Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D563D00948E11F18C3ABBA3CE1D38B0.roa
File: 3D563D00948E11F18C3ABBA3CE1D38B0.roa (raw, json)
Hash identifier: C9umIqTpLtsiMVKr91SROF2xBbvPzQhN5pZbNR3wn98=
Subject key identifier: F7:AB:81:3C:82:22:A1:9B:BF:AD:68:B7:7C:E6:F6:DB:2B:3E:92:EB
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DDC6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D563D00948E11F18C3ABBA3CE1D38B0.roa
Signing time: Mon 10 Aug 2026 07:36:46 +0000
ROA not before: Mon 10 Aug 2026 07:36:42 +0000
ROA not after: Thu 17 Sep 2026 07:36:42 +0000
asID: 22773
IP address blocks: 154.85.22.0/24 maxlen: 24
154.85.23.0/24 maxlen: 24
154.85.104.0/24 maxlen: 24
154.85.105.0/24 maxlen: 24
154.85.106.0/24 maxlen: 24
154.90.18.0/24 maxlen: 24
154.90.149.0/24 maxlen: 24
154.90.150.0/24 maxlen: 24
154.90.151.0/24 maxlen: 24
154.90.159.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Aug 2026 00:07:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122310 (0x1ddc6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 10 07:36:42 2026 GMT
Not After : Sep 17 07:36:42 2026 GMT
Subject: CN=6a797f8e-8dd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:79:aa:48:80:3e:bf:13:d1:33:ed:fe:02:15:
44:fa:e2:5c:d8:0c:28:40:9f:ed:dc:fb:b5:d7:65:
cb:2e:19:a4:71:59:b3:7c:80:6f:bd:7a:75:05:12:
9e:19:df:76:45:2a:a1:5b:f5:c3:78:b0:f2:37:9a:
05:1d:13:9d:ca:76:77:3b:e9:50:30:4f:4a:08:64:
b9:5d:de:e2:71:66:66:a8:25:11:e2:94:a7:09:85:
cb:46:36:42:50:4d:00:82:a1:15:60:a6:84:42:53:
d6:76:b2:3e:ab:55:f8:13:2b:16:d0:3d:48:d6:6e:
b1:cd:6e:5d:85:ed:28:45:c9:b5:35:05:71:3e:0c:
18:88:20:dd:a0:0d:ac:b8:8b:18:96:0b:fd:c1:23:
2f:51:1a:8e:2b:0d:b7:dc:7c:e0:04:58:3e:a5:d4:
5c:5b:cc:fc:61:f5:6a:02:b6:a8:ce:b7:dd:aa:f5:
df:16:7f:70:55:4a:0a:a9:0e:76:a6:e0:23:ad:44:
c4:b9:cd:01:cf:65:1a:b6:6c:45:7a:10:63:70:84:
72:42:35:af:42:ce:4b:59:83:7e:4d:d3:24:ed:68:
60:3c:02:93:17:a7:f4:26:4f:13:58:9f:78:36:d0:
c6:b1:39:35:05:3a:04:aa:c7:8a:8f:d7:5c:32:ad:
24:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:AB:81:3C:82:22:A1:9B:BF:AD:68:B7:7C:E6:F6:DB:2B:3E:92:EB
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3D563D00948E11F18C3ABBA3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.85.22.0/23
154.85.104.0-154.85.106.255
154.90.18.0/24
154.90.149.0-154.90.151.255
154.90.159.0/24
Signature Algorithm: sha256WithRSAEncryption
86:73:08:d3:73:57:ff:a6:3f:d1:1c:45:27:17:c0:15:f0:2f:
3a:8c:81:99:16:99:72:c0:fc:f4:93:cb:24:61:43:ef:db:91:
14:48:ae:69:a9:b2:c4:c0:68:a4:ee:30:c8:f0:04:93:85:66:
9f:05:60:a8:c2:03:46:58:75:64:70:da:98:55:4e:33:81:a0:
a0:a4:d3:4c:2e:82:dd:5b:e0:d5:bc:08:db:ef:13:04:b9:58:
6a:d0:aa:23:06:2c:e0:18:d3:d9:45:22:70:6c:d2:7e:0b:ac:
9a:f3:8c:fe:56:f1:28:cb:65:a4:7e:38:99:4a:5c:78:ba:cb:
8f:ca:56:ba:bf:7c:b0:f7:e4:5f:11:eb:57:4e:c0:49:92:31:
56:e8:7d:e6:0c:53:2c:a1:37:a4:dd:0f:ad:3d:f1:2f:7a:02:
98:e4:f1:f5:cb:85:37:9e:9a:20:41:b7:28:19:b5:49:51:df:
e6:42:7f:77:6a:67:22:ca:7d:7d:ba:a9:2a:7b:ff:95:bd:c4:
f9:d2:d7:f3:3a:2a:e9:09:a9:0b:8e:98:8e:20:7b:b6:b1:7c:
dd:33:d2:76:09:33:3f:73:06:da:36:88:df:90:4e:81:14:e8:
17:4d:d8:94:f2:9d:7b:e0:8f:47:8d:56:da:92:b1:df:39:f9:
7c:aa:c9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 05:13:19 2026 by rpki-client