Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3E75890545211F1AA1B8A1BCF1D38B0.roa
File: B3E75890545211F1AA1B8A1BCF1D38B0.roa (raw, json)
Hash identifier: P9mFJNHK2ILOCSDjbF4EFOib+wSJ4ZKJgVZW39uh3nA=
Subject key identifier: 88:43:17:AE:77:CD:93:AF:15:8A:C1:33:73:D5:A1:1A:39:9B:8B:2B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01CCE0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3E75890545211F1AA1B8A1BCF1D38B0.roa
Signing time: Wed 20 May 2026 13:49:21 +0000
ROA not before: Wed 20 May 2026 13:49:16 +0000
ROA not after: Fri 26 Jun 2026 13:49:16 +0000
asID: 63139
IP address blocks: 154.81.1.0/24 maxlen: 24
154.94.64.0/24 maxlen: 24
154.94.65.0/24 maxlen: 24
154.94.66.0/23 maxlen: 24
154.94.79.0/24 maxlen: 24
154.94.80.0/24 maxlen: 24
154.94.81.0/24 maxlen: 24
154.94.83.0/24 maxlen: 24
154.94.84.0/24 maxlen: 24
154.94.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 04 Jun 2026 00:07:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 117984 (0x1cce0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: May 20 13:49:16 2026 GMT
Not After : Jun 26 13:49:16 2026 GMT
Subject: CN=6a0dbbe1-490f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:af:1a:c6:07:c3:53:8b:14:85:b7:5f:89:58:
61:44:2e:03:df:53:56:69:e6:36:5f:f8:1c:9a:67:
b6:a2:60:f3:95:db:e3:4e:94:04:ba:b5:dd:dd:a4:
58:58:ca:d4:04:c8:71:49:2e:a9:3c:00:ee:fb:bb:
1f:a2:f2:95:7e:1f:78:67:fe:04:d4:8a:7d:16:be:
f1:ba:33:d0:72:1f:69:75:6f:97:72:94:43:aa:03:
55:8d:a2:71:4b:f6:e3:15:22:8a:16:30:70:86:6d:
a6:34:f3:d0:24:08:af:0a:92:3a:e3:f1:e8:c0:85:
c8:a8:6d:c9:9a:4c:2b:ee:6c:1b:79:41:92:10:fe:
f7:b0:df:44:20:cf:93:e1:66:8b:e2:c7:45:af:b0:
85:39:d9:27:05:90:c7:9a:b1:e6:48:da:14:c0:db:
bd:0a:0b:da:6b:5b:c7:65:3e:a8:1f:f1:4f:25:3e:
77:18:8d:a2:9b:f4:5e:60:19:a3:40:1a:f1:f4:39:
ed:d3:ec:32:c0:68:14:cf:1f:23:b6:d2:51:6d:8d:
af:28:e9:cd:0d:c4:b3:4a:c3:56:60:77:11:86:1c:
2d:ea:6e:14:7c:96:b1:c8:f7:74:aa:8d:f1:2d:08:
0a:ec:e4:7b:5b:c8:a6:3c:4b:8b:b3:c2:f9:bc:31:
ac:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:43:17:AE:77:CD:93:AF:15:8A:C1:33:73:D5:A1:1A:39:9B:8B:2B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/B3E75890545211F1AA1B8A1BCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.1.0/24
154.94.64.0/22
154.94.79.0-154.94.81.255
154.94.83.0-154.94.85.255
Signature Algorithm: sha256WithRSAEncryption
74:f6:6b:c2:7e:00:00:14:1e:3b:0e:5d:ba:eb:cf:f0:96:cc:
ec:06:e7:22:5c:e9:6c:91:4d:5d:11:12:29:b3:63:84:07:34:
16:aa:b1:71:0b:c4:04:df:83:5b:dd:33:a9:2f:17:be:e2:10:
63:bb:da:07:9e:9c:6c:c1:0a:24:3e:44:bb:0c:a7:e2:91:aa:
2b:d0:81:1e:e3:68:4b:4a:ec:21:a3:85:d9:68:8b:e6:5d:52:
42:08:3e:c4:f1:5e:c4:ac:20:54:3b:44:86:81:36:33:cb:99:
ca:d7:87:e3:01:8c:7d:ca:e2:3e:00:1a:50:23:61:b2:31:33:
6f:f6:17:05:eb:45:e1:e2:27:f8:13:52:ff:b0:1f:b6:51:a5:
6d:3c:f3:d7:83:8b:82:8f:70:99:7c:2d:78:f9:fa:42:a7:28:
55:d4:af:f0:8a:37:8a:85:59:3d:65:ca:07:82:8a:52:31:05:
43:8a:08:f2:7c:3c:ab:88:82:41:da:91:cc:a5:2a:77:a9:38:
de:62:3d:fa:83:8e:01:76:1b:6f:a2:ac:f5:5c:96:4c:d6:d1:
44:0f:21:9a:6f:ec:56:b0:cb:8f:a5:ea:fd:c7:bc:7d:f3:95:
9f:0f:af:ce:2b:13:49:06:07:16:4f:2c:75:d4:de:4b:b1:f3:
c1:17:44:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:30:54 2026 by rpki-client