Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1D629965BA011F19735370DCF1D38B0.roa
File: B1D629965BA011F19735370DCF1D38B0.roa (raw, json)
Hash identifier: ucz4aLekeYc7O6kTI8lXPPiXAlHd1ViVMAqzo5Kxv+Y=
Subject key identifier: A9:DB:46:D4:C7:B9:85:43:D4:47:99:45:42:BE:4F:F1:32:4B:89:5A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D087
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1D629965BA011F19735370DCF1D38B0.roa
Signing time: Fri 29 May 2026 20:55:16 +0000
ROA not before: Fri 29 May 2026 20:55:11 +0000
ROA not after: Wed 01 Jul 2026 20:55:11 +0000
asID: 62240
IP address blocks: 154.194.33.0/24 maxlen: 24
154.194.82.0/24 maxlen: 24
154.194.119.0/24 maxlen: 24
154.194.120.0/24 maxlen: 24
154.194.121.0/24 maxlen: 24
154.194.122.0/24 maxlen: 24
154.196.58.0/24 maxlen: 24
154.196.59.0/24 maxlen: 24
154.196.60.0/24 maxlen: 24
154.196.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118919 (0x1d087)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 29 20:55:11 2026 GMT
Not After : Jul 1 20:55:11 2026 GMT
Subject: CN=6a19fd34-cfa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:3c:a9:34:b9:e2:71:a5:90:80:fe:93:3b:34:
c3:78:c9:4a:46:94:f4:72:a3:cc:56:50:f4:d0:09:
f3:65:5b:f8:9d:02:71:1d:65:ce:8a:0e:e9:05:3a:
3f:6f:1b:04:7a:25:a5:f4:ab:47:a3:be:98:13:71:
51:99:17:0e:de:45:c1:35:ff:40:f4:d6:1c:ea:c0:
42:81:2d:9a:4a:fb:ce:fd:9a:17:23:89:6d:21:24:
26:63:27:b7:c0:e5:cb:e3:5e:ed:fb:37:8e:20:a9:
21:57:21:45:16:eb:50:d7:cb:35:6e:66:3b:24:62:
ec:b1:6e:11:3f:c9:01:97:79:ae:da:9c:40:04:8b:
ba:de:3d:82:1f:47:57:30:61:fa:69:d6:6f:74:78:
b9:3f:77:26:16:a5:db:f2:71:0f:54:b5:fc:1a:0c:
9c:12:b6:07:ee:ff:11:81:8b:29:cf:c8:1c:76:e9:
6c:3f:7a:3c:e6:ca:c3:09:62:a8:b8:7a:0c:7f:4c:
e8:e6:f1:7f:b6:c7:f2:3a:41:30:21:da:6c:66:5e:
c6:73:45:d6:66:82:7c:39:3a:5e:3b:a5:03:a0:f3:
70:30:7c:15:4f:35:8d:8e:09:ea:7c:e1:f3:19:c3:
85:af:d3:55:29:06:0f:fb:e5:93:a3:ae:fd:95:8d:
32:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:DB:46:D4:C7:B9:85:43:D4:47:99:45:42:BE:4F:F1:32:4B:89:5A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B1D629965BA011F19735370DCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.33.0/24
154.194.82.0/24
154.194.119.0-154.194.122.255
154.196.58.0-154.196.61.255
Signature Algorithm: sha256WithRSAEncryption
7d:2a:15:9d:4d:29:ab:66:ec:39:ea:67:6e:75:19:5c:3c:66:
ed:f9:f4:5b:1a:e1:01:38:91:49:97:c1:a0:71:9f:f6:8c:29:
48:96:64:38:3c:93:e0:d7:d8:22:6f:78:7c:5b:92:9a:6e:95:
b4:6a:6f:2b:d8:d1:d2:e3:90:b7:08:25:2c:f9:86:46:22:66:
c0:8a:1f:92:4d:29:00:47:6a:e9:fe:07:ac:aa:88:6e:9c:c8:
81:26:0a:4a:00:dc:25:1f:01:50:58:3f:ac:32:a2:75:ab:4b:
3b:59:2e:20:e9:f4:c4:0b:a0:68:d5:b8:9e:e1:9c:57:97:2a:
05:d9:b8:61:1d:1b:c3:e5:0f:0e:75:48:76:1f:c9:95:fa:2f:
4a:1c:71:ff:8d:12:47:56:0b:42:23:59:8e:da:26:2c:99:48:
a2:12:db:6c:92:ae:0e:6d:3e:2d:e8:31:8c:b4:84:8a:ba:a0:
fc:a0:1f:50:37:07:d1:d9:c5:97:1b:af:b5:ae:e0:ba:dc:ed:
94:47:da:94:64:47:29:1d:15:d8:ae:78:18:1a:95:94:45:22:
59:49:fe:b7:39:88:4d:b3:b8:5d:87:37:6e:36:6f:3d:92:76:
f3:06:53:9a:61:57:2d:2d:39:36:2a:1c:4a:f9:08:5f:27:ac:
06:7b:b1:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:54:42 2026 by rpki-client