Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13B6F6E2899E11F18D8B7E1BCF1D38B0.roa
File: 13B6F6E2899E11F18D8B7E1BCF1D38B0.roa (raw, json)
Hash identifier: Gv//UPyEg9wPgSfkD6h+ge33WThSvBF/K+N6iiFxOo8=
Subject key identifier: CB:F3:0F:93:3B:FE:2C:F5:1B:28:66:BF:76:81:7A:11:A5:F3:3E:D1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DB81
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13B6F6E2899E11F18D8B7E1BCF1D38B0.roa
Signing time: Mon 27 Jul 2026 09:32:26 +0000
ROA not before: Mon 27 Jul 2026 09:32:21 +0000
ROA not after: Mon 31 Aug 2026 09:32:21 +0000
asID: 62240
IP address blocks: 154.195.116.0/24 maxlen: 24
154.195.117.0/24 maxlen: 24
154.195.118.0/24 maxlen: 24
154.195.120.0/24 maxlen: 24
154.195.124.0/24 maxlen: 24
154.195.135.0/24 maxlen: 24
154.195.136.0/24 maxlen: 24
154.195.137.0/24 maxlen: 24
154.196.62.0/24 maxlen: 24
154.196.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121729 (0x1db81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 27 09:32:21 2026 GMT
Not After : Aug 31 09:32:21 2026 GMT
Subject: CN=6a6725aa-13f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d3:26:44:e7:c7:de:e3:0f:6c:6d:af:ed:f7:
82:1b:6a:02:49:44:c1:63:f0:ac:6d:31:15:30:e0:
f3:21:14:9a:78:61:57:ed:f5:1c:eb:1a:d7:b2:2d:
5f:bc:38:b7:f1:63:c8:ae:85:b7:6b:a2:9f:26:d1:
24:ce:8b:da:24:45:da:28:38:cd:d9:3e:9a:f7:bb:
3a:fc:0b:c5:9f:0f:76:ea:01:2c:86:ee:17:39:d1:
ec:52:6d:ab:86:be:42:f9:4f:91:66:60:3c:58:a3:
99:7a:0c:df:88:95:37:48:3c:5d:79:b3:2b:e2:bc:
fc:a1:20:6b:66:53:e7:55:18:04:bd:c8:b6:d9:4f:
27:d3:46:de:b5:41:0b:7d:14:db:e8:8b:d7:dc:83:
54:33:4c:a1:70:e3:27:ac:a9:c9:45:e0:f2:7d:cb:
50:f5:80:3f:f0:19:c3:58:a7:9a:c4:8e:7b:15:fa:
08:d7:14:0f:68:f0:df:f8:5b:75:7d:51:3f:7a:fe:
b8:d3:1a:55:88:0e:60:bd:69:66:d3:96:0f:22:b0:
82:96:57:a8:2f:10:01:04:44:dc:ab:2f:9d:7d:fd:
51:7d:5c:3c:0c:ed:e0:e6:40:fd:d2:6f:e7:2c:76:
f5:a0:93:3e:1a:ad:64:b6:9d:56:49:c0:70:93:32:
78:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F3:0F:93:3B:FE:2C:F5:1B:28:66:BF:76:81:7A:11:A5:F3:3E:D1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/13B6F6E2899E11F18D8B7E1BCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.116.0-154.195.118.255
154.195.120.0/24
154.195.124.0/24
154.195.135.0-154.195.137.255
154.196.62.0/24
154.196.64.0/24
Signature Algorithm: sha256WithRSAEncryption
66:57:66:52:06:f8:6e:97:30:b5:24:32:d4:98:4a:9c:cc:68:
98:e4:5f:77:2f:dc:3d:23:4a:8a:0e:ef:b0:e8:2d:bf:92:51:
4d:31:15:e0:7e:41:65:78:c4:6e:8e:cc:ec:a5:0c:5a:8d:fc:
31:26:0e:21:58:32:9b:fd:60:23:fe:03:6c:c4:f2:81:0f:65:
83:23:4f:61:06:f7:23:20:fb:c6:07:b1:86:ca:64:02:6f:ca:
2e:3f:92:d3:b0:b9:01:c7:c7:e1:1d:df:11:63:1f:fc:ac:55:
17:23:03:c7:63:78:1f:03:fb:6e:19:73:ff:68:26:ae:ca:b3:
8b:a0:aa:a3:de:54:ae:ba:5b:af:57:56:2d:a4:f5:a6:a9:f7:
ba:d1:cc:80:c2:18:9c:15:41:fa:5c:e3:bd:46:6e:23:91:ac:
e4:e6:cc:25:b1:c0:55:3e:3c:44:0a:17:d4:4d:3d:c7:de:40:
d7:f8:57:f5:4b:08:03:83:4d:29:02:2d:97:36:ae:93:c1:d2:
7a:54:33:c3:3e:12:51:bb:d9:0e:64:30:15:8f:61:c8:22:b7:
f0:ca:96:e3:5c:24:da:c3:ce:79:b5:6b:92:71:30:fe:50:fb:
b4:89:8f:fb:64:54:f9:5b:dd:eb:c9:2e:b9:9e:c5:aa:58:f5:
40:95:e4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:40:46 2026 by rpki-client