Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D7A2856898F11F1B9368AC4CE1D38B0.roa
File: 7D7A2856898F11F1B9368AC4CE1D38B0.roa (raw, json)
Hash identifier: j/ZMuv6IPN9woKHA/3IYygTWIcy9TqR/hxTlGrLVOus=
Subject key identifier: E5:0B:70:84:23:CC:D8:3E:EC:AA:C7:D6:42:39:AA:30:68:48:B9:0F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DB5D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D7A2856898F11F1B9368AC4CE1D38B0.roa
Signing time: Mon 27 Jul 2026 07:48:01 +0000
ROA not before: Mon 27 Jul 2026 07:47:57 +0000
ROA not after: Mon 31 Aug 2026 07:47:57 +0000
asID: 62240
IP address blocks: 154.194.80.0/24 maxlen: 24
154.195.24.0/24 maxlen: 24
154.195.25.0/24 maxlen: 24
154.195.26.0/24 maxlen: 24
154.195.27.0/24 maxlen: 24
154.195.107.0/24 maxlen: 24
154.195.178.0/24 maxlen: 24
154.195.179.0/24 maxlen: 24
154.195.180.0/24 maxlen: 24
154.195.181.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121693 (0x1db5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 27 07:47:57 2026 GMT
Not After : Aug 31 07:47:57 2026 GMT
Subject: CN=6a670d31-ec2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2c:77:8f:1d:dc:58:0a:2c:8c:8d:3f:48:c3:
fa:c0:11:f5:d2:81:14:3b:ed:1f:6f:65:c5:15:6d:
77:19:06:a0:c7:f1:dc:98:2e:ec:4e:95:c1:91:65:
12:8e:48:dc:be:82:e5:aa:7f:c0:b0:6a:88:2d:18:
99:92:b3:e7:8b:a0:e4:b5:af:86:96:64:4c:59:e1:
98:89:0f:4d:22:75:ed:07:c6:99:0f:84:b1:d4:91:
3e:8c:e2:5f:0a:fa:e7:a6:14:48:aa:fa:50:74:5d:
4b:52:75:3e:78:8c:ea:85:9c:23:b5:6b:91:bd:7d:
a1:92:72:fc:5a:9d:8c:1a:66:b5:40:be:cb:d4:aa:
04:26:cb:dd:fd:f0:c4:cd:5a:6b:49:79:f4:e6:91:
76:bd:d5:0b:ce:f7:a1:90:ff:3d:25:ca:57:97:c7:
57:4d:bb:56:df:da:89:19:62:52:2f:15:f5:d8:76:
22:88:0f:5e:6c:a0:3c:77:19:c2:59:8d:ab:88:e4:
ae:63:0a:3f:77:fd:9b:73:68:c8:65:77:6c:af:9d:
d5:72:90:04:5b:4d:60:4e:a2:2e:d5:28:51:74:66:
9a:1f:b7:f2:b1:69:af:f0:ca:c7:a1:10:92:0e:e0:
22:0d:ae:be:ab:dc:6c:c1:33:86:e9:82:48:b6:be:
9c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:0B:70:84:23:CC:D8:3E:EC:AA:C7:D6:42:39:AA:30:68:48:B9:0F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7D7A2856898F11F1B9368AC4CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.80.0/24
154.195.24.0/22
154.195.107.0/24
154.195.178.0-154.195.181.255
Signature Algorithm: sha256WithRSAEncryption
17:16:63:cf:58:3a:51:02:da:84:6f:f0:a8:01:aa:22:0a:7f:
d0:3a:ff:db:cc:98:c1:50:12:62:b2:a2:e4:c2:2f:1a:b3:7b:
75:f2:32:d6:85:29:8f:2f:20:ac:69:22:fd:6c:55:40:58:39:
35:b7:c9:a5:92:2b:85:f4:86:d3:45:ad:40:ff:4d:1c:80:a8:
3f:08:e6:bf:3e:f5:06:e6:39:84:93:88:ce:34:9f:f1:9f:51:
b9:41:c1:9a:da:65:ce:a8:c5:b7:46:12:94:bb:51:25:81:44:
