Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/38B48870899D11F1950A6B17CF1D38B0.roa
File: 38B48870899D11F1950A6B17CF1D38B0.roa (raw, json)
Hash identifier: 2QeijISbSHK98in/oP/48lzOkZT+HILDU6x3FhCbyiY=
Subject key identifier: C6:E7:E7:65:A0:7F:11:03:B7:DF:E7:90:6D:FA:F9:EB:46:BF:6A:5F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DB7F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/38B48870899D11F1950A6B17CF1D38B0.roa
Signing time: Mon 27 Jul 2026 09:26:18 +0000
ROA not before: Mon 27 Jul 2026 09:26:14 +0000
ROA not after: Mon 31 Aug 2026 09:26:14 +0000
asID: 62240
IP address blocks: 154.195.111.0/24 maxlen: 24
154.195.112.0/24 maxlen: 24
154.195.127.0/24 maxlen: 24
154.195.128.0/24 maxlen: 24
154.195.129.0/24 maxlen: 24
154.195.130.0/24 maxlen: 24
154.195.131.0/24 maxlen: 24
154.195.132.0/24 maxlen: 24
154.195.133.0/24 maxlen: 24
154.195.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121727 (0x1db7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 27 09:26:14 2026 GMT
Not After : Aug 31 09:26:14 2026 GMT
Subject: CN=6a67243a-ee52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6c:1c:61:7f:52:c5:65:56:fc:f3:14:98:c6:
2a:54:71:ab:d2:e7:ec:0f:46:c6:b9:f0:db:60:2c:
2e:08:b1:d1:a7:d9:05:13:11:22:5e:ce:9e:00:a6:
40:ce:51:a2:e9:13:be:17:4f:6d:88:7c:f2:92:7f:
2c:69:50:c0:3d:33:48:0b:3c:65:3a:57:45:0e:9f:
dc:27:a3:b4:4c:45:0c:c4:55:8b:dd:c6:fe:48:f7:
a3:50:71:59:43:62:0b:80:cb:e9:c2:45:2e:c8:98:
0d:2a:18:52:6a:f0:15:b2:cb:3f:9b:a4:b5:05:1e:
31:1d:09:56:15:3e:35:44:a7:2e:66:d3:01:9d:fb:
98:69:7b:f5:7c:e1:d2:07:23:ee:f8:7d:7a:24:91:
3b:16:e4:d8:b0:3b:ea:b8:50:35:11:76:42:3b:24:
32:1b:a5:f7:cf:40:b8:06:3e:ca:f1:8f:09:f6:7e:
5b:8e:ca:36:22:58:a8:9d:aa:bc:e5:5c:cb:20:fe:
40:8e:0a:6b:d3:c0:6b:ca:4e:6a:9f:61:79:5f:e4:
d6:27:b9:37:6a:f7:51:ed:fb:83:c4:fc:d2:85:c7:
06:ac:f1:53:0b:0b:cd:48:82:0f:c0:44:bc:1b:1a:
6d:97:72:9e:b4:9b:e5:b6:10:6d:d1:b9:28:fc:b0:
19:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E7:E7:65:A0:7F:11:03:B7:DF:E7:90:6D:FA:F9:EB:46:BF:6A:5F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/38B48870899D11F1950A6B17CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.111.0-154.195.112.255
154.195.127.0-154.195.134.255
Signature Algorithm: sha256WithRSAEncryption
a9:a5:7a:7b:f2:fa:c5:47:27:2a:fe:df:ea:46:83:ff:d3:15:
f6:43:6f:c0:04:de:af:b9:be:10:14:65:c9:84:f4:7a:cc:53:
e3:2c:8b:16:9d:3b:49:cc:51:da:da:ec:61:7f:f5:6b:26:37:
ba:04:60:25:7a:54:cd:4c:f6:c6:41:67:65:82:41:19:ac:5c:
fb:0c:97:3d:81:bf:63:0a:5f:72:4b:ad:6f:09:bd:8d:2c:cd:
9f:5e:cc:57:54:d9:61:cd:3a:78:e9:e0:d4:09:65:c9:50:17:
dd:d3:ce:19:0e:b9:1b:da:48:61:e4:49:b5:75:ef:00:a5:9f:
d2:23:14:9f:c7:6a:d7:58:44:f5:fc:d2:90:c7:ee:5d:c3:a4:
ba:31:aa:66:29:0d:a3:ec:b8:f7:d6:eb:2c:ea:38:83:8b:dc:
63:03:ac:9a:5e:6a:e1:c6:82:d2:bb:c6:cf:b0:27:70:a1:57:
5c:34:8e:4f:e0:30:d9:fc:5c:dd:46:ca:fd:e2:2c:53:6a:e9:
c5:1a:57:78:cc:22:10:9b:b2:8f:4e:ea:ab:d9:d4:8e:8b:42:
30:a3:89:b7:01:e9:24:7f:6a:d4:33:01:2a:22:ee:5f:81:93:
e6:49:4e:92:ed:e1:86:bf:2c:23:2f:01:14:a3:31:68:8c:91:
fb:f4:0f:24
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 28 19:40:33 2026 by rpki-client