Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A3B6FC656CA11F19192B5ACCE1D38B0.roa
File: 7A3B6FC656CA11F19192B5ACCE1D38B0.roa (raw, json)
Hash identifier: HGaLnOfH9ODnK3cuntkfnErOSldb22V/XzhzC7q1AxE=
Subject key identifier: A6:75:85:EB:86:F3:85:EA:14:9A:83:60:83:41:2B:07:7E:C1:8F:F4
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CE8A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A3B6FC656CA11F19192B5ACCE1D38B0.roa
Signing time: Sat 23 May 2026 17:11:46 +0000
ROA not before: Sat 23 May 2026 17:11:42 +0000
ROA not after: Fri 26 Jun 2026 17:11:42 +0000
asID: 63139
IP address blocks: 154.194.68.0/24 maxlen: 24
154.203.160.0/24 maxlen: 24
154.203.161.0/24 maxlen: 24
154.203.162.0/24 maxlen: 24
154.203.163.0/24 maxlen: 24
154.203.164.0/24 maxlen: 24
154.203.165.0/24 maxlen: 24
154.203.166.0/24 maxlen: 24
154.203.167.0/24 maxlen: 24
154.203.168.0/24 maxlen: 24
154.203.169.0/24 maxlen: 24
154.203.170.0/24 maxlen: 24
154.203.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 118410 (0x1ce8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 23 17:11:42 2026 GMT
Not After : Jun 26 17:11:42 2026 GMT
Subject: CN=6a11dfd2-5387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:67:b1:df:88:7b:52:de:a7:6e:6b:6a:3d:97:
2e:dc:e5:42:c2:4c:f5:4f:4d:ca:98:00:9d:05:a5:
64:6a:b3:d9:69:24:2a:fa:30:4c:f1:92:0b:cb:e2:
00:b0:81:b0:7f:d0:0e:f5:e6:f0:77:f6:50:a4:2f:
be:0b:2c:9d:fa:b9:38:46:21:00:92:cd:32:10:d0:
3c:c1:7f:44:f9:98:a5:a0:b4:75:cf:7c:33:85:bf:
17:20:97:a8:92:af:f1:5d:9e:d4:64:a5:c5:dd:78:
58:9d:c8:6f:75:b6:02:01:1a:64:7d:57:ab:31:18:
39:a5:4e:4c:c6:ba:4e:db:a5:49:4b:79:f3:14:f8:
f0:f4:50:7e:3b:0c:da:89:9a:ee:85:7b:3c:ae:d7:
c8:74:5d:37:b5:9e:85:00:ab:d1:87:f7:5e:37:bf:
cc:25:d5:b1:aa:50:5e:78:43:49:c9:00:98:90:a8:
88:ce:f9:29:c2:35:0d:65:ba:47:4a:11:ad:4b:30:
48:ff:3f:cf:5f:5c:84:f1:34:bb:87:5f:c6:4e:45:
cf:c6:c9:27:57:04:04:9d:cb:e8:d3:c7:d4:f4:92:
37:1c:63:44:49:35:f6:32:21:e2:1f:5c:90:8c:5d:
97:62:6c:27:2f:d2:50:13:50:b2:f2:c7:92:c7:6d:
7c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:75:85:EB:86:F3:85:EA:14:9A:83:60:83:41:2B:07:7E:C1:8F:F4
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7A3B6FC656CA11F19192B5ACCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.68.0/24
154.203.160.0-154.203.171.255
Signature Algorithm: sha256WithRSAEncryption
80:f8:d8:87:64:39:d7:c7:03:94:83:f8:d5:9c:2f:cf:5d:3d:
e4:13:95:27:6a:39:8f:58:fb:2c:a1:b4:68:8c:e1:79:d1:c1:
85:55:c6:93:e2:c2:d2:ed:4f:a9:db:04:5a:75:c4:1f:3c:b7:
c7:50:cb:43:4c:3b:e4:85:8c:d4:82:8e:26:1b:2d:90:65:0c:
f9:e4:f9:d1:9d:ce:48:ee:da:2c:a0:8c:3a:aa:ff:4a:47:0b:
11:87:e2:89:79:4b:22:4c:59:bf:05:4b:35:ca:d9:72:fc:57:
8b:2e:15:e2:5e:a5:00:13:24:fc:f9:57:bd:c0:4a:7e:0c:a8:
a7:df:9a:cb:cc:62:6e:23:0e:83:3c:bf:cd:6c:ee:89:cc:c6:
87:1f:5e:61:e4:fd:f4:00:f0:79:9a:e5:63:45:3e:e6:f5:73:
72:11:2b:dc:28:d7:5a:23:c1:a1:27:05:9d:1e:0f:b4:e5:ba:
07:75:fa:f2:16:d4:5c:b4:75:ab:94:9a:2d:fc:0a:66:16:e5:
99:35:ea:a5:69:66:56:27:38:57:f6:f9:4b:10:a2:b2:20:f6:
d4:cb:eb:b2:3e:35:2d:10:bd:84:c8:1c:1b:05:dd:40:2a:82:
38:e5:8a:d9:32:2f:b7:d2:f2:63:72:ea:fe:40:6a:12:b3:71:
d4:40:6c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:35:50 2026 by rpki-client