Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10D443166FAF11F18123A0C5CE1D38B0.roa
File: 10D443166FAF11F18123A0C5CE1D38B0.roa (raw, json)
Hash identifier: Ze1y9/tPbJ4ArboqFZfM8Wnl0qtzMddRaS+YfxKc9r8=
Subject key identifier: 82:45:18:9B:6D:4F:D9:6B:C2:7D:60:AA:34:F1:D3:89:EE:E9:4A:47
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D4B3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10D443166FAF11F18123A0C5CE1D38B0.roa
Signing time: Wed 24 Jun 2026 09:28:32 +0000
ROA not before: Wed 24 Jun 2026 09:28:27 +0000
ROA not after: Fri 31 Jul 2026 09:28:27 +0000
asID: 62240
IP address blocks: 154.194.36.0/24 maxlen: 24
154.194.59.0/24 maxlen: 24
154.194.67.0/24 maxlen: 24
154.194.126.0/24 maxlen: 24
154.194.207.0/24 maxlen: 24
154.195.3.0/24 maxlen: 24
154.195.97.0/24 maxlen: 24
154.195.98.0/24 maxlen: 24
154.198.63.0/24 maxlen: 24
154.198.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 29 Jun 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119987 (0x1d4b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 09:28:27 2026 GMT
Not After : Jul 31 09:28:27 2026 GMT
Subject: CN=6a3ba340-fa76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d8:0a:27:e7:65:31:e3:5f:02:c9:7a:e6:01:
42:c1:ab:c3:14:8a:fa:7c:4b:cc:ea:82:f3:e3:f8:
3b:5d:f3:c7:b5:ed:3b:43:93:6a:dc:e8:01:f9:a4:
c3:04:a4:01:44:e9:b6:94:78:e2:87:fd:f0:7a:65:
87:1d:f7:f5:52:97:71:93:48:db:f4:f6:8b:94:b5:
a1:85:a8:8a:68:22:e0:9d:25:2a:81:65:8c:32:a8:
55:25:f1:de:3e:f3:f2:c7:26:e6:61:46:6f:00:7c:
f3:60:28:5e:e2:e6:47:77:18:d1:58:e4:6a:a4:4a:
93:8c:0a:ff:eb:54:62:7b:7f:af:c4:55:e5:5a:07:
f0:05:5d:93:6d:17:9f:b5:d4:6d:57:f8:90:f1:4f:
dd:0e:29:c4:68:f3:2e:75:84:1f:04:81:67:1e:52:
b7:f0:e2:db:e1:89:4e:77:27:aa:ca:de:97:af:37:
74:eb:70:92:06:5e:d8:ba:f0:23:27:3f:a0:a1:c7:
ec:83:77:f2:f3:e6:c9:d1:4b:58:63:d6:9a:19:fd:
ef:c2:57:1a:01:32:13:16:38:8e:2d:b1:25:9e:01:
0a:b2:88:99:ca:1d:d8:e8:2f:39:1f:cb:2b:7a:3c:
c2:e9:5c:7a:33:22:53:fe:07:3f:41:66:fd:53:88:
30:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:45:18:9B:6D:4F:D9:6B:C2:7D:60:AA:34:F1:D3:89:EE:E9:4A:47
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/10D443166FAF11F18123A0C5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.36.0/24
154.194.59.0/24
154.194.67.0/24
154.194.126.0/24
154.194.207.0/24
154.195.3.0/24
154.195.97.0-154.195.98.255
154.198.63.0/24
154.198.191.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:37:6f:5f:5d:c1:38:85:de:ac:9b:48:70:0a:53:06:d5:e6:
19:2e:64:86:bd:05:20:f3:ba:5a:46:46:57:6c:16:f9:b3:0d:
b6:e3:e7:39:1b:a7:72:c4:5c:b7:bc:ff:7a:fe:c2:04:78:14:
f8:f9:e7:2f:4b:9c:72:a3:9f:fa:1e:b6:5a:af:b2:c3:7d:a4:
46:dc:8e:da:72:b5:9c:0c:f8:a5:af:fc:7a:f7:d7:f3:15:ac:
00:c1:c5:c2:dc:c6:fe:a3:42:31:06:fc:4a:51:04:0b:55:1d:
e3:f8:fe:ad:ff:0d:ab:4b:eb:35:88:dc:16:e5:60:cc:22:38:
79:d7:b0:9b:39:59:0f:d7:8a:f3:e8:a5:e5:dc:7f:50:ae:e6:
80:2b:90:3b:20:34:fa:0d:72:27:86:8a:4b:44:22:4c:36:4c:
9d:49:d9:13:f2:cf:6b:46:ff:1b:75:a6:0a:19:7b:da:81:13:
bd:46:d2:72:b6:3e:61:08:69:b8:80:43:0a:39:48:3f:4d:99:
f2:e5:a9:ad:9d:2a:f4:77:77:b9:5b:7c:25:2e:b1:0e:6a:e9:
3d:a9:51:6d:77:df:51:50:e3:89:52:f1:1a:1b:d6:d8:8f:5b:
34:20:e6:0a:2d:6b:b9:71:8b:1f:af:13:9d:17:d4:a4:a4:8f:
f0:40:cc:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 17:41:56 2026 by rpki-client