Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D30696876F511F190000CFBCE1D38B0.roa
File: 0D30696876F511F190000CFBCE1D38B0.roa (raw, json)
Hash identifier: FQK32Ddh45RKbXQucbQMzLD1PG0xmqM6ZwocS9nH9bQ=
Subject key identifier: 7F:5F:EF:2B:61:F7:EE:8F:07:2A:70:7F:A9:38:32:B0:52:5A:9A:A1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D6C4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D30696876F511F190000CFBCE1D38B0.roa
Signing time: Fri 03 Jul 2026 15:37:09 +0000
ROA not before: Fri 03 Jul 2026 15:37:03 +0000
ROA not after: Mon 10 Aug 2026 15:37:03 +0000
asID: 138915
IP address blocks: 154.223.27.0/24 maxlen: 24
154.223.30.0/24 maxlen: 24
154.223.32.0/24 maxlen: 24
154.223.33.0/24 maxlen: 24
154.223.34.0/23 maxlen: 24
154.223.37.0/24 maxlen: 24
154.223.40.0/23 maxlen: 24
154.223.42.0/24 maxlen: 24
154.223.43.0/24 maxlen: 24
154.223.78.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:08:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120516 (0x1d6c4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 3 15:37:03 2026 GMT
Not After : Aug 10 15:37:03 2026 GMT
Subject: CN=6a47d725-5a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bc:53:2f:6b:ce:c6:b6:31:e6:11:0c:f1:0c:
10:6d:22:bf:99:a7:cb:af:e3:66:c4:f6:49:d2:f4:
42:cc:69:a0:33:80:8d:5e:df:57:2d:5b:13:fd:51:
ee:fd:d2:1d:51:2b:32:24:77:ef:5e:77:18:4e:3f:
ca:9b:ab:75:28:2a:be:f9:23:aa:8a:e5:ae:dc:8e:
0c:6b:2e:d8:ab:1d:00:b5:4f:39:8f:7c:2b:88:49:
bb:f7:c9:23:6a:15:9b:d1:81:9c:82:ee:12:22:d4:
2d:33:31:5a:83:1b:6d:b0:03:3f:c3:21:d8:36:70:
b3:11:12:1b:e2:f3:f8:e3:52:f8:14:06:5b:27:69:
1d:ce:7f:f5:22:01:68:5d:74:50:d8:7c:4d:56:8a:
47:07:8c:1d:2b:b9:6a:ff:60:a9:d8:f4:d6:30:ae:
e2:c1:17:d9:7e:ec:03:7a:e0:22:cf:60:fe:ae:27:
a1:98:f7:43:64:1e:5c:7c:68:96:85:fa:00:90:a2:
06:97:49:88:61:e7:b2:e9:51:ea:b2:e7:bb:86:6e:
da:a2:9c:65:91:2b:e4:8b:2a:7c:a4:2c:4c:5d:5e:
6c:2f:5c:25:76:a7:f6:ba:64:05:b6:ae:2b:52:93:
8f:34:e9:92:31:11:3f:2d:50:7c:a0:90:02:1b:4a:
bb:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:5F:EF:2B:61:F7:EE:8F:07:2A:70:7F:A9:38:32:B0:52:5A:9A:A1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0D30696876F511F190000CFBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.27.0/24
154.223.30.0/24
154.223.32.0/22
154.223.37.0/24
154.223.40.0/22
154.223.78.0/23
Signature Algorithm: sha256WithRSAEncryption
47:88:8d:f6:fd:6c:81:21:46:ae:6e:08:f5:19:87:c9:4a:6d:
52:77:bd:96:63:ff:81:bd:e4:84:d9:44:32:23:4b:6b:8b:71:
53:d4:f1:6e:53:0e:d1:6d:91:6f:2d:c4:00:8a:91:2d:de:39:
80:b6:a5:57:a6:5b:f2:84:e6:66:4a:0f:27:c9:18:64:b1:e9:
af:b5:58:da:e4:b6:11:2f:02:7b:b8:d4:4d:86:90:62:69:53:
ec:f3:6b:1f:6d:86:d5:5c:96:a1:50:79:e6:1f:ed:ef:f4:2e:
bf:72:62:21:65:19:29:bc:f8:24:36:88:92:c4:e5:b6:57:5e:
f9:1e:1b:08:53:b8:84:39:19:0a:90:b1:75:2a:90:97:b3:66:
46:f8:84:fd:cd:f7:66:18:c8:e1:71:59:87:76:0c:93:0b:51:
67:ec:dd:ca:14:68:c8:65:98:3f:fa:bc:10:4a:93:34:40:17:
79:1c:56:a8:0f:79:2c:ed:8f:fa:41:4e:e3:78:4f:02:08:c5:
b8:0a:11:32:a0:2f:26:fe:3b:70:75:da:02:e8:3c:44:f9:26:
19:3f:9f:58:fc:89:28:29:90:08:97:4e:98:60:18:f7:9e:0f:
16:98:60:e8:10:43:ad:ee:74:cb:da:c7:85:23:65:89:f7:c9:
41:2b:17:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:35:04 2026 by rpki-client