Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7B7F6D8899311F1A14744DDCE1D38B0.roa
File: C7B7F6D8899311F1A14744DDCE1D38B0.roa (raw, json)
Hash identifier: oyj6Kc72f9W7n6Hr6FKFGfW+ukSGGz2cIhVPdjeogo0=
Subject key identifier: FF:5F:DB:31:4D:54:65:AC:C7:12:98:87:93:FB:5D:E1:E5:7C:CF:25
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DB69
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7B7F6D8899311F1A14744DDCE1D38B0.roa
Signing time: Mon 27 Jul 2026 08:18:43 +0000
ROA not before: Mon 27 Jul 2026 08:18:39 +0000
ROA not after: Mon 31 Aug 2026 08:18:39 +0000
asID: 62240
IP address blocks: 154.194.33.0/24 maxlen: 24
154.195.6.0/24 maxlen: 24
154.195.7.0/24 maxlen: 24
154.195.139.0/24 maxlen: 24
154.195.145.0/24 maxlen: 24
154.195.146.0/24 maxlen: 24
154.195.147.0/24 maxlen: 24
154.195.158.0/24 maxlen: 24
154.196.83.0/24 maxlen: 24
154.196.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121705 (0x1db69)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 27 08:18:39 2026 GMT
Not After : Aug 31 08:18:39 2026 GMT
Subject: CN=6a671463-b0ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:69:ad:0f:ee:2c:50:e6:38:3e:7a:fa:b0:4d:
10:93:ef:df:8e:0b:5e:e9:a0:82:50:5e:77:e1:ab:
50:ea:25:68:4d:e7:9c:4a:6c:90:59:9a:cb:5e:fb:
2c:06:77:81:bc:34:1a:d0:ba:76:a9:de:6a:dc:e8:
52:ac:d2:5f:12:a4:80:15:39:a9:3a:02:37:49:40:
28:ab:f0:32:dc:95:b5:65:39:1e:05:28:9b:8f:84:
70:3b:44:25:20:48:b1:83:3d:a6:2f:f8:21:60:ed:
e0:c6:28:d8:c7:b6:f0:ce:24:34:ab:73:f7:62:42:
a1:20:b2:eb:c7:aa:ee:9a:45:e4:9f:2d:22:61:fb:
39:8c:8a:78:6c:fa:59:98:d0:ee:93:94:80:a9:ac:
be:54:7c:d9:95:c9:aa:cd:c5:ec:ff:eb:1f:69:77:
25:d6:ee:2c:e7:54:c1:1d:1c:25:89:25:61:68:37:
b1:ef:75:64:8a:32:ef:7c:2e:bb:12:c1:eb:75:be:
70:2a:49:9c:5d:3d:8a:c3:04:f3:46:bc:19:26:8b:
e5:18:33:a1:4c:9b:0c:ce:be:5d:c6:4f:ca:aa:4d:
5e:6a:a0:67:30:cf:ac:d9:72:3e:0a:8f:37:fa:44:
a4:d5:03:05:63:07:4a:ec:64:13:a9:b5:f1:66:a8:
41:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:5F:DB:31:4D:54:65:AC:C7:12:98:87:93:FB:5D:E1:E5:7C:CF:25
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C7B7F6D8899311F1A14744DDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.33.0/24
154.195.6.0/23
154.195.139.0/24
154.195.145.0-154.195.147.255
154.195.158.0/24
154.196.83.0/24
154.196.88.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:7c:4a:f3:ca:17:86:74:62:30:a5:60:49:35:88:4d:1f:d9:
1b:c9:1a:10:98:e7:ff:6e:04:a2:f7:f9:94:bf:f0:94:92:c1:
de:c1:9b:4a:90:ce:cf:1e:8a:3a:06:51:82:af:0a:11:52:79:
75:92:03:91:14:ec:62:cf:9f:79:76:b8:f2:fa:d5:53:86:ff:
18:15:06:65:6c:46:b0:42:08:5c:6b:56:7c:f8:80:54:55:83:
3c:cc:2b:34:3d:0b:7c:e8:d9:33:ad:bb:df:41:0a:b7:d5:14:
8c:9b:56:fa:65:3f:88:17:96:39:53:86:7a:89:30:7f:e4:3b:
db:6a:27:3f:a7:d1:37:9f:64:51:c2:f5:f8:db:c5:2a:fe:1a:
c6:2e:14:9c:f7:52:83:df:6d:01:30:8a:7a:13:79:91:04:29:
4c:94:73:27:36:05:d6:13:1f:f5:88:1a:b5:23:e1:43:1a:9f:
c6:78:54:84:d0:95:da:fa:b9:aa:ba:e0:1e:29:a0:d6:90:55:
d6:b6:ea:bb:b0:b8:d7:c4:cd:d1:2a:f5:82:06:2d:b0:c0:4d:
af:ce:24:3f:15:dd:02:b3:5c:fc:75:a1:c9:84:14:e1:ae:32:
fb:43:07:1e:12:1e:61:3f:f6:87:62:73:3b:3c:4b:23:81:1f:
68:c2:bb:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:58:52 2026 by rpki-client