Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C439BF2794411F1A60BCDFECE1D38B0.roa
File: 3C439BF2794411F1A60BCDFECE1D38B0.roa (raw, json)
Hash identifier: dQtljQsqEm2cuhqHocv4XTtIrlqZtJDsqgASrNbAwvs=
Subject key identifier: 2C:7F:BF:30:51:F7:DA:79:53:9C:EA:93:63:1F:51:10:A3:D0:91:18
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D740
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C439BF2794411F1A60BCDFECE1D38B0.roa
Signing time: Mon 06 Jul 2026 14:09:00 +0000
ROA not before: Mon 06 Jul 2026 14:08:55 +0000
ROA not after: Sat 01 Aug 2026 14:08:55 +0000
asID: 9304
IP address blocks: 154.193.2.0/24 maxlen: 24
154.193.35.0/24 maxlen: 24
154.194.195.0/24 maxlen: 24
154.196.134.0/24 maxlen: 24
154.196.160.0/24 maxlen: 24
154.196.179.0/24 maxlen: 24
154.196.180.0/24 maxlen: 24
154.199.4.0/24 maxlen: 24
154.200.1.0/24 maxlen: 24
154.200.26.0/24 maxlen: 24
154.200.37.0/24 maxlen: 24
154.200.43.0/24 maxlen: 24
154.200.46.0/24 maxlen: 24
154.200.48.0/24 maxlen: 24
154.200.51.0/24 maxlen: 24
154.200.52.0/24 maxlen: 24
154.200.53.0/24 maxlen: 24
154.200.54.0/24 maxlen: 24
154.200.60.0/24 maxlen: 24
154.200.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120640 (0x1d740)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 6 14:08:55 2026 GMT
Not After : Aug 1 14:08:55 2026 GMT
Subject: CN=6a4bb6fc-9208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:38:3e:ac:c3:73:d6:cd:68:ff:55:ca:a7:7c:
ea:fc:8f:02:97:79:46:f0:c3:ec:85:91:aa:30:2a:
70:b5:6a:a0:14:a5:bb:6c:e2:a4:9a:05:62:13:4a:
f9:ec:f9:7a:8c:30:0a:c8:b8:1a:5f:42:90:33:97:
bd:46:0c:b3:f8:92:81:d1:44:ca:00:d0:8c:ef:c5:
9b:dc:f0:16:86:45:fd:95:c0:e1:07:86:9d:92:8f:
e4:c4:3e:08:e3:38:29:c0:e1:94:93:e4:6d:71:e7:
52:c1:29:38:b1:43:ab:b0:ff:71:da:60:96:2d:c7:
c2:ab:07:72:12:93:5e:d1:96:73:52:3c:65:ba:c3:
64:49:ec:64:f8:fd:b5:69:0f:fe:e6:bf:4c:46:f5:
ff:6c:e7:15:5b:4c:d4:2b:61:14:f4:95:f4:df:ca:
bf:9d:c0:7f:4f:b1:10:bd:6a:62:49:00:eb:39:4f:
e4:16:1d:d5:6c:35:91:05:df:f7:ac:9e:17:14:36:
83:3f:2a:3a:d9:9f:c7:e0:94:dd:f4:e6:a6:e9:2b:
3f:bd:a5:1a:da:26:e7:dc:7d:44:66:11:a5:bc:fb:
7f:4d:9a:3d:1d:0e:39:b5:4c:4a:6c:3d:f2:7e:92:
6c:35:f1:9c:d0:05:ba:67:26:dc:e3:88:0e:27:fa:
6b:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:7F:BF:30:51:F7:DA:79:53:9C:EA:93:63:1F:51:10:A3:D0:91:18
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C439BF2794411F1A60BCDFECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.2.0/24
154.193.35.0/24
154.194.195.0/24
154.196.134.0/24
154.196.160.0/24
154.196.179.0-154.196.180.255
154.199.4.0/24
154.200.1.0/24
154.200.26.0/24
154.200.37.0/24
154.200.43.0/24
154.200.46.0/24
154.200.48.0/24
154.200.51.0-154.200.54.255
154.200.60.0/24
154.200.129.0/24
Signature Algorithm: sha256WithRSAEncryption
36:f6:93:ef:94:f4:ad:ad:5b:bb:51:29:03:ea:82:95:2b:9e:
08:4d:48:37:5e:df:52:a5:69:a2:a1:cc:b2:b5:19:cf:ac:95:
70:1f:c1:2d:07:9b:4b:c0:f0:a4:4d:5b:86:9a:68:5c:ff:99:
e2:2c:f6:04:cb:e5:ac:d9:35:0c:cd:01:2b:3a:b8:15:83:07:
a1:c1:42:80:33:b7:da:8a:d4:85:6e:8b:a1:f8:9d:01:3d:a2:
6d:fc:0d:a6:96:14:c2:26:d7:7a:76:34:b5:65:3a:3d:df:07:
a4:23:09:09:5f:63:95:cd:25:d3:e2:7e:4f:8b:9c:91:47:64:
eb:ce:cf:e0:c4:00:47:19:4a:32:9a:25:87:a1:de:00:63:cb:
de:78:7b:96:86:df:f9:3c:34:f1:18:29:b3:84:f4:76:8c:11:
b0:b8:11:f8:da:6c:f1:71:2a:4e:4f:f0:bc:52:b9:aa:78:f9:
4a:86:bc:05:73:70:c4:12:0c:52:fc:4a:96:44:b1:d4:97:09:
69:eb:da:ce:9d:39:ae:82:19:0e:69:bd:a2:67:6d:46:c3:3b:
cd:49:7b:08:c0:db:4e:a3:41:03:10:e6:a3:5e:d3:d9:6b:e8:
6a:c6:7b:d6:14:cf:f9:23:0c:25:9b:8b:f8:46:01:64:d6:63:
c9:af:35:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:25 2026 by rpki-client