Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A31E1EE676FC11F1A9AED0A7CE1D38B0.roa
File: A31E1EE676FC11F1A9AED0A7CE1D38B0.roa (raw, json)
Hash identifier: vKNUI0+Tm/0TLtbBJCmU8hPcfIU0B2FcVQDtoFzr8iM=
Subject key identifier: 21:17:FA:DD:35:B6:B0:2E:E6:9B:07:98:FE:F4:42:86:08:5C:40:BB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D6D6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A31E1EE676FC11F1A9AED0A7CE1D38B0.roa
Signing time: Fri 03 Jul 2026 16:31:27 +0000
ROA not before: Fri 03 Jul 2026 16:31:22 +0000
ROA not after: Mon 10 Aug 2026 16:31:22 +0000
asID: 138915
IP address blocks: 154.93.50.0/24 maxlen: 24
154.93.51.0/24 maxlen: 24
154.93.60.0/24 maxlen: 24
154.93.61.0/24 maxlen: 24
154.93.63.0/24 maxlen: 24
154.95.64.0/24 maxlen: 24
154.95.65.0/24 maxlen: 24
154.95.66.0/23 maxlen: 24
154.95.66.0/24 maxlen: 24
154.95.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:08:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120534 (0x1d6d6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 3 16:31:22 2026 GMT
Not After : Aug 10 16:31:22 2026 GMT
Subject: CN=6a47e3df-630d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:25:83:40:79:09:18:f7:34:6d:ed:41:c5:09:
a9:58:54:0b:03:13:8a:01:1e:f4:cc:48:ff:54:e7:
5b:c8:1b:af:98:81:b4:d2:3d:b5:e4:46:ca:2b:2d:
b6:84:4a:ee:f4:3c:2b:d8:bb:59:6f:86:bd:d1:76:
6a:36:cf:2b:e2:67:fd:ad:de:5f:40:7e:7e:23:19:
c6:ef:f8:a1:d1:06:86:15:7f:74:48:10:a0:43:f6:
af:ae:f0:c3:d6:f5:0a:2d:4a:4e:a1:80:f9:7e:3c:
1d:15:27:c1:04:2f:54:0c:66:4a:e9:d1:17:a0:43:
69:e6:35:23:8d:fd:5f:56:80:e4:e5:ed:68:73:f5:
d8:5e:bf:52:e1:6a:5d:f2:f7:77:3c:37:93:07:52:
17:63:44:d7:8f:36:6f:ac:fa:63:a5:51:f6:d9:71:
79:8e:2a:99:80:67:5f:98:cb:ca:84:b2:bb:95:3d:
2e:fd:05:1c:74:96:03:aa:7a:9b:7f:f7:6f:72:11:
32:b3:d0:cb:12:34:40:a0:a1:7b:4d:af:ab:7a:ae:
54:01:8e:93:64:d7:98:d6:4e:72:84:38:16:d0:50:
bc:8e:3d:9f:28:7f:c6:0e:a6:a9:e4:e0:f4:bd:9c:
5a:5b:9c:ea:4c:9c:18:1f:06:0a:e5:8e:fa:ea:2b:
ec:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:17:FA:DD:35:B6:B0:2E:E6:9B:07:98:FE:F4:42:86:08:5C:40:BB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A31E1EE676FC11F1A9AED0A7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.50.0/23
154.93.60.0/23
154.93.63.0/24
154.95.64.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:ed:be:30:c4:c1:7d:03:ba:f5:a5:a3:0e:c2:ca:10:c3:72:
3c:f2:b3:1a:f0:16:d1:e4:84:24:64:76:a0:5c:47:14:42:f5:
38:e6:23:d8:14:36:7c:1f:e0:4d:54:62:8b:8d:1d:5e:ce:a7:
c1:82:10:7b:f7:70:49:bf:45:90:bd:86:98:59:81:e3:cc:eb:
a5:c3:03:b0:51:ec:02:d9:65:32:9c:6e:f9:25:a2:2f:ca:d3:
87:87:3a:6d:60:fd:2e:7c:03:cb:e6:a2:55:78:1c:67:42:0e:
a5:69:55:3e:e6:9c:8b:dd:40:a1:13:48:3b:19:f2:73:46:f1:
33:1c:5c:dd:01:bc:17:05:9c:e7:1f:b9:cd:29:34:6f:5f:c0:
84:c7:06:00:28:92:ad:9b:5d:78:45:35:8c:ef:37:c5:4c:3a:
55:db:05:5f:ec:dd:5a:18:e3:57:7f:d1:09:30:33:4f:9e:cb:
42:44:06:9c:a0:5c:71:13:c9:98:dc:99:d0:59:94:41:49:6e:
cf:77:9d:84:a6:a5:b3:00:75:98:6e:58:c2:f7:f4:23:94:45:
f5:8c:f8:ce:44:a6:69:ba:5e:dd:00:61:3b:49:88:9a:53:a2:
c1:b7:86:95:d3:ae:09:c9:f6:2f:3b:65:7d:bf:3b:e3:d8:88:
7b:24:90:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:34:51 2026 by rpki-client