Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13436C34898C11F1A4EF28B0CE1D38B0.roa
File: 13436C34898C11F1A4EF28B0CE1D38B0.roa (raw, json)
Hash identifier: E5HwJVBHa39DNJchmzhIzpDV8ksWv2m4b1E1BkCdVs8=
Subject key identifier: 07:74:EA:79:3C:1F:36:89:AC:CB:49:28:F1:B5:9A:8E:4B:2D:1A:EA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DB51
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13436C34898C11F1A4EF28B0CE1D38B0.roa
Signing time: Mon 27 Jul 2026 07:23:34 +0000
ROA not before: Mon 27 Jul 2026 07:23:30 +0000
ROA not after: Mon 31 Aug 2026 07:23:30 +0000
asID: 62240
IP address blocks: 154.194.106.0/24 maxlen: 24
154.194.107.0/24 maxlen: 24
154.194.108.0/24 maxlen: 24
154.194.109.0/24 maxlen: 24
154.194.110.0/24 maxlen: 24
154.194.111.0/24 maxlen: 24
154.196.79.0/24 maxlen: 24
154.196.80.0/24 maxlen: 24
154.196.81.0/24 maxlen: 24
154.196.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121681 (0x1db51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 27 07:23:30 2026 GMT
Not After : Aug 31 07:23:30 2026 GMT
Subject: CN=6a670776-5ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:1f:b7:0d:a6:bd:8a:32:7c:a8:e2:a8:c9:3c:
f6:fc:ec:56:6f:ca:7b:20:e7:61:d9:d6:92:51:f1:
f5:d9:21:83:80:67:bf:6a:2e:7c:d7:be:8d:3b:d6:
ac:c9:ab:8a:cd:e2:82:30:37:da:ad:87:48:22:22:
ab:f6:fe:4b:25:1c:03:2f:92:ea:6d:59:bb:d3:41:
f6:00:c8:f7:8a:68:de:57:fe:aa:1b:9e:b8:44:a6:
62:3c:7c:4c:ac:2d:bc:c1:7a:2c:6e:41:d2:b6:59:
b2:50:66:68:f6:40:94:a5:5c:5e:5a:9f:df:4e:aa:
ec:cd:4b:8b:50:f7:1f:d3:4f:59:28:f9:7b:21:05:
22:af:60:ba:08:64:99:e6:53:84:88:c3:91:fd:de:
ef:54:b7:02:cb:d2:ae:7f:6b:d8:aa:1e:56:16:ed:
86:25:9d:51:7e:b4:e3:c5:ff:9b:d3:b9:89:d5:1a:
77:93:5b:c9:21:38:c8:f3:ab:fa:87:3a:16:c5:31:
0d:42:9e:6b:f6:43:25:64:06:1e:d5:56:3d:ce:76:
c2:2a:14:3d:e7:45:05:a2:0d:4b:f1:0f:af:6d:69:
64:55:a6:75:5a:8a:ec:eb:31:05:a2:81:69:4a:48:
45:0b:4a:52:c5:2b:b1:e0:96:97:57:bc:a8:55:aa:
41:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:74:EA:79:3C:1F:36:89:AC:CB:49:28:F1:B5:9A:8E:4B:2D:1A:EA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13436C34898C11F1A4EF28B0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.106.0-154.194.111.255
154.196.79.0-154.196.81.255
154.196.87.0/24
Signature Algorithm: sha256WithRSAEncryption
c4:43:4c:86:03:9e:1e:a9:71:f4:9b:a1:1c:2c:f2:52:3a:82:
4d:a5:1b:0c:7a:fd:eb:51:6b:c7:ec:aa:bc:61:7e:90:88:90:
b1:0a:19:eb:c6:eb:b9:3e:41:34:6a:c6:45:9e:09:35:b9:32:
86:18:b6:14:dc:7c:33:c8:b5:b6:4e:0d:c6:d1:29:fb:35:d9:
8f:a8:f3:8d:27:fd:42:78:a8:f9:7b:d2:c8:eb:70:ab:af:bf:
a5:43:b2:3b:53:89:97:fc:07:ca:0f:6d:73:fe:d1:fb:dd:08:
38:c2:6f:33:c6:34:d3:eb:f4:eb:b8:b3:8a:a5:43:5e:52:79:
0d:24:ce:81:a0:14:38:46:0c:19:81:45:84:db:8f:ac:52:b9:
2e:bb:30:ae:a7:5b:1d:a0:f1:af:d2:4c:ab:4f:cf:2f:62:44:
92:9d:08:bd:a9:04:8e:14:27:55:7e:04:2d:5a:07:67:14:70:
28:9e:f4:b4:45:43:1c:a0:b0:52:6a:ec:c5:07:2e:cb:a3:69:
95:11:7f:29:b0:57:d7:12:a1:75:fd:95:3e:4c:9f:61:17:30:
b2:c8:b0:88:48:9f:8a:54:c8:4c:56:22:e8:88:97:1d:7e:ac:
cc:6a:1b:78:cc:f4:5c:7f:be:d9:77:28:2c:5f:37:c8:ab:ea:
2d:e8:14:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:40:22 2026 by rpki-client