Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B727BB676AD11F1925B0DD3CE1D38B0.roa
File: 7B727BB676AD11F1925B0DD3CE1D38B0.roa (raw, json)
Hash identifier: sxU8f5NZk6GOZ019T0vD4lt8meAEzo+3ZbUc4OhECOM=
Subject key identifier: 23:34:BA:77:50:95:15:48:F0:FA:92:CD:32:A1:EA:54:5F:7C:D4:13
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D69F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B727BB676AD11F1925B0DD3CE1D38B0.roa
Signing time: Fri 03 Jul 2026 07:04:50 +0000
ROA not before: Fri 03 Jul 2026 07:04:46 +0000
ROA not after: Thu 06 Aug 2026 07:04:46 +0000
asID: 153517
IP address blocks: 154.86.21.0/24 maxlen: 24
154.86.22.0/24 maxlen: 24
154.86.23.0/24 maxlen: 24
154.86.24.0/24 maxlen: 24
154.86.25.0/24 maxlen: 24
154.86.26.0/24 maxlen: 24
154.86.27.0/24 maxlen: 24
154.86.28.0/24 maxlen: 24
154.86.29.0/24 maxlen: 24
154.86.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 11 Jul 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120479 (0x1d69f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 3 07:04:46 2026 GMT
Not After : Aug 6 07:04:46 2026 GMT
Subject: CN=6a475f12-d0d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:29:8d:7a:33:d7:4e:76:81:d4:bc:e3:6d:7f:
0e:23:82:a0:40:07:a4:0e:89:ec:7c:e7:4b:bc:07:
99:1c:28:0c:25:7c:58:52:2c:7d:7f:c2:a5:73:ff:
62:b8:f2:c5:91:c4:26:56:48:5d:9e:cd:f9:a4:b0:
a4:8b:51:dd:a9:67:0d:84:25:27:65:a8:0a:88:4a:
6c:59:60:c0:0c:ce:93:45:f6:e9:07:f3:56:7a:59:
f0:11:73:67:96:89:3c:e6:bf:e3:ec:b9:c6:1c:7c:
1f:ae:cc:da:75:78:56:55:b0:33:a8:c9:cf:9a:ec:
22:95:2e:b9:2c:d9:f3:5f:7d:f1:cd:66:f6:99:60:
e2:16:46:37:ae:d7:fc:08:c4:f0:53:0d:1f:8f:57:
78:12:2a:64:2b:e5:54:52:eb:7d:d8:51:ef:09:e0:
78:67:88:5b:a8:36:c6:98:1e:a6:59:56:a3:a9:e4:
e8:f9:8d:81:b3:c7:3d:a9:4e:6d:3d:7f:a2:d8:a7:
f5:17:0a:9c:73:4c:a3:2d:a7:dc:3b:58:42:ab:4f:
0d:35:7e:c8:4f:ca:4b:17:3f:58:74:59:b1:bc:47:
6f:ed:a4:a2:4c:b5:30:c9:67:96:19:e5:99:36:f2:
28:3f:11:91:1e:8a:e0:a5:16:72:7e:b4:be:05:50:
e0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:34:BA:77:50:95:15:48:F0:FA:92:CD:32:A1:EA:54:5F:7C:D4:13
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7B727BB676AD11F1925B0DD3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.86.21.0-154.86.30.255
Signature Algorithm: sha256WithRSAEncryption
65:32:19:3c:d7:96:5c:85:0c:d8:c6:5f:56:da:86:22:83:4a:
12:29:eb:8b:c9:ce:e4:91:0e:11:0a:c5:92:93:7f:8f:a6:bd:
77:da:94:19:52:f2:4d:45:dd:bc:27:0d:26:1c:cc:7b:1b:e5:
99:84:ef:d1:9a:6d:44:41:c4:2a:56:b8:76:29:d6:e5:24:73:
0e:76:e3:b6:67:04:cf:b6:4d:7d:4a:59:85:df:81:9a:0d:e1:
bd:8c:d2:0b:9b:c4:02:b5:e1:ed:a3:56:6e:e7:df:e0:cf:86:
9a:24:85:0c:2b:f0:e5:1e:22:32:37:bd:06:bf:9e:0a:41:35:
7f:4a:8f:8e:e6:a2:a7:c5:1d:0a:b9:ca:36:f1:da:94:c0:55:
9d:97:ab:42:e8:52:0a:88:69:17:d7:21:0f:d7:97:c2:b6:09:
a9:2c:ec:9d:96:49:9b:cd:18:38:54:7b:4b:80:76:67:3a:47:
8e:38:bd:c8:01:e3:c7:20:96:97:e8:2e:45:9c:d1:7d:bf:dc:
3e:8a:ca:9b:c4:47:ae:7f:9d:c6:21:21:c5:50:5b:89:45:b3:
1f:78:97:94:1d:2f:f9:44:a7:17:f0:6f:17:06:94:be:fa:13:
b4:d0:13:da:0a:f0:fa:b4:9c:32:66:34:98:4f:98:3d:4c:03:
37:3d:79:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 02:46:07 2026 by rpki-client