Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D47E6CE760E11F1A4121C04CF1D38B0.roa
File: 6D47E6CE760E11F1A4121C04CF1D38B0.roa (raw, json)
Hash identifier: eTDXncy0yxe7oqBxl3CpenQdeGxkiRvIRGWxc5yHB3c=
Subject key identifier: B9:07:B0:57:27:E7:00:CE:06:0D:81:1B:C2:8B:B1:BD:29:65:21:3C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D68C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D47E6CE760E11F1A4121C04CF1D38B0.roa
Signing time: Thu 02 Jul 2026 12:06:16 +0000
ROA not before: Thu 02 Jul 2026 12:06:12 +0000
ROA not after: Sat 25 Jul 2026 12:06:12 +0000
asID: 9304
IP address blocks: 154.193.2.0/24 maxlen: 24
154.193.35.0/24 maxlen: 24
154.194.195.0/24 maxlen: 24
154.196.134.0/24 maxlen: 24
154.196.160.0/24 maxlen: 24
154.196.179.0/24 maxlen: 24
154.196.180.0/24 maxlen: 24
154.199.4.0/24 maxlen: 24
154.200.1.0/24 maxlen: 24
154.200.26.0/24 maxlen: 24
154.200.37.0/24 maxlen: 24
154.200.43.0/24 maxlen: 24
154.200.46.0/24 maxlen: 24
154.200.48.0/24 maxlen: 24
154.200.51.0/24 maxlen: 24
154.200.52.0/24 maxlen: 24
154.200.53.0/24 maxlen: 24
154.200.54.0/24 maxlen: 24
154.200.60.0/24 maxlen: 24
154.200.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120460 (0x1d68c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 2 12:06:12 2026 GMT
Not After : Jul 25 12:06:12 2026 GMT
Subject: CN=6a465438-a22c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:51:5b:01:7e:c4:ca:e0:7d:75:54:29:b2:a4:
a3:c5:5a:b1:17:6e:34:36:7a:78:96:06:a0:98:77:
0a:03:07:d8:d1:87:0f:09:25:72:72:cb:c3:61:67:
85:c0:a7:95:08:75:3b:b6:96:5c:9b:8d:97:92:f2:
af:cd:ca:e0:24:c2:76:43:7f:c3:5d:b1:67:83:25:
00:08:4f:e6:5a:f9:de:fe:98:3b:1e:15:90:d5:d0:
6a:d3:cf:72:d8:a3:2c:5c:fa:40:82:28:7b:bf:ef:
b6:5a:c5:1c:32:c4:1e:cf:89:91:6b:4d:74:ba:2f:
70:22:ca:81:39:5e:0c:1f:89:0d:bd:f2:15:15:f0:
50:b6:d2:e5:cd:5a:6e:f7:3b:97:e8:7c:1a:01:04:
55:8d:2a:2a:6b:d3:2f:4d:29:1f:58:15:b1:e1:e6:
95:91:f7:9e:72:d9:0b:d4:70:d5:e1:e3:d9:89:e0:
11:2c:05:a6:69:d3:0c:d1:e8:72:81:e0:c6:28:fc:
ee:13:f5:2e:57:8d:e9:11:c0:c2:9d:8b:33:88:d8:
55:c5:aa:11:59:21:cc:c5:23:4b:74:e3:7c:2d:9a:
03:e5:be:64:7b:38:db:93:8c:c2:70:1e:53:20:49:
9d:8d:04:16:9f:92:26:b5:54:44:44:11:ff:e2:91:
9f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:07:B0:57:27:E7:00:CE:06:0D:81:1B:C2:8B:B1:BD:29:65:21:3C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/6D47E6CE760E11F1A4121C04CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.2.0/24
154.193.35.0/24
154.194.195.0/24
154.196.134.0/24
154.196.160.0/24
154.196.179.0-154.196.180.255
154.199.4.0/24
154.200.1.0/24
154.200.26.0/24
154.200.37.0/24
154.200.43.0/24
154.200.46.0/24
154.200.48.0/24
154.200.51.0-154.200.54.255
154.200.60.0/24
154.200.129.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:97:f5:3c:1f:cc:f0:c1:35:53:41:06:4f:6a:19:1b:29:04:
86:29:dd:eb:4d:92:2a:a4:2a:4f:c0:9f:c4:df:96:25:4a:2d:
a2:ff:90:5b:fa:dd:3a:74:ef:56:f6:28:b6:f2:d2:15:5f:c3:
90:61:44:d7:20:14:ea:5c:67:9f:66:39:86:52:53:cc:c7:af:
88:72:dc:af:2e:cd:d9:a9:86:fc:05:35:af:60:9b:76:ed:cc:
ee:39:9d:40:5f:9e:8d:ed:08:32:6a:3f:89:08:9a:e9:99:f4:
ea:d3:c4:a9:bb:46:eb:d4:f6:bd:88:a9:fe:41:cb:59:7c:39:
2e:dd:d1:aa:71:73:06:e1:81:cb:6e:7b:4d:6c:74:39:7d:e7:
67:7d:35:93:28:37:02:08:87:88:78:90:23:08:0a:95:21:72:
5e:43:e0:71:e9:41:20:80:f0:03:2a:73:ef:1a:13:1c:27:04:
81:e6:40:1e:fe:0e:dc:5e:28:d5:8a:fa:b2:e3:10:fd:fe:5f:
e1:75:fd:82:1c:39:6d:37:88:ce:47:29:9e:a1:95:08:fd:8e:
db:25:32:be:fe:0f:41:1d:4a:36:57:f9:69:5c:ce:8b:b2:fe:
0d:11:96:72:0b:2b:d5:95:60:99:9d:d1:ac:c4:27:d2:e5:69:
ec:00:02:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:18 2026 by rpki-client