Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F95C128948F11F18D16D8A7CE1D38B0.roa
File: 0F95C128948F11F18D16D8A7CE1D38B0.roa (raw, json)
Hash identifier: biSRswyxdqpnQ4Dp412MjcsemYYvusGNNTjH/sVt+nI=
Subject key identifier: 69:04:7C:35:52:6E:C3:8D:68:CC:F8:D5:99:12:78:71:07:28:6F:D6
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DDC8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F95C128948F11F18D16D8A7CE1D38B0.roa
Signing time: Mon 10 Aug 2026 07:42:39 +0000
ROA not before: Mon 10 Aug 2026 07:42:35 +0000
ROA not after: Thu 17 Sep 2026 07:42:35 +0000
asID: 22773
IP address blocks: 154.82.2.0/24 maxlen: 24
154.90.152.0/24 maxlen: 24
154.90.153.0/24 maxlen: 24
154.90.154.0/24 maxlen: 24
154.90.155.0/24 maxlen: 24
154.90.156.0/24 maxlen: 24
154.90.157.0/24 maxlen: 24
154.90.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Aug 2026 00:07:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122312 (0x1ddc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 10 07:42:35 2026 GMT
Not After : Sep 17 07:42:35 2026 GMT
Subject: CN=6a7980ef-d031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6a:00:f6:63:64:1c:18:36:54:25:b6:7e:8b:
00:b7:87:27:25:4c:e9:1a:a1:ab:23:3c:ec:fe:44:
39:14:9b:14:db:a0:4a:a7:b8:54:d2:38:24:7d:93:
b1:61:48:3d:a9:dd:11:a3:9f:07:41:5e:27:d5:3a:
65:53:1f:c8:49:82:27:08:27:40:29:79:17:9a:ae:
df:56:e9:49:94:f3:11:c2:56:83:d3:dc:90:77:8b:
91:96:9a:80:c8:e8:b5:36:70:56:48:e2:67:60:4d:
a1:e5:00:f8:38:90:bf:65:47:4b:d0:a4:64:b8:42:
d4:58:88:75:29:fb:e9:30:67:4d:89:66:3d:03:d5:
8e:47:ea:14:bf:73:f3:b8:ce:bf:c5:11:0f:01:7c:
57:ba:db:a9:76:28:b1:c1:00:18:72:02:a8:58:f9:
76:a3:0b:d2:54:de:3c:4c:4c:11:01:c0:cb:a8:c9:
55:b9:cc:a6:d6:50:ba:68:c7:78:ed:40:72:23:05:
09:e3:3e:d0:f8:23:99:bf:90:00:e1:15:28:c3:63:
a3:e0:71:a2:53:61:d7:4b:df:be:0b:60:9a:5e:c0:
ef:85:d1:e6:59:1d:70:e0:99:5d:4c:5b:e4:54:fb:
36:ef:0b:ee:86:90:c6:f7:f4:a2:66:68:71:af:a6:
fc:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:04:7C:35:52:6E:C3:8D:68:CC:F8:D5:99:12:78:71:07:28:6F:D6
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0F95C128948F11F18D16D8A7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.82.2.0/24
154.90.152.0-154.90.158.255
Signature Algorithm: sha256WithRSAEncryption
c6:31:14:3f:8a:68:b4:eb:20:4c:71:8e:76:2f:ef:02:20:c5:
23:fe:91:28:65:bb:66:91:a1:9a:a0:af:37:09:00:85:a7:a4:
f1:af:b6:30:c9:b8:b9:1b:ca:82:d3:fc:e1:f5:37:5f:ba:57:
6d:a8:82:e1:a5:e6:ea:89:aa:a6:a3:ef:f1:91:67:dc:42:52:
14:05:37:b3:d6:67:e9:61:ca:69:db:8e:c7:db:bc:00:2f:ee:
49:37:28:1d:89:0f:79:33:03:04:ee:28:ac:e2:46:5c:9c:42:
b4:87:43:86:22:29:d4:2c:fc:cd:7a:d9:8e:2b:21:e1:c5:14:
fd:54:39:58:08:ed:65:ad:0d:08:a8:0a:f3:5f:a5:42:d7:a8:
d9:85:13:2a:70:81:d1:3e:04:d4:e9:57:8f:38:ab:ee:9c:03:
af:8a:3e:c1:11:72:80:db:3c:4b:64:09:de:78:9c:94:82:fa:
c6:bd:36:e6:cd:d7:4b:e9:ac:9d:d9:38:be:6c:ed:d8:3d:2a:
e7:af:78:78:c5:cc:b3:e4:27:c6:96:11:55:d0:24:d4:11:98:
8e:c7:6d:67:4d:b3:78:b6:8e:a0:ac:63:76:fc:46:a3:ea:51:
b5:ab:50:1b:71:9e:ec:5f:34:82:dc:c6:dd:af:86:8d:6f:ff:
c1:99:c9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 05:13:29 2026 by rpki-client