4:3c:e5:52:6f:
22:8f:35:64:af:cb:d4:8e:a6:f5:4c:fe:26:2e:b3:f3:cf:61:
e1:e0:c2:61:7d:ac:d8:13:5a:1e:98:1f:df:04:92:ae:d1:4d:
66:b0:68:d9:0d:72:44:51:70:ff:3a:b7:de:e3:e4:d0:16:8f:
57:50:42:a7:b8:ec:96:a5:50:c7:6b:f7:28:d8:6a:3c:ca:43:
74:6c:31:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:55:52 2026 by rpki-client