Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0977EA451CB11F19F09FEC6CE1D38B0.roa
File: D0977EA451CB11F19F09FEC6CE1D38B0.roa (raw, json)
Hash identifier: H9c5VyrSoB+UAsfcVJC381s13O6Vs5bC5xZ2566gLYs=
Subject key identifier: 53:92:31:C2:61:DE:02:F0:5B:D3:7E:E8:DB:D8:F9:0C:E4:30:07:5F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CC28
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0977EA451CB11F19F09FEC6CE1D38B0.roa
Signing time: Sun 17 May 2026 08:38:45 +0000
ROA not before: Sun 17 May 2026 08:38:39 +0000
ROA not after: Wed 24 Jun 2026 08:38:39 +0000
asID: 54600
IP address blocks: 154.202.117.0/24 maxlen: 24
154.202.120.0/21 maxlen: 24
154.217.234.0/23 maxlen: 24
154.217.236.0/22 maxlen: 24
154.217.240.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 15 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117800 (0x1cc28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 17 08:38:39 2026 GMT
Not After : Jun 24 08:38:39 2026 GMT
Subject: CN=6a097e95-747e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:5c:04:a5:c9:04:2a:fa:85:a4:d9:3b:72:06:
f3:31:9c:f1:ce:cd:63:fc:d9:3a:9b:78:7c:12:0a:
d9:f5:96:43:68:1f:d8:52:76:ec:25:90:a7:8e:8d:
1f:7f:dc:9b:2c:82:ad:cd:40:24:02:fa:b3:6d:46:
c8:76:d2:86:8e:c6:85:8c:95:c5:35:c9:da:bf:8f:
e9:3f:0b:70:92:3e:13:4e:6b:60:97:c5:b4:fd:53:
fa:88:2c:60:e7:05:2f:6c:3a:0d:31:b2:db:94:dc:
9f:63:29:0f:9f:13:3e:d4:38:df:3c:67:4a:b4:80:
f6:ad:0c:4b:fc:13:1a:7f:b5:41:6e:51:dc:1d:88:
b8:f2:23:29:47:3f:12:60:cd:97:69:68:48:f1:bf:
c6:5a:58:9e:f1:58:aa:fc:44:fc:2e:84:3c:f5:a5:
bc:7e:68:13:96:ff:c5:51:75:f1:b0:25:e4:20:3a:
80:73:13:53:5d:f1:4b:7b:17:48:13:f5:b9:9c:e6:
1b:de:65:57:7d:fa:77:91:4a:2b:36:25:c0:d6:6b:
ef:35:73:fd:69:2b:a2:2f:38:ce:02:b4:4f:c9:87:
1a:3f:e9:53:3a:c8:76:0b:07:15:3c:de:a6:f1:df:
c9:07:fa:b1:7d:fa:e9:53:5a:d6:ed:89:e2:cb:e9:
8f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:92:31:C2:61:DE:02:F0:5B:D3:7E:E8:DB:D8:F9:0C:E4:30:07:5F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D0977EA451CB11F19F09FEC6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.202.117.0/24
154.202.120.0/21
154.217.234.0-154.217.255.255
Signature Algorithm: sha256WithRSAEncryption
a8:d4:ac:30:8e:eb:12:9f:ab:c6:e2:fe:3a:9d:7a:7f:9b:d3:
e2:38:5c:0e:db:e5:c9:f2:2c:2a:ee:13:23:ba:b3:64:6e:13:
9c:d0:b4:88:b3:88:e6:0a:70:6c:f6:8c:0f:51:33:de:6a:ba:
a0:6c:a4:11:b9:56:74:c1:d6:13:95:5a:d7:8e:16:ca:3b:0d:
70:a2:45:eb:29:57:30:01:dd:ba:03:c4:0b:23:8f:80:56:1a:
b1:32:1b:48:df:14:d4:20:8d:c6:e8:05:30:9f:ba:05:f3:b0:
d5:5f:7f:70:50:17:43:ad:f0:ef:9d:01:f5:fe:01:d0:da:44:
31:7e:02:b1:4a:a4:f9:2d:f4:b0:fd:af:3b:20:a0:06:13:83:
1d:a9:0c:e7:94:d5:a5:93:69:63:d7:54:f5:09:44:b1:34:47:
a3:4c:a5:cd:b1:f5:7c:cf:d6:78:8f:33:1b:4c:55:86:ce:5e:
62:31:2e:c4:0c:d9:9b:9b:27:7a:13:09:96:27:04:88:a0:10:
9f:6c:8f:db:e6:10:a0:ae:c4:b7:d9:04:f2:a0:12:08:ab:76:
75:fb:7d:e5:55:8d:ac:da:7d:e2:05:72:88:b2:a8:f4:0d:49:
f6:b2:50:70:b2:1a:8c:0d:51:ca:d0:6e:67:ef:36:9c:ee:82:
88:36:82:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 05:45:09 2026 by rpki-client