Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2A1D508898E11F19D356AC0CE1D38B0.roa
File: A2A1D508898E11F19D356AC0CE1D38B0.roa (raw, json)
Hash identifier: Nb0WINJtDe5xwg8DVOyGeEWciCHXiMTsdBSS9mvbSDI=
Subject key identifier: FB:2E:3B:3C:17:96:14:4A:6C:7E:E6:5C:78:4D:25:69:53:00:11:44
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DB5B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2A1D508898E11F19D356AC0CE1D38B0.roa
Signing time: Mon 27 Jul 2026 07:41:53 +0000
ROA not before: Mon 27 Jul 2026 07:41:50 +0000
ROA not after: Mon 31 Aug 2026 07:41:50 +0000
asID: 62240
IP address blocks: 154.194.114.0/24 maxlen: 24
154.194.115.0/24 maxlen: 24
154.194.116.0/24 maxlen: 24
154.195.2.0/24 maxlen: 24
154.195.176.0/24 maxlen: 24
154.195.177.0/24 maxlen: 24
154.196.70.0/24 maxlen: 24
154.196.76.0/24 maxlen: 24
154.196.77.0/24 maxlen: 24
154.196.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121691 (0x1db5b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 27 07:41:50 2026 GMT
Not After : Aug 31 07:41:50 2026 GMT
Subject: CN=6a670bc1-bf7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f2:1f:49:5e:49:85:ac:ba:c0:3b:81:7c:7c:
68:8d:02:ad:e7:3d:46:b1:94:b0:60:68:82:2a:40:
5b:6f:10:99:db:69:4a:97:20:4b:01:69:73:44:cb:
42:f8:14:71:e3:09:a8:85:bf:48:7b:5d:1e:18:f0:
68:48:a4:d4:50:68:a3:75:cc:c5:60:8c:f2:c3:20:
d0:3b:92:58:c4:61:1d:7d:d1:10:a8:78:34:c9:fe:
8d:dd:c5:ff:61:6f:73:bf:09:1d:55:ec:1e:e8:37:
68:2b:19:42:22:dd:f8:bf:1d:d6:3b:b6:28:06:9d:
f2:d8:8c:08:e2:ee:24:83:67:17:a5:21:da:eb:5c:
55:f8:09:f4:61:da:7f:42:5d:fb:0a:da:aa:e3:8c:
16:2a:04:18:a7:ba:46:05:20:fa:87:eb:55:53:22:
32:b3:1b:60:4f:db:8a:0e:f7:b6:25:47:2a:d1:16:
1e:67:84:2c:87:3a:2c:43:06:5b:47:7c:c6:4e:85:
3f:82:7b:8f:68:d5:fc:23:f3:98:26:76:4b:54:fd:
cd:f9:9f:ef:a9:5f:34:17:96:30:53:63:4b:a0:7e:
f7:de:3d:af:02:73:7a:5b:60:63:ee:84:7b:bc:b3:
b4:73:73:9c:90:d7:6a:88:f5:5a:b2:b6:14:9c:68:
ac:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:2E:3B:3C:17:96:14:4A:6C:7E:E6:5C:78:4D:25:69:53:00:11:44
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A2A1D508898E11F19D356AC0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.114.0-154.194.116.255
154.195.2.0/24
154.195.176.0/23
154.196.70.0/24
154.196.76.0-154.196.78.255
Signature Algorithm: sha256WithRSAEncryption
7e:94:32:b4:f8:96:9b:dd:ea:4a:ff:18:44:84:71:9f:79:2a:
a9:00:4f:9d:d9:ae:32:3d:90:59:b0:7b:4c:80:ad:51:a4:3b:
4f:ef:bf:c1:43:44:67:a2:dc:76:f8:70:7a:b5:a6:06:8d:59:
ed:80:58:e9:17:c7:02:1c:08:85:31:ad:fd:ac:8d:55:ca:4a:
7f:c0:dc:2d:99:96:f2:c1:3d:45:08:ea:62:90:7f:62:71:9c:
2d:70:54:cd:54:72:81:28:2b:b0:45:90:b5:85:6d:80:a4:18:
2f:db:68:ba:c5:1c:a1:3d:54:b5:62:03:77:ac:09:61:10:b3:
e6:cd:1f:9d:05:5e:89:ed:93:15:6e:1d:9e:fd:e5:fc:42:e3:
e3:40:a6:6e:f2:e1:b1:4f:1c:66:0d:39:56:7f:9e:24:61:72:
cc:c0:d1:bd:5a:c3:62:f0:50:a8:50:46:bc:2b:c0:5b:f4:1a:
0d:67:6b:b5:18:e3:0e:e6:3f:c4:26:e7:f7:ae:fd:21:f4:06:
ad:b6:3f:46:86:b4:32:e6:cb:5c:4f:42:b3:e9:48:7a:32:6f:
30:05:b6:05:39:95:07:69:e4:ae:40:ac:58:cb:59:8e:db:6e:
82:3a:be:15:fd:46:df:00:24:a6:c5:9d:9b:58:d8:46:fc:9c:
21:2b:49:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:41:08 2026 by rpki-client