Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1122E22C795611F1B5CF00EBCE1D38B0.roa
File: 1122E22C795611F1B5CF00EBCE1D38B0.roa (raw, json)
Hash identifier: 2bbNPRBuFxDV7U9hTzUMYdlqqNdqYCQmt+FKIfUbNS4=
Subject key identifier: 6B:E9:44:E7:80:78:8D:63:31:5F:B9:5B:1C:33:DF:A1:62:CB:CB:72
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D74C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1122E22C795611F1B5CF00EBCE1D38B0.roa
Signing time: Mon 06 Jul 2026 16:16:39 +0000
ROA not before: Mon 06 Jul 2026 16:16:34 +0000
ROA not after: Sat 19 Feb 2028 16:16:34 +0000
asID: 17561
IP address blocks: 154.81.133.0/24 maxlen: 24
154.81.135.0/24 maxlen: 24
154.81.137.0/24 maxlen: 24
154.81.139.0/24 maxlen: 24
154.81.141.0/24 maxlen: 24
154.90.124.0/24 maxlen: 24
154.90.125.0/24 maxlen: 24
154.90.126.0/24 maxlen: 24
154.90.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120652 (0x1d74c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 6 16:16:34 2026 GMT
Not After : Feb 19 16:16:34 2028 GMT
Subject: CN=6a4bd4e7-5da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6c:d3:ce:e9:84:34:92:2b:de:69:90:b7:a2:
df:d6:d2:55:7f:16:40:9b:00:4e:5f:55:b6:59:cd:
b7:99:35:cd:0e:da:4c:9e:6b:6e:8a:0c:fe:73:84:
f3:67:57:c6:25:a8:96:48:39:63:de:45:74:6d:f3:
5f:4e:ce:5b:78:9e:8a:34:09:87:7e:e3:60:74:e2:
cf:57:32:27:f5:62:bc:b6:b9:fa:69:46:00:c3:ea:
c4:1c:01:6f:67:ef:1a:be:97:83:9c:fd:12:38:7e:
1c:36:4e:e9:1c:87:1f:f1:9e:f1:97:fb:40:df:85:
9f:6b:96:8e:e6:b2:c1:a3:2d:5d:8d:ad:87:85:f9:
7b:88:eb:18:ed:a8:38:c9:73:1a:95:10:ec:25:96:
fd:02:27:67:ec:8d:cf:1a:c8:3e:cb:62:bc:ac:f6:
0d:6e:ff:3b:1e:fb:c0:ed:85:7e:a7:7d:e7:14:ec:
5b:29:d9:6a:ed:02:34:34:3c:9b:30:ce:22:bd:91:
4a:d4:a4:9a:11:54:fd:a7:09:32:b3:c7:d4:56:e0:
08:c1:f6:02:fd:e8:59:7c:f7:f9:c5:3f:35:4f:d8:
35:44:33:1b:28:32:d1:bd:e5:25:2f:06:eb:ef:a0:
fa:a0:ed:dc:4b:02:48:fc:ba:00:2a:8f:76:f9:11:
79:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E9:44:E7:80:78:8D:63:31:5F:B9:5B:1C:33:DF:A1:62:CB:CB:72
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1122E22C795611F1B5CF00EBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.133.0/24
154.81.135.0/24
154.81.137.0/24
154.81.139.0/24
154.81.141.0/24
154.90.124.0/22
Signature Algorithm: sha256WithRSAEncryption
ce:0f:a6:e0:4e:cd:46:83:60:46:e9:c2:24:59:d6:71:59:2b:
97:66:6a:b1:bf:d9:cd:cf:48:9f:4a:43:3b:72:f4:74:93:3c:
10:cc:31:a9:6d:bc:8f:29:c2:f8:b1:66:fb:2f:d8:9a:59:c5:
eb:55:e1:d2:29:62:40:31:6b:38:ab:39:92:8a:3f:f6:db:1c:
a4:3a:4b:54:4f:31:5c:1a:69:a2:9f:a4:69:35:22:61:22:9b:
a7:f0:fb:d3:c7:c6:81:63:64:ca:62:d6:ff:a1:87:f0:3a:8a:
10:60:5a:8c:02:35:08:bb:b3:1c:52:4d:df:76:bc:ae:8f:92:
56:da:3b:ed:5b:01:9a:e7:b0:8f:84:ce:1e:94:99:81:90:c6:
76:a4:5d:38:b5:64:b8:ec:ee:46:73:23:f5:97:c4:c9:81:f6:
59:84:62:bb:f9:6f:86:45:df:df:20:69:03:25:d0:0f:89:1c:
ef:4c:12:2b:0a:90:6d:48:66:e7:78:af:9f:f6:d8:08:41:0f:
e0:fb:ad:71:b9:fc:b3:72:c1:48:89:76:45:ab:b9:70:66:e6:
91:43:c1:42:37:63:5e:bb:e7:c1:3a:48:4b:98:d7:5c:22:e0:
bf:88:14:b7:6c:a3:2f:e6:7e:e5:f0:b8:5f:eb:9c:96:d0:c4:
83:9d:af:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:15 2026 by rpki-client