Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C943726C898D11F1BE014ABCCE1D38B0.roa
File: C943726C898D11F1BE014ABCCE1D38B0.roa (raw, json)
Hash identifier: yVGE0iiZZNuXEbnu2UqTGrWb8YyFyR7RJyHQlWZ+XqM=
Subject key identifier: C5:87:7F:EE:CF:F0:DD:2D:E8:E2:5F:84:0F:F3:C6:41:06:9A:34:C7
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DB57
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C943726C898D11F1BE014ABCCE1D38B0.roa
Signing time: Mon 27 Jul 2026 07:35:49 +0000
ROA not before: Mon 27 Jul 2026 07:35:45 +0000
ROA not after: Mon 31 Aug 2026 07:35:45 +0000
asID: 62240
IP address blocks: 154.195.20.0/24 maxlen: 24
154.195.21.0/24 maxlen: 24
154.195.22.0/24 maxlen: 24
154.195.23.0/24 maxlen: 24
154.196.31.0/24 maxlen: 24
154.196.68.0/24 maxlen: 24
154.196.72.0/24 maxlen: 24
154.196.73.0/24 maxlen: 24
154.196.74.0/24 maxlen: 24
154.196.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121687 (0x1db57)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 27 07:35:45 2026 GMT
Not After : Aug 31 07:35:45 2026 GMT
Subject: CN=6a670a55-93f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a6:7b:51:d6:a1:34:6b:7d:0b:a1:3d:d6:81:
f9:a0:e9:53:a8:d8:cf:56:4e:20:6f:72:8b:6b:f6:
e8:90:ae:ef:91:66:54:8b:b0:e1:62:8c:70:45:2e:
1d:82:5c:05:0d:b2:a7:c4:1d:3a:fa:19:6f:bd:8d:
63:96:d4:7b:9d:6e:97:fc:1c:54:43:47:5a:b0:45:
b1:3f:8a:3d:56:6c:10:32:88:89:ff:a7:aa:58:68:
56:d6:58:af:89:cc:2b:f5:01:ec:79:a8:07:48:89:
14:94:1d:9f:6c:22:6f:84:28:34:c0:65:a1:63:8a:
c6:fd:7a:6e:a8:73:89:f9:bf:35:c3:47:e2:e3:fd:
25:ee:37:a1:da:e2:bf:5b:6a:8a:8e:79:ce:e6:fc:
74:5b:46:bd:da:8d:94:36:21:ba:d9:8a:50:98:79:
fa:db:9a:28:1d:21:53:c8:96:94:e2:c5:3c:71:eb:
9c:d7:ad:75:77:53:6e:35:1b:d5:a5:62:05:83:4f:
20:23:8c:9f:38:c8:10:aa:69:c0:57:a1:91:35:b0:
e7:f6:2b:f0:ee:bb:5f:44:70:4e:dd:d3:a9:44:df:
1f:b8:c9:4d:80:1f:42:1d:e7:34:58:dd:e8:44:10:
10:f5:80:fb:dc:6c:d5:af:31:5e:31:8d:be:55:e8:
70:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:87:7F:EE:CF:F0:DD:2D:E8:E2:5F:84:0F:F3:C6:41:06:9A:34:C7
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C943726C898D11F1BE014ABCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.20.0/22
154.196.31.0/24
154.196.68.0/24
154.196.72.0/22
Signature Algorithm: sha256WithRSAEncryption
d7:47:33:55:bd:a7:9e:ac:01:db:75:b5:01:88:a8:db:89:89:
27:64:b5:97:e4:9f:77:99:74:4e:36:97:7d:98:8f:35:b9:17:
51:9b:45:d2:2e:e4:90:66:16:81:d8:f9:aa:2d:60:0d:69:98:
09:84:81:0f:d0:6c:60:76:9c:4e:0a:6a:1b:27:40:a8:18:af:
ed:7e:95:bb:bf:ce:69:1e:2a:5a:2d:14:b7:c3:c5:7f:cf:2f:
a6:de:2f:eb:0f:20:b7:02:60:05:0f:1a:c7:a9:c2:bc:1c:b0:
31:78:91:2b:27:b2:e3:41:d5:27:7e:52:a0:29:98:a0:64:3a:
74:ad:b2:9d:0b:1e:f1:b5:6b:4f:92:b1:4f:40:8a:45:ad:0a:
54:a7:cf:1d:6c:2e:ea:54:64:8f:e9:01:73:18:8c:f8:65:00:
a0:16:7c:cf:02:52:e4:04:a8:1f:15:88:1e:75:f4:a6:2c:2a:
0c:08:8d:da:af:c6:71:00:c5:65:dd:33:17:fe:9d:9b:bb:88:
06:09:30:d2:5b:50:1d:57:f1:82:4d:09:f2:d6:f8:80:7a:8c:
6b:f8:bf:73:f7:c0:c1:11:c9:84:73:8b:53:7b:51:f8:9c:28:
40:48:01:27:6f:95:6c:03:a1:ea:75:f3:ee:21:01:6f:9e:aa:
78:66:4e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:27:07 2026 by rpki-client