Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4A39D3E700011F189279BABCE1D38B0.roa
File: A4A39D3E700011F189279BABCE1D38B0.roa (raw, json)
Hash identifier: OdG6/+pUi0KNFfGumHREQEXxJaUORuKGuQBz/Ty1b/g=
Subject key identifier: 2B:81:9B:99:BD:71:39:FC:AD:B0:51:AD:22:35:61:A2:C4:46:D9:AE
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D4F3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4A39D3E700011F189279BABCE1D38B0.roa
Signing time: Wed 24 Jun 2026 19:12:29 +0000
ROA not before: Wed 24 Jun 2026 19:12:24 +0000
ROA not after: Fri 31 Jul 2026 19:12:24 +0000
asID: 62240
IP address blocks: 154.194.79.0/24 maxlen: 24
154.194.82.0/24 maxlen: 24
154.194.89.0/24 maxlen: 24
154.194.92.0/24 maxlen: 24
154.194.93.0/24 maxlen: 24
154.194.98.0/24 maxlen: 24
154.194.99.0/24 maxlen: 24
154.194.119.0/24 maxlen: 24
154.196.18.0/24 maxlen: 24
154.196.22.0/24 maxlen: 24
154.196.25.0/24 maxlen: 24
154.196.26.0/24 maxlen: 24
154.196.27.0/24 maxlen: 24
154.196.28.0/24 maxlen: 24
154.196.48.0/24 maxlen: 24
154.196.49.0/24 maxlen: 24
154.196.50.0/24 maxlen: 24
154.196.51.0/24 maxlen: 24
154.196.52.0/24 maxlen: 24
154.196.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 29 Jun 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120051 (0x1d4f3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 24 19:12:24 2026 GMT
Not After : Jul 31 19:12:24 2026 GMT
Subject: CN=6a3c2c1d-78fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:75:50:ea:d2:d7:d1:86:8a:29:2b:4a:e2:8d:
80:ac:cb:d9:49:91:be:a4:04:1e:d4:3a:22:3d:eb:
09:31:34:09:76:ce:82:82:2b:d5:5e:5f:84:d1:83:
fe:47:55:ad:49:d3:cf:21:2a:c8:be:86:e7:ba:c2:
b3:24:a4:91:78:36:de:01:7c:85:68:6c:f8:03:81:
6d:fa:6a:b3:f8:7f:b0:6b:e0:b2:06:34:aa:5a:6a:
7e:2e:ad:82:76:4c:02:86:c2:4a:85:ec:a7:9d:b3:
30:92:64:db:b1:e1:cf:3b:d2:46:f4:90:3f:69:64:
d1:8a:f4:a8:3d:b2:97:0e:bd:0c:a7:ec:43:51:97:
ab:12:ca:34:9e:a1:fa:9e:c1:d7:a1:e1:ea:40:2d:
19:ce:cf:60:b2:aa:c6:51:66:9a:b3:e7:9c:b4:97:
73:ef:0f:2d:d9:93:41:54:84:fa:dc:0b:8c:1f:7c:
47:fc:c3:ad:75:6c:72:e8:26:bd:77:86:ad:cb:cd:
9d:8f:01:47:39:77:b9:e9:00:55:53:a8:54:71:3f:
d2:1f:c9:33:a9:47:15:34:3e:02:ad:a4:7a:9d:27:
e7:ea:0f:ed:0a:90:15:cc:e9:16:4e:b9:49:d0:51:
14:b9:d2:13:73:f2:fc:c4:fe:f8:58:b4:9e:b1:2c:
da:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:81:9B:99:BD:71:39:FC:AD:B0:51:AD:22:35:61:A2:C4:46:D9:AE
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/A4A39D3E700011F189279BABCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.79.0/24
154.194.82.0/24
154.194.89.0/24
154.194.92.0/23
154.194.98.0/23
154.194.119.0/24
154.196.18.0/24
154.196.22.0/24
154.196.25.0-154.196.28.255
154.196.48.0-154.196.53.255
Signature Algorithm: sha256WithRSAEncryption
bb:ac:01:f8:d9:54:d9:fd:6a:c5:26:af:d2:76:fa:e8:26:4f:
ca:0b:4b:99:43:2f:f1:45:0a:a1:6c:4f:04:bb:dc:a8:2c:99:
14:c8:9e:48:d3:62:ae:dd:a0:c9:cb:0f:9c:d6:5d:46:9f:04:
b4:95:8d:29:26:dc:b4:1e:02:6f:d8:36:79:e2:6b:04:1a:a2:
c0:d7:a3:7d:4c:b7:1a:59:60:24:85:22:65:19:f5:90:34:0e:
b3:34:75:88:69:88:57:1a:73:5c:f1:68:52:6d:20:f0:cb:87:
46:bc:7e:f3:6c:bc:50:0e:15:a1:05:3c:8a:60:e8:53:8e:ad:
51:14:63:b1:76:9c:2f:b2:02:d9:37:36:07:c3:50:62:fc:8f:
d8:cb:71:30:23:eb:c9:d6:bf:29:17:f4:00:84:0b:d7:20:cf:
11:e1:fc:a8:b6:a1:1b:9f:9d:93:55:46:d7:0c:f8:aa:25:b5:
ea:ef:1e:be:22:c0:6e:0b:e9:31:6c:e9:f2:47:b1:b4:d1:53:
da:41:5b:e1:bd:e0:d8:6e:28:d5:b3:38:ed:00:50:87:a9:d2:
c4:9d:be:26:5d:a2:83:68:97:34:cb:b4:73:f2:86:60:61:af:
39:0b:5d:df:1a:37:af:2f:dd:78:f5:53:f5:cb:be:d8:44:1a:
98:b6:a2:09
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Jun 27 17:42:05 2026 by rpki-client