Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F6726006FFE11F193E6901DCF1D38B0.roa
File: 7F6726006FFE11F193E6901DCF1D38B0.roa (raw, json)
Hash identifier: HJTA6U9nmnAWCGMhc316xGPnvPQ6OkJaDElg70OvdCQ=
Subject key identifier: 4F:F7:50:C2:2E:FB:E5:09:54:C7:B4:BA:C5:44:85:B8:3B:0D:6F:AE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D4EF
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F6726006FFE11F193E6901DCF1D38B0.roa
Signing time: Wed 24 Jun 2026 18:57:08 +0000
ROA not before: Wed 24 Jun 2026 18:57:02 +0000
ROA not after: Fri 31 Jul 2026 18:57:02 +0000
asID: 62240
IP address blocks: 154.194.70.0/24 maxlen: 24
154.194.71.0/24 maxlen: 24
154.194.75.0/24 maxlen: 24
154.194.76.0/24 maxlen: 24
154.194.77.0/24 maxlen: 24
154.194.86.0/24 maxlen: 24
154.194.87.0/24 maxlen: 24
154.194.88.0/24 maxlen: 24
154.194.90.0/24 maxlen: 24
154.194.91.0/24 maxlen: 24
154.195.0.0/24 maxlen: 24
154.195.1.0/24 maxlen: 24
154.195.100.0/24 maxlen: 24
154.195.121.0/24 maxlen: 24
154.195.122.0/24 maxlen: 24
154.195.173.0/24 maxlen: 24
154.195.174.0/24 maxlen: 24
154.195.175.0/24 maxlen: 24
154.196.84.0/24 maxlen: 24
154.196.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 29 Jun 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120047 (0x1d4ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 18:57:02 2026 GMT
Not After : Jul 31 18:57:02 2026 GMT
Subject: CN=6a3c2884-98f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7b:fb:d1:cc:6e:4e:01:57:3f:77:d5:4f:17:
59:1d:c1:f4:42:83:f8:f8:56:3b:e6:6e:20:18:42:
9b:a6:2e:66:ec:9d:72:21:e0:94:61:d1:28:83:8c:
13:62:33:3b:c3:25:d3:e6:98:67:6a:c6:70:e2:80:
17:a9:95:48:b0:3c:44:68:17:d4:b0:d1:97:e5:58:
40:2d:9a:a6:69:b8:57:3c:32:62:64:36:d7:2a:94:
e7:75:10:be:92:41:00:e0:01:27:e8:6e:66:60:ca:
1f:d1:9d:31:01:08:84:45:2b:4b:4e:fe:8c:31:cb:
51:bf:c2:d1:53:73:8d:d6:58:10:db:8c:57:19:7c:
9c:57:0b:dd:26:ef:29:05:52:75:8d:0e:bd:2a:87:
b4:01:22:a2:ac:5e:8f:f5:74:31:7f:b2:04:40:f1:
d0:56:58:69:62:c8:1a:0c:4e:98:bf:df:07:09:83:
8e:6f:dd:af:52:64:73:bd:f5:7b:d4:a0:77:e3:42:
67:9a:ae:63:5c:44:34:0a:00:a0:ee:c4:7d:85:3a:
fa:7c:ec:87:1f:e9:07:05:dd:26:b7:bb:07:28:47:
00:6a:02:28:c0:27:cf:b2:11:15:a5:0f:df:a8:e3:
1c:75:27:d5:c0:d8:5e:97:89:c1:29:65:81:82:4c:
24:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F7:50:C2:2E:FB:E5:09:54:C7:B4:BA:C5:44:85:B8:3B:0D:6F:AE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7F6726006FFE11F193E6901DCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.70.0/23
154.194.75.0-154.194.77.255
154.194.86.0-154.194.88.255
154.194.90.0/23
154.195.0.0/23
154.195.100.0/24
154.195.121.0-154.195.122.255
154.195.173.0-154.195.175.255
154.196.84.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:17:f4:7d:f3:b1:ac:7e:65:78:40:7c:1a:81:69:d5:e9:bc:
74:e7:e3:39:a5:c8:55:b9:3e:7d:57:75:1b:d9:c1:af:a0:57:
ca:95:2f:68:fb:dc:47:b2:aa:7a:09:98:ec:c8:db:1c:5a:7b:
e0:ac:b8:f7:f5:30:cd:b5:ef:b6:91:43:d6:93:bd:76:e1:50:
93:07:35:06:36:02:cf:0e:28:03:57:84:4b:72:5c:83:4c:6a:
29:78:f6:bb:11:cc:d1:5a:9e:39:01:06:96:75:8b:85:69:71:
a6:3a:cc:36:24:34:68:37:62:c9:84:83:a8:fa:80:8b:01:64:
83:c9:dc:45:d4:df:15:fd:82:6a:d4:0f:3f:64:54:74:0c:f2:
d0:2f:51:a5:61:00:84:a3:80:26:a5:03:92:4a:4d:ff:ba:3a:
ff:31:70:96:97:4b:ca:e0:78:e9:dc:12:9d:ef:57:ec:73:2d:
d5:f3:45:78:e0:8b:c2:3d:1c:11:28:92:fe:62:78:79:0a:b4:
1b:b1:cb:b2:b0:a7:b3:42:e5:e3:5b:48:3a:eb:85:94:73:35:
65:36:87:67:b8:6e:de:b5:c3:d9:f0:b2:a2:c6:4f:85:ce:1a:
7b:ad:23:85:1b:aa:d0:a3:0d:6b:1b:99:ed:6d:09:37:a6:7b:
e9:ca:df:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 17:40:34 2026 by rpki-client