Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BC343FC954D11F1A574F4ABCE1D38B0.roa
File: 7BC343FC954D11F1A574F4ABCE1D38B0.roa (raw, json)
Hash identifier: bo7TcCbAq7HBMc+nk+qpQDjdRPnLK9uBXNfuLa5O2OM=
Subject key identifier: 55:94:E6:F7:7C:D6:CD:64:C6:96:6C:A3:0C:55:12:30:9C:2B:F0:C2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DE06
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BC343FC954D11F1A574F4ABCE1D38B0.roa
Signing time: Tue 11 Aug 2026 06:25:45 +0000
ROA not before: Tue 11 Aug 2026 06:25:41 +0000
ROA not after: Fri 18 Sep 2026 06:25:41 +0000
asID: 22773
IP address blocks: 154.194.3.0/24 maxlen: 24
154.194.6.0/24 maxlen: 24
154.194.63.0/24 maxlen: 24
154.194.66.0/24 maxlen: 24
154.194.240.0/23 maxlen: 24
154.198.6.0/23 maxlen: 24
154.198.14.0/23 maxlen: 24
154.198.17.0/24 maxlen: 24
154.198.18.0/23 maxlen: 24
154.198.190.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Fri 21 Aug 2026 00:07:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122374 (0x1de06)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 11 06:25:41 2026 GMT
Not After : Sep 18 06:25:41 2026 GMT
Subject: CN=6a7ac069-8a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5a:39:e9:cd:b9:e0:a9:55:74:4f:c2:7a:93:
ea:7e:af:27:3d:e2:a8:7f:99:70:95:e9:6a:f7:3f:
b0:3a:0e:6d:cb:53:b3:4d:16:51:ad:1d:e5:a8:c5:
b3:ef:ae:81:57:5d:dc:fb:83:47:43:d3:cd:93:78:
0b:d6:d3:c7:ad:1c:03:ae:e9:50:bd:ff:0b:bd:62:
90:71:3e:e5:23:f4:92:b6:fb:5a:86:c7:da:1f:8f:
b0:91:44:bc:6e:b4:14:56:3b:0a:a5:e2:4d:d9:72:
10:f4:7b:53:89:d9:4f:07:74:ab:10:31:aa:0f:b3:
19:c1:61:48:33:93:04:52:80:2b:64:ac:b1:17:4c:
3c:fb:53:06:f5:f1:8d:0f:96:99:7c:fc:10:4a:5a:
0d:39:82:c8:ac:2f:e5:cc:68:46:2c:8e:8a:ae:af:
f1:3b:5d:16:cf:64:e8:c0:ab:f5:a1:7c:b2:f7:e8:
e0:12:0e:40:98:bb:e3:f7:1b:9b:61:9c:e6:5e:c3:
28:c9:25:b0:4e:a9:72:b3:b1:ec:61:8a:05:6c:a7:
09:00:74:5b:c9:c8:1b:16:a8:70:de:d6:44:d3:cb:
da:ad:91:59:62:d4:6e:5b:4c:ee:1c:4f:19:c0:e8:
f0:c6:c3:43:b9:d3:bb:82:0c:e6:e0:35:f9:09:a5:
2c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:94:E6:F7:7C:D6:CD:64:C6:96:6C:A3:0C:55:12:30:9C:2B:F0:C2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7BC343FC954D11F1A574F4ABCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.3.0/24
154.194.6.0/24
154.194.63.0/24
154.194.66.0/24
154.194.240.0/23
154.198.6.0/23
154.198.14.0/23
154.198.17.0-154.198.19.255
154.198.190.0/24
Signature Algorithm: sha256WithRSAEncryption
36:10:be:f9:e4:6d:81:c2:84:69:16:8d:55:dc:25:5f:83:1c:
7d:9c:a8:b4:53:fb:0b:dd:89:52:37:27:a5:34:a2:c6:1f:84:
06:3c:3d:d5:b0:8f:dd:e4:a6:59:29:f1:1a:99:a2:fd:9a:ec:
da:55:dd:64:ec:48:ae:17:a8:e3:48:97:2b:fa:43:75:e9:a6:
16:53:2c:b5:ab:fa:10:ce:2f:40:f6:27:e9:e1:42:da:95:21:
2b:e2:08:17:32:ff:84:26:ea:92:56:13:a6:88:49:7f:2e:6f:
07:57:d7:72:1c:00:08:1d:bc:f9:5b:20:d4:d3:ab:ba:58:d2:
cf:ed:0e:97:af:e6:5b:4b:75:60:a8:b1:b0:b3:1d:26:98:d0:
bc:3b:d1:8e:ec:db:2b:21:88:7a:be:91:61:b3:ac:e8:38:c6:
2d:76:5e:a2:5b:6f:45:ba:e6:54:ab:dc:83:7a:16:5f:c6:af:
c0:41:35:26:f0:c4:72:3e:4c:f5:66:11:d8:62:86:7a:42:69:
85:5d:09:a1:ba:db:a3:65:32:5a:d7:da:cb:91:28:a8:63:fd:
ae:00:73:6c:97:9b:12:04:dc:2c:70:d7:fc:92:9b:4b:ba:e5:
8a:78:32:ec:b0:61:69:45:45:43:03:d2:b1:6c:2c:7d:99:d0:
05:2f:d5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 05:13:17 2026 by rpki-client