Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0380731E844611F1865CEFF9CE1D38B0.roa
File: 0380731E844611F1865CEFF9CE1D38B0.roa (raw, json)
Hash identifier: 1yggGZQFKay2mwJIJ3wLC7wJDAjDlA+gimZacQyBHms=
Subject key identifier: E6:70:80:EC:26:EF:D3:55:3C:7F:11:CC:D2:E5:DA:23:7C:B3:31:A5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DA36
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0380731E844611F1865CEFF9CE1D38B0.roa
Signing time: Mon 20 Jul 2026 14:19:27 +0000
ROA not before: Mon 20 Jul 2026 14:19:23 +0000
ROA not after: Thu 27 Aug 2026 14:19:23 +0000
asID: 138915
IP address blocks: 154.203.135.0/24 maxlen: 24
154.203.137.0/24 maxlen: 24
154.203.138.0/24 maxlen: 24
154.203.139.0/24 maxlen: 24
154.203.140.0/24 maxlen: 24
154.203.141.0/24 maxlen: 24
154.203.146.0/24 maxlen: 24
154.203.147.0/24 maxlen: 24
154.203.148.0/24 maxlen: 24
154.203.169.0/24 maxlen: 24
154.205.128.0/24 maxlen: 24
154.205.129.0/24 maxlen: 24
154.205.130.0/24 maxlen: 24
154.205.131.0/24 maxlen: 24
154.205.132.0/24 maxlen: 24
154.205.133.0/24 maxlen: 24
154.205.134.0/24 maxlen: 24
154.205.135.0/24 maxlen: 24
154.205.136.0/23 maxlen: 24
154.205.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:08:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121398 (0x1da36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 20 14:19:23 2026 GMT
Not After : Aug 27 14:19:23 2026 GMT
Subject: CN=6a5e2e6f-e96d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c8:d2:e6:40:78:02:a7:ef:2b:8b:b1:70:0c:
f9:1f:d2:fc:9f:2c:ee:89:63:b9:91:75:be:b4:e0:
1b:12:0f:e7:65:32:3f:87:28:b1:8e:16:7e:41:b8:
93:7d:28:1d:65:a4:d5:24:84:cb:9e:2b:38:36:10:
9b:c0:5e:70:2f:36:73:7e:50:be:f4:df:72:b5:1b:
e0:2d:67:a2:78:2e:ae:ff:0a:53:c5:04:9b:3c:ba:
ee:b9:80:1f:49:60:4c:f6:35:9a:1c:c8:b5:c1:82:
63:1f:0b:40:d3:68:a0:de:e2:5c:d7:a6:8c:1a:c4:
ac:7c:b1:34:22:dc:5e:79:c9:37:5d:b2:95:f9:6e:
75:f8:e7:0b:f8:1c:2b:aa:45:a2:b8:72:c3:f2:ae:
c9:f6:70:54:e3:22:45:8e:e7:f7:1e:94:2c:98:13:
02:43:2b:b1:0e:2e:57:75:0d:16:1a:52:de:02:37:
a5:1e:0c:5e:58:18:ae:ac:b7:1f:1d:3e:b2:25:45:
c2:36:a6:7a:fa:b7:46:95:a7:9f:08:72:92:a6:dd:
cb:dd:d1:39:3d:b8:60:ef:28:58:0d:e0:05:f3:81:
d2:76:f0:31:94:2d:87:02:31:f4:62:a3:5a:af:cb:
d7:e7:5b:09:30:2a:e2:ff:02:22:e4:53:1c:a2:15:
2d:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:70:80:EC:26:EF:D3:55:3C:7F:11:CC:D2:E5:DA:23:7C:B3:31:A5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0380731E844611F1865CEFF9CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.135.0/24
154.203.137.0-154.203.141.255
154.203.146.0-154.203.148.255
154.203.169.0/24
154.205.128.0-154.205.138.255
Signature Algorithm: sha256WithRSAEncryption
c4:ab:a9:dd:93:5f:3d:75:25:5a:1e:16:ee:bd:df:2c:59:b9:
19:33:ac:18:d4:d0:9a:ed:88:e1:77:8e:79:60:bf:67:11:e6:
f6:54:e8:77:fe:c6:fd:8e:2e:bd:29:86:d7:c2:5f:d1:55:e9:
99:76:0e:0d:c0:d6:ca:93:46:22:2e:b4:3d:e8:6c:34:04:12:
88:2a:19:83:87:0e:9e:f1:51:99:94:d0:76:a5:21:3d:4a:c8:
b2:07:20:ec:e4:65:44:41:24:24:b8:55:bd:1d:06:20:9f:bd:
53:dd:23:88:b4:d7:f5:8c:e7:43:2c:21:37:66:6e:6e:6d:f1:
f1:31:71:9b:fe:c5:4d:9f:19:f9:48:e9:79:4e:87:a3:2f:12:
29:42:1a:bc:2e:b3:a2:19:45:6d:c6:3b:9c:07:b6:24:fe:07:
f5:94:05:fb:17:5b:4f:d4:3b:33:ea:97:9b:a7:6b:85:39:61:
2e:70:57:79:03:af:0a:d8:79:1c:51:bc:88:12:e6:48:d9:d5:
36:03:40:68:7c:88:1f:28:3e:90:71:84:4c:fa:51:e3:95:a1:
62:78:07:28:db:14:29:31:6b:80:2f:6a:45:d6:77:28:5a:4b:
3e:62:5f:30:16:4a:59:f7:c6:07:29:a9:9e:a6:aa:bd:3c:00:
e8:7e:45:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:35:04 2026 by rpki-client