Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/349D2974794711F1A4D8640FCF1D38B0.roa
File: 349D2974794711F1A4D8640FCF1D38B0.roa (raw, json)
Hash identifier: T6po2nOIUtydHAiBpPnut7hu4P9iXTSCqbznJyXTHFg=
Subject key identifier: E4:FB:2A:70:12:61:A7:62:F2:14:DA:F3:7E:21:68:26:69:53:19:F5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D746
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/349D2974794711F1A4D8640FCF1D38B0.roa
Signing time: Mon 06 Jul 2026 14:30:16 +0000
ROA not before: Mon 06 Jul 2026 14:30:11 +0000
ROA not after: Sat 01 Aug 2026 14:30:11 +0000
asID: 401783
IP address blocks: 154.200.130.0/24 maxlen: 24
154.200.131.0/24 maxlen: 24
154.200.140.0/24 maxlen: 24
154.200.142.0/24 maxlen: 24
154.200.154.0/24 maxlen: 24
154.200.156.0/24 maxlen: 24
154.200.157.0/24 maxlen: 24
154.200.158.0/24 maxlen: 24
154.200.159.0/24 maxlen: 24
154.200.160.0/24 maxlen: 24
154.200.161.0/24 maxlen: 24
154.200.162.0/24 maxlen: 24
154.200.191.0/24 maxlen: 24
154.211.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:08:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120646 (0x1d746)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 6 14:30:11 2026 GMT
Not After : Aug 1 14:30:11 2026 GMT
Subject: CN=6a4bbbf8-57af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9d:dc:82:8e:fc:5b:91:50:09:d3:a0:f9:67:
8e:a2:ca:4c:72:5a:c2:5f:90:04:9b:09:46:1a:b5:
39:ba:3d:9d:91:71:b8:b7:a1:50:3c:af:7a:bd:56:
83:a9:96:e7:8c:05:6c:9a:69:ba:94:c9:19:6b:f8:
ed:d1:1b:33:0f:53:6c:89:fd:13:d3:3f:8a:7b:f7:
e6:86:8e:ea:97:6d:1b:d1:ab:90:c5:54:91:70:a1:
88:f5:dd:02:bc:b1:32:d8:ff:9c:70:af:00:b6:db:
ba:fa:4a:aa:92:3e:63:e9:cb:ac:b7:da:f1:35:79:
95:65:c9:10:18:94:ac:61:5f:02:52:41:25:0d:60:
18:d2:d8:6f:15:ef:28:df:aa:0c:f9:5e:6f:f2:09:
71:d6:22:4a:2b:3a:9f:14:3e:a9:50:85:34:f2:c4:
da:0a:2f:4f:c9:fc:f9:25:8f:18:2b:4a:43:0a:2c:
74:11:fc:9b:18:f6:c0:d0:70:56:c4:91:3b:49:46:
2d:d9:02:43:7d:d1:f6:13:e0:86:66:26:fe:29:27:
e8:4f:16:ff:00:6b:87:45:2e:3c:c2:5e:53:89:70:
80:67:20:b1:92:1c:60:c0:05:6e:3d:0f:ee:3f:f5:
f1:90:11:8b:c1:8f:e8:bd:8c:dc:b7:63:56:d5:8f:
92:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:FB:2A:70:12:61:A7:62:F2:14:DA:F3:7E:21:68:26:69:53:19:F5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/349D2974794711F1A4D8640FCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.130.0/23
154.200.140.0/24
154.200.142.0/24
154.200.154.0/24
154.200.156.0-154.200.162.255
154.200.191.0/24
154.211.211.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:43:44:34:9f:da:93:7f:fd:7e:8b:97:e0:11:e4:78:81:e3:
e1:2e:a5:31:25:23:2a:d6:3a:ae:fb:84:97:31:c6:07:88:f6:
3b:82:a9:aa:2f:58:97:0f:45:80:d7:f6:68:65:6f:1a:07:ba:
af:4a:31:1e:09:bd:17:35:bc:d8:5f:66:12:23:cf:9b:f9:fb:
05:9b:7a:b4:e0:b1:54:9f:98:be:8e:db:23:5d:4f:53:47:56:
45:20:a8:90:41:34:1c:41:f3:f6:7b:9a:04:ed:1a:f3:20:1d:
84:5e:18:3a:62:01:70:81:d9:99:5c:b1:df:81:17:a4:ef:7d:
aa:4e:81:ef:c5:8b:d2:72:a0:d8:13:06:0c:09:f7:15:9c:1e:
60:38:ae:37:1b:fd:0e:78:83:62:d2:fe:46:a6:30:e9:dd:34:
b6:ae:07:11:e2:1e:a9:98:44:bf:0a:f0:1b:8d:0e:e7:9c:f9:
5c:68:a7:fc:60:c8:60:82:07:c4:c5:c1:a8:22:f3:53:4e:f2:
db:48:16:0f:0f:c0:41:0a:af:e1:13:a0:c6:11:85:39:dd:bd:
60:b6:f1:1e:a6:81:0a:c7:ea:7e:b4:17:11:a1:25:ae:9a:c2:
c1:62:6b:99:99:f5:39:15:a7:56:a8:d0:35:95:85:61:70:5a:
c2:fd:4b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:43:18 2026 by rpki-client