Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F118F2B0899E11F1935811A1CE1D38B0.roa
File: F118F2B0899E11F1935811A1CE1D38B0.roa (raw, json)
Hash identifier: Qn5bBWpfW++Qo9310cCxIyAoREBxPM07xfcl5Bkzn2k=
Subject key identifier: 39:C7:5C:18:7F:52:58:F3:DF:00:81:F9:54:36:44:C3:12:9F:56:84
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DB83
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F118F2B0899E11F1935811A1CE1D38B0.roa
Signing time: Mon 27 Jul 2026 09:38:37 +0000
ROA not before: Mon 27 Jul 2026 09:38:33 +0000
ROA not after: Mon 31 Aug 2026 09:38:33 +0000
asID: 62240
IP address blocks: 154.195.138.0/24 maxlen: 24
154.195.140.0/24 maxlen: 24
154.195.143.0/24 maxlen: 24
154.195.144.0/24 maxlen: 24
154.196.29.0/24 maxlen: 24
154.196.32.0/24 maxlen: 24
154.196.34.0/24 maxlen: 24
154.196.35.0/24 maxlen: 24
154.196.37.0/24 maxlen: 24
154.196.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 30 Jul 2026 07:32:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121731 (0x1db83)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 27 09:38:33 2026 GMT
Not After : Aug 31 09:38:33 2026 GMT
Subject: CN=6a67271d-99af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7e:fd:48:e3:77:0a:3e:a8:af:23:c3:1e:b9:
25:54:d6:bc:a9:2c:b2:1a:8b:62:34:59:fe:20:07:
3a:48:c6:69:e6:2f:ab:6e:24:93:b0:94:30:8e:fe:
6f:51:7c:37:a0:9a:79:55:01:3c:fa:dc:32:58:5b:
f4:af:07:ae:30:9e:22:8d:14:19:e5:88:31:58:52:
c7:c6:71:08:af:fd:67:b4:df:0b:da:4e:9f:b5:f6:
77:a5:3d:61:bd:10:ce:c9:39:3e:b5:10:97:7d:d5:
43:ac:7f:8b:b3:a7:9a:dd:8e:de:aa:6e:c9:41:20:
c3:2c:c0:84:c5:8b:5c:b5:a6:d3:9c:e6:d5:4a:15:
80:5d:46:c0:b2:b5:58:90:f6:c8:79:61:f8:a1:aa:
77:7f:b4:7e:22:5b:6b:01:29:85:45:7e:f3:51:b2:
5d:bb:0a:5a:df:7e:d6:a3:af:1c:10:c1:f3:d7:bc:
53:d6:54:4c:5e:7a:2a:87:f8:be:4a:56:ad:fe:c8:
45:7f:68:78:19:97:7a:6c:d3:6d:88:eb:3e:ec:b2:
a5:aa:7b:4e:d0:49:56:2a:32:9b:b2:8b:44:63:d2:
92:6e:8c:af:e6:91:9c:cc:0b:33:ae:91:32:12:a3:
e7:bc:1c:0e:e3:00:bd:78:1d:d3:4b:66:b6:df:47:
88:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:C7:5C:18:7F:52:58:F3:DF:00:81:F9:54:36:44:C3:12:9F:56:84
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F118F2B0899E11F1935811A1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.195.138.0/24
154.195.140.0/24
154.195.143.0-154.195.144.255
154.196.29.0/24
154.196.32.0/24
154.196.34.0/23
154.196.37.0-154.196.38.255
Signature Algorithm: sha256WithRSAEncryption
17:4e:4f:e6:c4:88:00:8b:6b:ec:52:85:e6:cf:6d:d7:20:d7:
41:be:39:0e:7a:e7:08:cd:4d:8f:d5:f5:ac:bc:59:16:55:b5:
33:fe:7d:67:2a:dd:9c:41:e5:b8:bd:4a:c2:3a:77:27:64:81:
48:48:08:be:7f:8d:fc:a7:44:ee:43:42:ee:17:86:12:11:f5:
3b:18:3c:42:a0:d8:fc:c3:34:9b:fe:43:99:db:a3:74:dc:2e:
48:3f:8a:ad:17:64:dd:7a:2d:53:4a:f0:dd:d6:fc:3c:ef:df:
b6:c3:2e:07:c3:01:fc:13:bb:3f:5e:78:0a:9d:fa:6e:ad:99:
18:2e:c8:f2:32:a8:7c:08:fd:2c:82:bc:08:2f:da:7a:ef:3a:
08:d0:c2:d0:71:b5:49:77:b2:6c:bc:3f:36:eb:f6:b5:f1:59:
9e:70:a6:fc:0b:ca:64:4d:0e:fd:de:1d:07:e0:cc:85:95:87:
e6:3e:27:9b:15:3b:57:bb:d2:79:a0:60:80:0e:f6:e3:06:55:
02:a9:21:cc:7d:6b:28:ab:ce:6e:10:aa:12:c8:a0:b5:d0:05:
22:77:43:1e:9a:97:1a:3e:f3:af:e3:03:08:c7:ac:20:1e:14:
e4:09:36:78:06:96:7a:c6:37:5c:02:d8:b6:39:2a:30:ac:4e:
10:71:87:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:40:45 2026 by rpki-client