Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10390E84899811F1BDE6A0F7CE1D38B0.roa
File: 10390E84899811F1BDE6A0F7CE1D38B0.roa (raw, json)
Hash identifier: qhD97eTxcJh85hSPHs8u3hxngGlTZ0LlkZlYDo+l/Yk=
Subject key identifier: C1:97:B7:C1:3F:CA:D3:74:5F:A5:D0:1B:5A:22:D9:23:61:B5:F9:4C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DB73
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10390E84899811F1BDE6A0F7CE1D38B0.roa
Signing time: Mon 27 Jul 2026 08:49:23 +0000
ROA not before: Mon 27 Jul 2026 08:49:19 +0000
ROA not after: Mon 31 Aug 2026 08:49:19 +0000
asID: 62240
IP address blocks: 154.194.90.0/24 maxlen: 24
154.194.91.0/24 maxlen: 24
154.195.0.0/24 maxlen: 24
154.195.1.0/24 maxlen: 24
154.195.100.0/24 maxlen: 24
154.195.121.0/24 maxlen: 24
154.195.122.0/24 maxlen: 24
154.195.173.0/24 maxlen: 24
154.195.174.0/24 maxlen: 24
154.195.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121715 (0x1db73)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 27 08:49:19 2026 GMT
Not After : Aug 31 08:49:19 2026 GMT
Subject: CN=6a671b93-bf0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:51:ee:4c:d6:45:10:9a:27:d1:6a:4a:32:5b:
3b:e9:bd:b0:7a:75:57:c9:59:dd:3c:56:fb:db:14:
bf:d6:54:61:81:27:67:a1:5e:d9:b8:45:2b:d8:fa:
c3:7d:04:e5:e5:67:8c:38:09:76:cd:ec:21:36:71:
51:40:8d:0b:e6:ca:34:45:24:3f:9e:38:de:a4:22:
c3:1a:e1:c5:62:f8:e2:2a:72:4b:cd:ae:ec:b1:6c:
14:e1:d0:8e:32:4a:6b:c6:fd:0d:af:f5:45:d1:17:
a4:fb:89:aa:f2:85:54:f2:be:59:52:53:07:19:2f:
9a:03:fc:ae:bf:94:00:6a:ce:82:87:fb:88:8c:13:
73:77:89:35:42:fd:0a:b6:a1:c4:99:50:4b:87:fc:
8b:1d:f2:f3:b0:e3:e1:fe:1d:5b:ed:bb:8b:28:58:
39:b0:69:e6:72:40:fc:63:02:65:60:97:6a:03:83:
2b:41:09:b3:62:e1:10:0a:8c:24:d1:f2:46:85:71:
77:70:81:f7:da:fa:0d:ff:6c:9a:3d:57:c5:c0:d4:
33:54:f8:2f:f1:71:f3:49:b4:8f:91:e0:b3:51:55:
18:16:9c:29:31:48:98:42:9b:33:6b:2b:dd:5b:aa:
30:14:7c:8e:78:22:20:11:39:8c:ce:12:b4:d3:b6:
23:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:97:B7:C1:3F:CA:D3:74:5F:A5:D0:1B:5A:22:D9:23:61:B5:F9:4C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10390E84899811F1BDE6A0F7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.90.0/23
154.195.0.0/23
154.195.100.0/24
154.195.121.0-154.195.122.255
154.195.173.0-154.195.175.255
Signature Algorithm: sha256WithRSAEncryption
3d:3e:37:8f:5b:e9:4d:a9:05:66:26:ac:9f:9b:22:95:a0:ab:
31:f2:24:c7:08:ca:07:de:69:e5:64:67:80:45:05:56:be:63:
02:3f:7b:75:b3:d7:7d:0e:e3:18:e3:c5:ae:a9:2a:7d:5f:5a:
fc:b9:b4:ad:0d:73:2a:30:a1:35:1c:e9:51:1a:9a:28:83:a1:
12:1e:a1:d5:55:5f:34:5c:1a:6b:2f:f9:7a:ec:1b:50:91:75:
1b:7e:2a:5d:2e:eb:13:98:8f:d2:61:6b:27:d1:a8:c6:99:b6:
26:61:3a:f4:c4:8d:f7:dc:ea:1b:ad:c6:41:8c:fd:2c:aa:b7:
f6:38:b4:2c:a8:59:ae:3e:6f:ff:69:85:f1:9e:6e:4e:7a:b8:
74:54:4b:70:63:c8:c9:0d:c6:ad:18:25:eb:73:7d:52:91:54:
f4:52:2a:30:ba:f1:ad:00:a4:71:8f:fa:39:a0:50:48:da:83:
ec:c5:19:ff:eb:a1:42:1f:33:6a:93:1c:0d:89:59:e2:a2:aa:
9d:08:f8:57:e2:fe:10:2b:61:e4:57:19:ce:5c:b6:1e:ad:7c:
56:8c:28:1e:5e:65:4a:64:e4:af:60:41:81:2d:a1:94:7c:0b:
56:36:80:4a:9a:41:74:33:72:49:d3:ff:0d:f4:8c:86:d0:2a:
54:db:7d:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:16:06 2026 by rpki-client