Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2761E2846EEF11F1AA0D8FB7CE1D38B0.roa
File: 2761E2846EEF11F1AA0D8FB7CE1D38B0.roa (raw, json)
Hash identifier: KHbpQqhjZyq09LoVck5uLhmuOsPjkDXfUTuZINy/Uzo=
Subject key identifier: 08:27:8D:C9:34:9B:2B:A2:12:05:0C:D4:70:AE:C6:C1:98:98:D3:21
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D48E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2761E2846EEF11F1AA0D8FB7CE1D38B0.roa
Signing time: Tue 23 Jun 2026 10:34:47 +0000
ROA not before: Tue 23 Jun 2026 10:34:41 +0000
ROA not after: Sun 09 Aug 2026 10:34:41 +0000
asID: 32043
IP address blocks: 154.193.99.0/24 maxlen: 24
154.193.100.0/22 maxlen: 24
154.193.104.0/22 maxlen: 24
154.193.108.0/23 maxlen: 24
154.193.110.0/24 maxlen: 24
154.200.55.0/24 maxlen: 24
154.200.56.0/24 maxlen: 24
154.200.57.0/24 maxlen: 24
154.200.58.0/24 maxlen: 24
154.200.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119950 (0x1d48e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 23 10:34:41 2026 GMT
Not After : Aug 9 10:34:41 2026 GMT
Subject: CN=6a3a6146-8f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9e:f6:84:3a:53:80:08:e2:2a:90:86:a3:65:
e1:e0:ab:dd:d9:9c:27:21:c4:69:d1:c2:7c:9c:81:
e5:f0:22:3f:fe:72:9c:0b:43:56:b4:cd:64:e2:aa:
e9:e9:88:04:0b:e4:d8:14:35:63:bb:57:e0:cd:77:
6a:8c:be:ef:37:92:61:81:3a:70:64:c1:8e:fb:f4:
6c:81:57:6b:9c:a3:4c:23:d1:e5:e3:48:d2:70:ff:
cd:f2:65:73:e6:f4:47:ca:99:36:97:56:a4:47:32:
67:20:fb:67:ac:2e:35:fe:d4:49:30:ad:6d:73:9d:
c0:4b:13:4b:f8:a6:8c:6b:14:b9:3b:c8:4c:a3:e0:
df:da:f6:4e:d4:f6:b6:0c:0e:4f:db:7b:7c:c6:93:
dc:0d:80:3c:31:25:3d:9b:94:92:d1:b6:5b:22:d7:
d0:52:7e:69:9a:23:c2:9c:f2:92:b2:1c:02:3c:46:
da:f4:22:17:4c:50:1d:a8:5f:df:9c:fa:1f:4d:56:
1d:f8:60:7c:32:2b:e2:3f:cf:14:68:85:fc:10:b5:
e9:81:35:fb:b3:8d:d4:fc:52:dd:9a:a5:59:ea:08:
c1:33:27:5e:36:3b:47:b9:03:73:52:c9:f9:ff:49:
7e:bd:7a:b1:d8:e5:54:44:bc:66:2e:24:ae:e0:04:
c8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:27:8D:C9:34:9B:2B:A2:12:05:0C:D4:70:AE:C6:C1:98:98:D3:21
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2761E2846EEF11F1AA0D8FB7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.99.0-154.193.110.255
154.200.55.0-154.200.59.255
Signature Algorithm: sha256WithRSAEncryption
90:4d:e0:60:fd:00:b3:b7:85:19:21:1c:8a:2b:50:f1:b0:4f:
77:b7:04:d3:c5:f8:6d:c7:0b:42:2e:28:ca:f9:80:ee:92:c7:
51:72:fa:d5:ec:db:55:bf:d9:54:d1:27:20:7c:9e:4a:a6:61:
48:e8:da:d6:26:97:dd:4c:3b:e8:c9:bc:29:c7:db:53:66:98:
1c:da:fb:08:4b:29:be:1d:dd:33:21:63:79:69:81:ac:a0:c5:
17:4a:a8:9d:5f:61:c7:a5:a6:06:bd:6b:88:c5:20:0d:c0:a4:
8c:a1:22:81:13:ef:2e:d6:1f:f4:33:d2:11:de:d5:2d:ba:ac:
7a:0e:da:68:cf:f3:75:9e:4e:78:33:8b:54:3b:a1:5d:ef:27:
05:a5:ff:cc:d1:1c:96:af:cf:b7:72:41:8d:fb:c1:90:bc:01:
44:a9:42:28:a2:91:ac:d8:68:ce:01:12:e6:2e:26:19:8b:19:
07:13:cf:4d:51:7a:8e:a8:e0:43:fd:a0:b7:42:10:65:1b:ca:
52:0c:c1:59:53:c2:ff:36:48:5e:73:13:94:82:d7:ff:83:95:
9d:4a:00:66:e0:ce:da:49:d5:36:39:c1:66:7e:16:6d:cd:66:
38:f1:ec:ae:fa:89:41:82:25:59:ba:26:71:02:cd:cc:c0:6e:
a9:9d:f0:38
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jun 23 21:53:02 2026 by rpki-client