Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C6984AA842A11F1A4D7D3D7CE1D38B0.roa
File: 5C6984AA842A11F1A4D7D3D7CE1D38B0.roa (raw, json)
Hash identifier: Ya9Lwm603AZ421txyK7fSrSS5a8Vbem/J4v8dsqB1/Q=
Subject key identifier: 49:4C:F9:4D:CF:01:6F:0E:FD:C3:79:F3:62:81:8C:B8:52:AA:6D:A5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D9F8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C6984AA842A11F1A4D7D3D7CE1D38B0.roa
Signing time: Mon 20 Jul 2026 11:01:30 +0000
ROA not before: Mon 20 Jul 2026 11:01:26 +0000
ROA not after: Thu 27 Aug 2026 11:01:26 +0000
asID: 138915
IP address blocks: 154.93.72.0/24 maxlen: 24
154.93.74.0/24 maxlen: 24
154.93.96.0/24 maxlen: 24
154.93.97.0/24 maxlen: 24
154.94.86.0/24 maxlen: 24
154.94.87.0/24 maxlen: 24
154.94.100.0/24 maxlen: 24
154.94.116.0/24 maxlen: 24
154.94.123.0/24 maxlen: 24
154.94.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:08:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121336 (0x1d9f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 20 11:01:26 2026 GMT
Not After : Aug 27 11:01:26 2026 GMT
Subject: CN=6a5e000a-8176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e0:d7:f6:f6:23:84:5d:d3:49:62:8b:87:96:
6a:1b:5f:06:7a:25:60:9e:aa:7a:2a:35:03:dc:46:
4d:58:43:c4:ad:31:7f:18:e4:f9:cd:e2:35:3e:af:
52:a1:28:a7:61:5e:ca:81:78:32:6d:39:37:21:75:
ff:31:7e:5a:0f:fc:6d:3b:ab:10:f7:c6:6f:60:fc:
1a:89:9d:59:eb:e1:c6:bf:33:28:ca:05:a1:a2:1e:
ce:16:a8:ff:8a:a0:22:1a:0f:0f:41:f3:95:a5:9c:
c2:62:6a:6f:28:e6:e5:27:97:e5:7b:22:42:03:45:
84:a9:6a:19:ae:d0:08:36:43:7b:18:d3:d9:26:4a:
7d:c1:e5:48:33:2a:a0:fc:3b:73:fa:c6:21:6d:2e:
a6:e1:72:71:83:b1:c4:a8:a9:57:f7:bd:4e:bb:a0:
7a:64:b4:50:23:37:02:a7:a3:99:6a:f8:44:b5:ba:
60:f1:d6:36:1b:94:ce:06:e6:a0:df:55:89:18:5d:
e1:f9:f7:b2:88:ec:63:44:41:c4:44:bd:de:89:c9:
28:39:71:b0:6e:ed:89:f5:e7:74:df:b0:18:be:ff:
6d:0a:17:c2:5f:5d:76:7c:c9:6f:9a:96:bf:0b:a0:
ff:ea:13:5c:16:32:b5:17:ad:72:e4:67:32:8a:a6:
1e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:4C:F9:4D:CF:01:6F:0E:FD:C3:79:F3:62:81:8C:B8:52:AA:6D:A5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/5C6984AA842A11F1A4D7D3D7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.72.0/24
154.93.74.0/24
154.93.96.0/23
154.94.86.0/23
154.94.100.0/24
154.94.116.0/24
154.94.123.0-154.94.124.255
Signature Algorithm: sha256WithRSAEncryption
9d:a1:5d:0a:21:8e:ac:f7:c5:b4:08:92:6e:d1:71:e8:d4:4b:
f6:1c:19:d9:9e:31:9f:08:95:c5:3d:4e:a5:df:c8:b6:90:e5:
cd:a7:63:e9:20:52:58:70:e1:0f:3e:ed:24:f9:9b:5d:4f:e5:
da:69:c0:25:08:09:45:17:32:51:50:8a:d5:6b:88:0f:e2:ec:
a2:f9:3c:17:31:d9:9d:8f:1a:0a:98:2d:61:01:6d:7f:68:dd:
86:f9:3f:27:ed:66:e6:18:e4:40:37:51:7e:a2:0b:77:1c:f2:
07:c7:64:c4:e3:10:43:ec:b2:a1:7a:cd:bd:91:bb:bf:82:27:
68:35:18:58:3c:53:9a:a3:7a:0f:a0:68:b6:10:dc:31:c5:94:
a1:8c:de:43:2b:93:9d:95:d6:a0:fe:72:e2:37:32:58:c1:4e:
2d:93:55:62:16:ab:fd:72:9b:51:9b:cb:f4:34:0b:9c:c6:01:
b3:b6:64:14:c9:e8:2c:b7:56:e4:68:14:e2:b5:3c:3c:c3:62:
d5:f1:6e:a1:d3:de:6b:3e:dc:45:0a:67:4f:aa:a9:aa:81:12:
6b:21:ae:eb:9d:b3:d5:ad:32:90:1d:91:1e:cc:e9:62:d8:56:
33:bc:d1:b3:a4:f9:96:57:1d:ad:22:06:63:34:ca:7d:14:4b:
5b:3f:56:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:34:51 2026 by rpki-client