Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73897462278011F1BAAC179BDAE4EC9C.roa
File: 73897462278011F1BAAC179BDAE4EC9C.roa (raw, json)
Hash identifier: i9ouWb8/1YCudmwZrHD5XMZJa5jjwamDvo06wIQsx6s=
Subject key identifier: D5:E8:8D:18:5A:79:8B:3F:31:88:79:62:47:A2:E9:8B:25:B0:A1:3D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01C087
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73897462278011F1BAAC179BDAE4EC9C.roa
Signing time: Tue 24 Mar 2026 12:53:28 +0000
ROA not before: Tue 24 Mar 2026 12:53:22 +0000
ROA not after: Fri 01 May 2026 12:53:22 +0000
asID: 62240
IP address blocks: 154.194.72.0/24 maxlen: 24
154.194.78.0/24 maxlen: 24
154.194.94.0/24 maxlen: 24
154.194.95.0/24 maxlen: 24
154.194.96.0/24 maxlen: 24
154.194.97.0/24 maxlen: 24
154.194.103.0/24 maxlen: 24
154.196.20.0/24 maxlen: 24
154.196.21.0/24 maxlen: 24
154.196.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 26 Mar 2026 08:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 114823 (0x1c087)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Mar 24 12:53:22 2026 GMT
Not After : May 1 12:53:22 2026 GMT
Subject: CN=69c28948-88a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:07:dd:a6:7b:b8:e1:17:9a:10:11:1c:19:e3:
7d:0c:53:48:0b:c9:a5:42:97:cc:b7:0c:e0:98:ef:
e7:bc:20:84:92:f6:ef:43:67:5d:9b:7a:d1:66:38:
8c:70:fd:94:c7:22:fc:7d:77:f8:da:f3:49:52:a3:
e2:fe:17:cd:f7:c9:09:a9:36:63:7c:44:71:ef:5b:
ea:3d:6a:cd:cd:63:bd:0d:35:0c:53:e3:9b:5e:6e:
6e:65:8d:80:f5:a2:10:e5:e8:7d:79:e8:57:ea:6e:
6b:c7:c8:0c:ee:4d:a2:fd:89:e7:ee:3c:b0:46:d5:
87:9b:da:64:6a:51:dd:6c:65:b5:16:72:a9:8c:22:
4f:24:81:65:8b:9c:d1:10:17:b5:fc:e4:b6:4d:92:
93:c3:d8:72:46:69:65:b2:79:d9:49:16:17:6f:70:
1d:62:5e:da:99:0a:d3:ee:fc:97:5e:ff:09:23:01:
0c:70:e4:e5:27:06:ab:0b:f3:03:75:d1:bb:85:43:
e4:b8:16:89:37:1b:3a:16:c2:c0:05:16:e0:63:da:
1e:17:11:17:76:67:4b:64:2c:04:77:fa:b6:f6:56:
d0:c3:3a:06:35:ca:13:4e:b3:db:3d:50:82:0c:d2:
ad:f1:b1:c4:cd:f0:74:7a:bd:eb:96:4b:1d:32:b8:
be:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E8:8D:18:5A:79:8B:3F:31:88:79:62:47:A2:E9:8B:25:B0:A1:3D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73897462278011F1BAAC179BDAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.72.0/24
154.194.78.0/24
154.194.94.0-154.194.97.255
154.194.103.0/24
154.196.20.0/23
154.196.23.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:2b:08:69:df:be:58:81:61:e7:31:35:c0:70:bc:09:ef:c8:
04:01:dc:96:be:30:cc:32:7c:65:62:fb:77:95:53:49:34:ec:
d1:4f:1d:db:44:a6:36:da:78:53:0d:06:ba:ab:a3:18:91:fa:
e4:a5:a4:6a:37:c6:47:e6:b6:3e:6c:dd:d5:94:a2:46:15:04:
38:2a:1f:62:d7:be:f2:ef:f0:46:14:f6:e2:62:5e:9a:ac:66:
57:7b:73:a7:9c:fb:6d:3e:31:1c:f2:77:cf:9d:b5:e8:b9:69:
99:32:b7:d7:62:99:0c:25:6d:6e:42:21:2a:26:54:43:d2:56:
9e:2e:e3:95:60:b6:27:a3:2e:38:11:ff:9f:29:2a:93:ad:d1:
2f:4b:40:86:21:52:73:f1:6e:a8:e1:df:aa:9a:b3:68:97:c8:
12:b6:8d:8f:93:90:29:3a:22:7c:71:ae:4f:fc:89:bb:f0:1d:
79:ab:94:0a:54:a1:df:e5:62:ee:0e:20:04:3c:a4:1e:d1:3e:
dc:3c:92:34:7b:59:8f:44:45:04:99:b7:cf:4e:a9:0a:41:ae:
98:93:6f:a0:91:61:8b:3f:e0:1b:fe:9e:45:47:8e:ea:75:34:
3e:dd:51:28:e1:86:c0:ca:28:ee:cb:9a:5d:12:aa:27:c5:02:
27:82:bd:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 24 16:15:58 2026 by rpki-client