Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C001A38841D11F1B3246607CF1D38B0.roa
File: 3C001A38841D11F1B3246607CF1D38B0.roa (raw, json)
Hash identifier: d8dBu4tJamJXYJSSAom49TDPthwjNHiKaVj/1fcuCFU=
Subject key identifier: 49:D9:69:FE:D8:4A:43:A7:12:56:A4:41:10:20:4D:B6:FC:9D:9A:D5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D9DB
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C001A38841D11F1B3246607CF1D38B0.roa
Signing time: Mon 20 Jul 2026 09:27:32 +0000
ROA not before: Mon 20 Jul 2026 09:27:28 +0000
ROA not after: Thu 27 Aug 2026 09:27:28 +0000
asID: 138915
IP address blocks: 154.203.142.0/24 maxlen: 24
154.203.164.0/24 maxlen: 24
154.203.166.0/24 maxlen: 24
154.203.191.0/24 maxlen: 24
154.205.139.0/24 maxlen: 24
154.205.141.0/24 maxlen: 24
154.205.142.0/23 maxlen: 24
154.205.144.0/24 maxlen: 24
154.205.145.0/24 maxlen: 24
154.205.146.0/24 maxlen: 24
154.205.147.0/24 maxlen: 24
154.205.148.0/24 maxlen: 24
154.205.149.0/24 maxlen: 24
154.205.150.0/24 maxlen: 24
154.205.151.0/24 maxlen: 24
154.205.152.0/24 maxlen: 24
154.205.153.0/24 maxlen: 24
154.205.154.0/24 maxlen: 24
154.205.155.0/24 maxlen: 24
154.205.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:08:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121307 (0x1d9db)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 20 09:27:28 2026 GMT
Not After : Aug 27 09:27:28 2026 GMT
Subject: CN=6a5dea04-0f4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0f:e7:6a:f2:c5:f0:ba:4d:e5:c7:10:6f:9e:
f0:ea:44:33:32:d7:cd:54:d4:6d:b5:3b:c8:fa:68:
97:77:6b:ff:5d:ed:43:e0:b8:99:58:ba:1a:0c:e6:
a0:ed:56:13:fd:b1:5b:25:bd:49:46:6f:41:64:46:
84:11:7f:3d:36:12:32:64:93:bd:35:2e:d4:8c:33:
dd:14:1f:57:6b:54:15:bf:06:b2:8c:b0:1e:81:a0:
05:28:ae:71:bb:f7:92:ac:0d:e6:fa:3e:45:73:4a:
b0:7c:36:4d:63:3e:eb:7d:49:b8:03:38:aa:e1:bf:
98:2e:7f:71:f9:50:f8:c4:8e:ca:80:9c:63:57:d9:
88:ab:28:23:ea:97:7f:58:45:07:1b:25:1c:66:74:
8b:7f:6b:f2:50:ba:e4:d9:b6:1c:0a:3a:7a:5f:6b:
9f:a3:7b:ab:f7:94:6e:09:02:2b:09:89:9a:49:df:
ae:9a:06:e3:09:93:89:34:d8:2e:9f:61:7b:67:bf:
85:50:e1:27:81:28:0d:6c:d5:60:e2:c1:a0:57:a9:
20:53:85:00:03:dc:a6:1d:aa:60:3d:12:67:ee:45:
b2:3e:78:ea:a7:1f:42:bd:df:45:ad:c9:e2:39:49:
a6:d6:ba:72:dd:ef:42:32:97:4f:3b:65:7b:41:f4:
16:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D9:69:FE:D8:4A:43:A7:12:56:A4:41:10:20:4D:B6:FC:9D:9A:D5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C001A38841D11F1B3246607CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.203.142.0/24
154.203.164.0/24
154.203.166.0/24
154.203.191.0/24
154.205.139.0/24
154.205.141.0-154.205.156.255
Signature Algorithm: sha256WithRSAEncryption
75:84:5d:f9:0c:20:9b:49:b8:7b:33:77:76:4c:14:2e:2f:cf:
2c:63:c6:e5:5c:b6:7b:a3:80:9d:da:9a:2e:e7:f0:2a:c4:e2:
80:37:48:5f:bd:c7:5a:cd:d3:86:14:10:08:d8:f1:ef:c2:c2:
80:30:43:e1:0d:48:09:2d:cc:36:7f:94:44:3f:ca:3b:34:36:
17:24:13:33:51:ba:f2:29:78:6c:d2:3c:bc:d8:0a:06:d8:be:
19:5f:87:63:f3:6b:1c:4b:99:af:f6:b8:6c:eb:a0:da:8c:32:
a0:31:e5:58:16:4d:ac:2c:d6:57:25:c0:ab:d4:2f:15:ac:fd:
0c:38:2a:56:fb:32:6b:0e:af:94:79:18:8f:3f:2a:08:a0:df:
59:d9:b9:e9:61:3d:89:bd:d9:97:3e:fe:c8:48:bb:3a:39:0a:
e0:ff:ff:07:32:c3:46:fc:5a:78:9e:8a:c5:cd:61:11:a2:46:
24:af:5d:dd:d7:7a:39:93:ca:ec:ca:bc:ef:0d:9e:e7:b3:65:
12:e4:b2:6b:2b:30:bc:d8:46:ec:e9:28:fa:4e:e6:ea:97:f6:
7b:cc:c7:17:43:66:fc:70:2a:20:24:3f:e5:6a:82:b5:b8:75:
45:64:99:fa:66:5c:c1:1a:8d:da:64:3d:a7:9f:b5:fd:ae:51:
19:c0:c1:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:35:09 2026 by rpki-client