Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EE4AF4E713A11F1B2FF9BACCE1D38B0.roa
File: 7EE4AF4E713A11F1B2FF9BACCE1D38B0.roa (raw, json)
Hash identifier: BrCGVBNYIKkahqybm6dcroNx2gCtX86Og5JbufF86JM=
Subject key identifier: 77:F8:95:15:99:54:97:83:AA:3E:A4:43:DA:8D:EB:51:68:97:78:A1
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D555
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EE4AF4E713A11F1B2FF9BACCE1D38B0.roa
Signing time: Fri 26 Jun 2026 08:39:08 +0000
ROA not before: Fri 26 Jun 2026 08:39:02 +0000
ROA not after: Thu 30 Jul 2026 08:39:02 +0000
asID: 9304
IP address blocks: 154.193.2.0/24 maxlen: 24
154.193.35.0/24 maxlen: 24
154.196.179.0/24 maxlen: 24
154.196.180.0/24 maxlen: 24
154.199.4.0/24 maxlen: 24
154.200.26.0/24 maxlen: 24
154.200.43.0/24 maxlen: 24
154.200.51.0/24 maxlen: 24
154.200.52.0/24 maxlen: 24
154.200.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120149 (0x1d555)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 26 08:39:02 2026 GMT
Not After : Jul 30 08:39:02 2026 GMT
Subject: CN=6a3e3aac-6c16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6c:30:0e:ab:12:af:6a:19:9e:bd:c5:76:dc:
5c:e4:3c:18:1a:a4:69:a1:3b:89:b3:89:f1:1e:42:
c9:11:3d:c8:2e:72:68:7f:8b:7a:27:8f:a5:7a:9c:
6d:1a:2d:fc:20:16:8c:ee:61:4f:10:ac:1c:4c:3d:
10:41:3e:f1:0d:d4:49:1b:55:ad:7c:d0:cc:ff:95:
64:35:ff:5a:b2:20:7e:51:ef:d6:21:b7:03:30:a4:
16:94:ea:3e:50:b0:54:ce:81:1f:47:88:a7:6e:63:
6d:f8:d6:d1:d3:5d:61:73:77:6e:25:bf:a7:ae:f2:
f8:db:25:df:9c:d2:4e:3a:de:1d:6e:49:9d:42:db:
d0:63:4c:33:96:18:16:c9:a8:e7:6e:2a:b1:07:b0:
f2:72:46:46:25:f5:d6:3a:36:41:3e:94:cc:00:36:
f7:86:21:f3:34:93:0a:23:f4:13:78:ff:e9:b8:9e:
28:a5:37:0d:5b:1a:69:0e:68:fc:e6:00:f1:ed:23:
ef:57:ac:8d:24:88:a2:a0:91:03:ac:a7:4f:51:1c:
19:b3:c1:b3:77:95:66:89:84:36:9a:fa:d3:f6:b2:
fd:d2:5b:19:0c:88:aa:fc:bb:72:6a:07:c4:19:20:
e8:a6:9c:d3:31:dc:c6:b9:d8:3a:b0:79:48:46:94:
1f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F8:95:15:99:54:97:83:AA:3E:A4:43:DA:8D:EB:51:68:97:78:A1
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7EE4AF4E713A11F1B2FF9BACCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.2.0/24
154.193.35.0/24
154.196.179.0-154.196.180.255
154.199.4.0/24
154.200.26.0/24
154.200.43.0/24
154.200.51.0-154.200.52.255
154.200.129.0/24
Signature Algorithm: sha256WithRSAEncryption
71:22:80:6a:d4:e7:da:1e:69:b1:87:1c:ac:a1:42:33:9b:00:
8d:8e:7d:fe:cd:d6:2e:9e:4d:58:64:cd:d6:9c:61:ff:ec:76:
57:55:b6:47:4a:6b:7a:72:de:a6:e3:d9:60:15:b5:70:41:9f:
14:a9:a3:fa:4e:09:da:e0:7d:46:fa:c0:10:45:21:2c:f7:5b:
05:e4:5f:c4:ee:c2:f5:5c:59:dc:d1:45:e9:f5:d9:4b:e0:90:
e0:2b:c8:f7:15:79:10:d8:31:38:e8:55:a3:f7:b9:b8:d3:e7:
9e:f4:01:ba:1a:f1:11:10:a1:d2:97:e1:5c:ef:57:43:60:40:
ce:c4:16:4a:69:cd:79:bf:67:f6:ac:63:1d:18:1b:6e:9a:43:
53:1e:c7:9d:44:ae:82:4e:0a:fa:42:c7:88:e1:8f:68:74:3c:
a8:6d:d1:fb:f0:48:69:cc:d9:3d:22:2d:90:4f:58:92:a7:6c:
3b:d7:49:f2:4a:7e:1f:ce:59:3f:50:9f:60:36:2f:0b:75:78:
96:46:8a:fa:7d:50:19:51:3e:e7:d7:70:e8:6a:d4:54:96:d6:
37:b0:bc:24:c5:ac:75:d5:f3:da:7c:64:dc:73:b9:77:fc:f7:
4c:22:de:e1:11:e2:81:55:cd:96:75:ad:0b:d6:f2:21:73:b8:
e0:ca:24:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:26 2026 by rpki-client