Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC0F5A9A64B611F1BCD992D7CE1D38B0.roa
File: AC0F5A9A64B611F1BCD992D7CE1D38B0.roa (raw, json)
Hash identifier: zGNRA4+tty/5vtfgPqK0BnKsGnbqdarHO7DeLQQC5lM=
Subject key identifier: CB:E0:3E:5D:AA:66:80:76:00:07:EF:50:A5:65:D8:61:02:6D:18:B1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D272
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC0F5A9A64B611F1BCD992D7CE1D38B0.roa
Signing time: Wed 10 Jun 2026 10:25:16 +0000
ROA not before: Wed 10 Jun 2026 10:25:11 +0000
ROA not after: Thu 16 Jul 2026 10:25:11 +0000
asID: 22773
IP address blocks: 154.90.14.0/24 maxlen: 24
154.90.15.0/24 maxlen: 24
154.90.16.0/24 maxlen: 24
154.90.17.0/24 maxlen: 24
154.90.19.0/24 maxlen: 24
154.90.20.0/24 maxlen: 24
154.90.21.0/24 maxlen: 24
154.90.22.0/24 maxlen: 24
154.90.23.0/24 maxlen: 24
154.90.24.0/24 maxlen: 24
154.90.25.0/24 maxlen: 24
154.90.26.0/24 maxlen: 24
154.90.27.0/24 maxlen: 24
154.90.132.0/24 maxlen: 24
154.90.141.0/24 maxlen: 24
154.90.144.0/24 maxlen: 24
154.90.145.0/24 maxlen: 24
154.90.146.0/24 maxlen: 24
154.90.147.0/24 maxlen: 24
154.90.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119410 (0x1d272)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 10 10:25:11 2026 GMT
Not After : Jul 16 10:25:11 2026 GMT
Subject: CN=6a293b8c-c5a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:c4:22:ce:5c:35:f9:7d:62:f5:a5:46:3e:c2:
fb:dc:e9:25:71:49:1a:1a:5a:34:e1:02:2f:78:96:
a9:7a:70:71:f4:a3:a2:f4:ea:cd:92:13:17:cf:76:
23:9e:de:fc:9f:c2:64:f3:eb:0e:c2:46:d8:de:3a:
e6:1a:9f:76:3e:57:9e:1d:09:b6:e4:29:bc:a1:1a:
34:d3:72:ea:71:64:34:7a:21:c3:56:10:fd:83:35:
b7:cf:5e:f2:04:a2:62:77:60:fd:ac:60:48:60:39:
5c:3e:a7:eb:86:a6:a4:1a:b9:fd:14:d5:8d:cd:34:
76:d8:a0:6a:84:ad:24:e6:19:5e:e9:5f:9f:c0:4c:
3f:66:bd:cf:d6:0f:16:c0:c8:c7:8d:56:d5:6d:48:
fd:15:d6:b2:db:c9:6e:d7:84:97:d3:e5:aa:8a:5a:
fa:0b:57:c4:ad:91:3c:eb:ae:85:d3:85:cc:bd:79:
ef:63:9f:27:bc:ca:d1:d3:7c:90:cc:c2:70:8b:ca:
ae:18:ef:ef:a0:a8:ac:a4:87:d3:33:50:c1:f6:86:
ee:41:d3:66:48:61:e4:38:75:55:7f:02:eb:52:4c:
be:61:fc:e3:8e:27:18:02:0b:c8:72:d0:0f:fc:16:
3e:d4:34:54:29:ca:17:df:72:1a:4b:9e:2f:dd:73:
da:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:E0:3E:5D:AA:66:80:76:00:07:EF:50:A5:65:D8:61:02:6D:18:B1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AC0F5A9A64B611F1BCD992D7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.14.0-154.90.17.255
154.90.19.0-154.90.27.255
154.90.132.0/24
154.90.141.0/24
154.90.144.0-154.90.148.255
Signature Algorithm: sha256WithRSAEncryption
49:32:78:fa:b7:6e:1b:fd:84:eb:ad:67:58:0c:bf:b6:c2:d2:
a1:0f:6e:55:46:01:98:de:e2:0b:74:fd:ba:51:08:da:d4:64:
d3:0e:d8:d4:09:8a:ae:87:d9:d3:98:46:29:47:95:c5:89:48:
ec:60:4c:ab:50:9a:d4:61:c1:b6:44:7d:dd:95:71:e4:10:ea:
e2:bc:e0:d4:76:fb:b2:3f:ec:52:fa:ab:50:f5:24:e3:97:16:
4f:32:e8:b1:7f:da:21:9e:5c:d7:49:2f:6c:a1:11:8e:98:c8:
37:10:60:c8:08:03:42:47:92:24:e4:99:31:5b:15:74:38:1c:
1a:29:61:47:b0:ee:22:68:aa:e4:4a:e9:95:c1:0b:10:76:d7:
e0:f8:da:a3:0c:7d:f9:12:6f:1b:73:1e:1f:66:65:2a:9f:b8:
15:92:92:29:5e:8b:a8:17:09:82:1f:f9:dd:3a:8e:29:b2:f8:
98:8d:55:aa:31:45:fd:63:89:19:f1:50:9f:fa:3a:00:1e:9c:
03:9a:26:f3:77:05:d7:0f:b6:e0:ad:74:78:17:bd:e4:44:d9:
fa:84:b6:5b:c1:4b:5c:71:95:35:c6:a0:fe:18:d5:c1:0c:75:
63:62:a6:1d:b3:73:64:e7:b3:4b:b9:94:d3:38:c4:2c:6d:71:
ab:e9:9e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:53:27 2026 by rpki-client