Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7703037289B111F187F3A50FCF1D38B0.roa
File: 7703037289B111F187F3A50FCF1D38B0.roa (raw, json)
Hash identifier: DY1D2RHGr9W8rC2xU8H61B3lBJf/LwyLeICaMbJmEXc=
Subject key identifier: 75:B9:CB:FF:0C:98:8C:EB:EF:58:B1:1D:63:42:C7:12:E4:36:68:F4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DB89
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7703037289B111F187F3A50FCF1D38B0.roa
Signing time: Mon 27 Jul 2026 11:51:13 +0000
ROA not before: Mon 27 Jul 2026 11:51:08 +0000
ROA not after: Mon 31 Aug 2026 11:51:08 +0000
asID: 62240
IP address blocks: 154.194.101.0/24 maxlen: 24
154.194.102.0/24 maxlen: 24
154.194.104.0/24 maxlen: 24
154.194.105.0/24 maxlen: 24
154.194.126.0/24 maxlen: 24
154.195.3.0/24 maxlen: 24
154.195.97.0/24 maxlen: 24
154.195.98.0/24 maxlen: 24
154.195.99.0/24 maxlen: 24
154.195.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121737 (0x1db89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 27 11:51:08 2026 GMT
Not After : Aug 31 11:51:08 2026 GMT
Subject: CN=6a674631-3e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:66:b5:6a:6a:c4:fd:d4:50:27:3f:a7:78:7e:
eb:4e:51:3b:a3:4d:d8:c8:6c:eb:b7:36:d7:d4:ff:
1e:9f:5f:ed:e3:3c:24:44:c4:e4:77:2b:eb:b9:8f:
10:0f:1d:7a:71:8f:40:f3:2c:0d:55:74:8e:6a:51:
96:72:3a:e7:c8:2d:17:6b:3d:a9:e9:b1:88:4c:7e:
07:b7:52:d5:0b:42:0e:db:60:6c:9f:74:c6:5c:d9:
6e:e9:b7:59:21:cd:41:3e:6f:68:50:bd:3f:84:7f:
f0:7e:9a:37:8d:74:a5:2b:ad:40:84:ef:5f:03:96:
9f:ea:5d:39:01:82:3e:50:9a:12:10:2a:43:0b:28:
82:9d:c7:66:e9:ff:ed:21:c9:ea:e3:ea:e0:e2:1a:
6b:84:82:f5:4a:ea:88:ef:52:e2:33:d3:2b:a5:eb:
6b:00:42:1f:b3:f7:28:99:80:46:29:29:11:59:90:
0a:b5:f7:a9:ac:72:42:ce:3b:f7:ae:16:8f:3d:de:
66:e1:21:5a:d7:cf:81:65:f7:28:2b:af:a3:0e:3f:
c3:b5:7b:97:49:e9:89:e2:a6:12:ac:19:26:fe:1c:
f2:c5:d4:b2:b5:f7:39:a6:af:2e:27:32:ca:66:f5:
fc:24:77:12:84:e6:bd:29:ce:d5:0e:2d:35:74:34:
ed:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B9:CB:FF:0C:98:8C:EB:EF:58:B1:1D:63:42:C7:12:E4:36:68:F4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7703037289B111F187F3A50FCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.101.0-154.194.102.255
154.194.104.0/23
154.194.126.0/24
154.195.3.0/24
154.195.97.0-154.195.99.255
154.195.101.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:09:5b:f3:42:f4:d6:d3:37:a3:03:22:9d:bf:b4:c4:08:6b:
fc:5d:56:18:1e:08:eb:f6:7a:08:4e:ce:dc:2a:2c:51:8b:0d:
30:92:ed:c3:6b:ba:57:16:fa:2c:5d:c4:25:3d:ba:80:2b:b2:
0c:ad:a2:20:be:51:bc:cf:a0:12:4b:2c:03:45:b6:27:7d:29:
c4:d5:84:68:d4:b1:e5:bb:2a:57:ee:25:ed:0b:e7:99:a0:25:
2b:07:37:19:8f:5a:bb:d0:42:3b:64:b5:4d:3f:37:d8:f9:51:
b5:7f:1a:7a:58:20:18:75:f1:1e:fe:05:e5:a1:dc:55:24:f3:
e0:92:2f:50:ca:e7:86:b2:b0:d0:d9:43:5d:26:fd:31:ba:17:
f5:e6:46:33:10:18:6e:4a:5d:7c:09:fa:34:00:c8:09:f3:bc:
c6:b5:d6:01:c5:ff:34:6a:29:4a:ea:7d:b0:c2:25:81:f4:51:
0c:4b:b4:56:7e:f0:73:fa:bc:58:07:1f:af:d8:71:5e:dd:a0:
3b:2c:3f:2c:4e:8e:f0:9e:11:ed:e1:aa:73:76:d3:0e:81:cd:
3d:1e:1c:95:40:df:56:d9:8d:9d:d0:84:5e:ed:58:fb:b2:02:
9a:0e:2e:97:77:1a:a6:3c:5a:cf:ed:e9:e3:8e:01:e0:d8:de:
13:a3:8d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:40:40 2026 by rpki-client