21:d9:61:7e:8d:86:92:e9:35:50:cd:14:38:e6:46:f4:d6:d1:
06:48:9c:f8:bc:ef:c1:8a:e6:6a:3e:b5:53:10:85:25:eb:87:
69:49:59:91:b9:05:6b:a2:77:57:77:0e:11:16:65:c1:01:fd:
9e:16:00:d1:be:14:0d:12:9a:d5:b1:1a:b8:bc:3a:fd:3f:f1:
9f:a7:8b:ba:c4:39:20:1d:e0:27:3a:bf:4c:55:70:4f:f7:b4:
0d:ba:a5:df:0b:84:c5:9f:13:5f:9a:29:a6:92:73:36:10:eb:
8e:0a:48:57:d2:f4:90:d2:5d:e3:1a:bb:4b:9f:8a:bb:60:ee:
31:65:9d:81:8c:4d:45:21:16:40:0c:d6:2f:4c:7a:fa:a8:12:
ef:7c:5b:88
-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIDAdtdMA0GCSqGSIb3DQEBCwUAMEgxEzARBgNVBAMTCkYz
NjhGMkQwQUYxMTAvBgNVBAUTKDI1RDYzRTA4RUFCRTdDRkE2Nzg1RDRDMUQ2RDM0
MTE2REUxNUIzREMwHhcNMjYwNzI3MDc0NzU3WhcNMjYwODMxMDc0NzU3WjAYMRYw
FAYDVQQDEw02YTY3MGQzMS1lYzJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB
CgKCAQEAsSx3jx3cWAosjI0/SMP6wBH10oEUO+0fb2XFFW13GQagx/HcmC7sTpXB
kWUSjkjcvoLlqn/AsGqILRiZkrPni6Dkta+GlmRMWeGYiQ9NInXtB8aZD4Sx1JE+
jOJfCvrnphRIqvpQdF1LUnU+eIzqhZwjtWuRvX2hknL8Wp2MGma1QL7L1KoEJsvd
/fDEzVprSXn05pF2vdULzvehkP89JcpXl8dXTbtW39qJGWJSLxX12HYiiA9ebKA8
dxnCWY2riOSuYwo/d/2bc2jIZXdsr53VcpAEW01gTqIu1ShRdGaaH7fysWmv8MrH
oRCSDuAiDa6+q9xswTOG6YJItr6cPQIDAQABo4ICvzCCArswHQYDVR0OBBYEFOUL
cIQjzNg+7KrH1kI5qjBoSLkPMB8GA1UdIwQYMBaAFCXWPgjqvnz6Z4XUwdbTQRbe
FbPcMA4GA1UdDwEB/wQEAwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3lu
YzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1iZXJfcmVwb3NpdG9y
eS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJGOEFFQTIyOC9KZFkt
Q09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY3JsMGcGCCsGAQUFBwEBBFswWTBXBggr
BgEFBQcwAoZLcnN5bmM6Ly9ycGtpLmFmcmluaWMubmV0L3JlcG9zaXRvcnkvYWZy
aW5pYy9KZFktQ09xLWZQcG5oZFRCMXROQkZ0NFZzOXcuY2VyME8GA1UdIAEB/wRF
MEMwQQYIKwYBBQUHDgIwNTAzBggrBgEFBQcCARYnaHR0cHM6Ly9ycGtpLmFmcmlu
aWMubmV0L3BvbGljeS9DUFMucGRmMIHbBggrBgEFBQcBCwSBzjCByzCBkQYIKwYB
BQUHMAuGgYRyc3luYzovL3Jwa2kuYWZyaW5pYy5uZXQvcmVwb3NpdG9yeS9tZW1i
ZXJfcmVwb3NpdG9yeS9GMzY4RjJEMC83RjRBOThFQTZFMDUxMUU4OUMwRDZFNEJG
OEFFQTIyOC83RDdBMjg1Njg5OEYxMUYxQjkzNjhBQzRDRTFEMzhCMC5yb2EwNQYI
KwYBBQUHMA2GKWh0dHBzOi8vcnJkcC5hZnJpbmljLm5ldC9ub3RpZmljYXRpb24u
eG1sMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQAmsJQAwQCmsMYAwQAmsNr
MAwDBAGaw7IDBAGaw7QwDQYJKoZIhvcNAQELBQADggEBABcWY89YOlEC2oRv8KgB
qiIKf9A6/9vMmMFQEmKyouTCLxqze3XyMtaFKY8vIKxpIv1sVUBYOTW3yaWSK4X0
htNFrUD/TRyAqD8I5r8+9QbmOYSTiM40n/GfUblBwZraZc6oxbdGEpS7USWBRCHZ
YX6NhpLpNVDNFDjmRvTW0QZInPi878GK5mo+tVMQhSXrh2lJWZG5BWuid1d3DhEW
ZcEB/Z4WANG+FA0SmtWxGri8Ov0/8Z+ni7rEOSAd4Cc6v0xVcE/3tA26pd8LhMWf
E1+aKaaSczYQ644KSFfS9JDSXeMau0ufirtg7jFlnYGMTUUhFkAM1i9MevqoEu98
W4g=
-----END CERTIFICATE-----
Generated at Tue Jul 28 15:59:13 2026 by rpki-client