Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43CD8B42794611F19CE4EB0ACF1D38B0.roa
File: 43CD8B42794611F19CE4EB0ACF1D38B0.roa (raw, json)
Hash identifier: vCDZZ7HQppduHvB2I5Z7Y/1EpiH850a8eqjz/y+sIgo=
Subject key identifier: 30:46:31:12:05:32:71:BE:FF:0A:FE:C6:D9:36:29:D4:7A:1D:6B:D0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D744
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43CD8B42794611F19CE4EB0ACF1D38B0.roa
Signing time: Mon 06 Jul 2026 14:23:32 +0000
ROA not before: Mon 06 Jul 2026 14:23:26 +0000
ROA not after: Sat 01 Aug 2026 14:23:26 +0000
asID: 401783
IP address blocks: 154.193.2.0/24 maxlen: 24
154.193.35.0/24 maxlen: 24
154.194.195.0/24 maxlen: 24
154.196.134.0/24 maxlen: 24
154.196.160.0/24 maxlen: 24
154.196.179.0/24 maxlen: 24
154.196.180.0/24 maxlen: 24
154.199.4.0/24 maxlen: 24
154.200.1.0/24 maxlen: 24
154.200.26.0/24 maxlen: 24
154.200.37.0/24 maxlen: 24
154.200.43.0/24 maxlen: 24
154.200.46.0/24 maxlen: 24
154.200.48.0/24 maxlen: 24
154.200.51.0/24 maxlen: 24
154.200.52.0/24 maxlen: 24
154.200.53.0/24 maxlen: 24
154.200.54.0/24 maxlen: 24
154.200.60.0/24 maxlen: 24
154.200.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:08:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120644 (0x1d744)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 6 14:23:26 2026 GMT
Not After : Aug 1 14:23:26 2026 GMT
Subject: CN=6a4bba64-3347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:86:b9:b6:09:bf:b3:c7:5c:c4:e3:75:38:cd:
f7:ec:86:a6:7a:c7:df:c3:c5:02:f1:6b:01:e8:b9:
2c:7f:29:18:11:a4:13:bf:ad:ea:2b:5e:7a:a2:be:
6c:02:72:03:5c:4d:ab:32:9c:4d:98:ca:24:80:fe:
83:bb:03:d7:f0:90:1a:54:58:17:c0:98:54:cb:f4:
bd:c5:ea:70:8a:af:7e:82:0d:50:a2:8e:64:70:e2:
5c:14:dc:fd:96:ad:d6:cd:43:cc:33:c5:27:20:09:
d7:c0:e4:e2:de:f2:48:85:d4:9f:72:c1:2c:4c:4e:
de:9d:20:10:b0:cf:47:d3:9b:3f:02:e7:fb:a7:85:
fc:25:3d:2c:54:d0:41:ab:fe:85:c3:aa:2c:5e:d0:
1b:49:15:90:9f:27:b0:36:c5:af:2a:55:e0:63:18:
8b:49:5d:93:ec:3c:b4:5b:17:e1:52:30:54:ed:b3:
ce:04:c2:89:55:85:73:2c:4d:f2:fb:82:66:87:a4:
53:26:f9:16:06:19:0c:98:69:1c:66:67:9a:66:da:
45:5d:a1:fe:0b:2d:15:32:a8:4f:d8:2f:96:9e:20:
37:25:ac:1a:2e:12:f2:db:65:b7:5a:34:6e:3f:39:
43:e4:21:12:9e:84:4b:b3:2e:73:aa:7d:17:cd:9d:
4f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:46:31:12:05:32:71:BE:FF:0A:FE:C6:D9:36:29:D4:7A:1D:6B:D0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/43CD8B42794611F19CE4EB0ACF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.2.0/24
154.193.35.0/24
154.194.195.0/24
154.196.134.0/24
154.196.160.0/24
154.196.179.0-154.196.180.255
154.199.4.0/24
154.200.1.0/24
154.200.26.0/24
154.200.37.0/24
154.200.43.0/24
154.200.46.0/24
154.200.48.0/24
154.200.51.0-154.200.54.255
154.200.60.0/24
154.200.129.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:8b:d5:a9:ea:a5:73:0f:56:9f:3b:42:c2:c2:a3:70:64:cd:
a6:1e:21:95:e1:f7:95:20:8e:dd:1f:5f:45:a4:5a:d6:d8:c8:
98:96:29:57:c5:b1:66:40:5c:25:0f:f3:ba:86:2d:75:13:aa:
ea:78:b3:ed:8d:da:4f:7d:d6:f8:64:d9:1a:f3:37:b1:f9:04:
ee:70:1c:63:ca:43:a4:c8:82:b9:f5:c7:d7:72:80:9f:34:63:
ee:d0:1d:38:f2:ac:25:da:fd:2a:80:5e:74:68:93:ea:b3:33:
ed:39:fc:fd:a9:0e:2f:a4:90:9c:6e:cb:e6:06:76:ee:7d:57:
32:b0:b8:1a:8b:2e:e7:1c:df:9b:76:a4:eb:0c:65:aa:dc:5c:
66:4b:a0:4f:5c:b7:95:fe:98:9a:ec:ca:e1:65:9e:f0:39:a0:
8d:4d:0a:0b:a6:2b:fc:a6:53:cb:77:f3:f5:83:d7:62:8e:ec:
e7:d0:00:62:99:33:de:0e:26:25:40:cc:9d:36:ab:0e:8c:81:
73:ee:a8:df:6c:c4:42:73:6f:56:72:fd:e8:ed:af:dd:f7:bd:
73:05:ef:6f:55:dd:af:54:2e:c3:ee:55:3f:29:f4:9d:8b:1f:
c8:49:ec:34:58:f8:62:31:30:ae:c4:04:b8:82:88:34:b5:a3:
e8:e4:bd:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:43:14 2026 by rpki-client