Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3BA747A8F1311F19B7AC5EFCE1D38B0.roa
File: E3BA747A8F1311F19B7AC5EFCE1D38B0.roa (raw, json)
Hash identifier: 58En7eu8Dr7Wyi7mcr4pqmqYIOxtu4tjFWMVxKgkIrE=
Subject key identifier: 6D:45:F1:28:DA:95:55:A5:1C:07:17:F2:DA:05:9C:E0:13:89:F0:D0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DC70
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3BA747A8F1311F19B7AC5EFCE1D38B0.roa
Signing time: Mon 03 Aug 2026 08:18:21 +0000
ROA not before: Mon 03 Aug 2026 08:18:17 +0000
ROA not after: Thu 10 Sep 2026 08:18:17 +0000
asID: 138915
IP address blocks: 154.90.42.0/23 maxlen: 24
154.90.44.0/23 maxlen: 24
154.90.46.0/23 maxlen: 24
154.90.48.0/23 maxlen: 24
154.90.50.0/23 maxlen: 24
154.90.52.0/23 maxlen: 24
154.90.54.0/23 maxlen: 24
154.90.56.0/23 maxlen: 24
154.90.58.0/23 maxlen: 24
154.90.60.0/23 maxlen: 24
154.90.62.0/23 maxlen: 24
154.93.32.0/24 maxlen: 24
154.93.33.0/24 maxlen: 24
154.93.34.0/23 maxlen: 24
154.93.36.0/23 maxlen: 24
154.93.38.0/23 maxlen: 24
154.93.40.0/23 maxlen: 24
154.93.42.0/23 maxlen: 24
154.93.44.0/24 maxlen: 24
154.93.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121968 (0x1dc70)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 3 08:18:17 2026 GMT
Not After : Sep 10 08:18:17 2026 GMT
Subject: CN=6a704ecd-4451
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c7:02:b4:e6:24:37:f6:f4:4f:15:a3:98:ae:
52:2c:2e:79:4e:6f:09:5e:9a:99:c4:25:a9:f8:e5:
b4:c8:f4:e7:8b:12:5f:40:14:55:b9:a0:06:a5:0c:
f5:9a:a8:4e:c6:33:78:28:16:dc:ef:57:00:22:07:
b2:e4:aa:f6:b0:15:85:92:30:8d:8e:fe:e8:2d:a6:
ff:bf:6c:f5:89:21:58:71:c5:0c:9c:e5:44:0b:ab:
23:03:9a:57:10:53:23:0f:a7:0a:a7:a7:0b:4b:b4:
c7:f3:f8:d2:a8:93:f3:fd:35:99:eb:6e:6e:78:a7:
d6:17:93:29:e7:38:7e:4d:85:fe:7b:f1:d8:25:be:
38:8f:ef:b2:67:19:8f:c1:99:02:6e:d5:d0:5e:37:
7b:92:3e:4f:8c:a6:6d:58:df:05:61:84:45:9f:28:
54:89:48:36:20:b0:5b:8f:3d:11:74:a5:d9:55:e4:
47:09:fe:de:e3:94:0f:e9:e1:c5:79:e4:51:29:f5:
c8:5a:01:36:90:c7:08:8b:ff:97:fa:d7:7c:ac:8e:
4b:c2:5c:96:fe:ae:39:9f:24:57:df:da:5e:49:a0:
91:28:63:78:b3:c2:f7:17:57:f4:3d:89:53:14:f9:
5c:39:da:e4:1b:de:7a:df:e3:e4:b0:7d:23:e2:8f:
1d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:45:F1:28:DA:95:55:A5:1C:07:17:F2:DA:05:9C:E0:13:89:F0:D0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E3BA747A8F1311F19B7AC5EFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.42.0-154.90.63.255
154.93.32.0-154.93.45.255
Signature Algorithm: sha256WithRSAEncryption
c3:4d:55:11:70:89:b1:33:0b:c2:77:1e:3d:ba:2d:b6:49:dc:
6e:34:04:84:3a:7d:b1:ce:48:a2:5d:29:aa:41:c8:37:3b:26:
ba:1c:6e:bd:8f:3a:f4:42:4d:63:d2:da:b7:3b:f7:b9:b0:23:
fc:30:2a:2a:37:ec:ae:89:d7:3c:fd:f0:46:bc:f3:44:d2:12:
eb:c0:eb:53:81:0a:a8:7a:de:10:6a:ad:2b:c0:af:7d:23:e1:
78:66:e1:44:25:be:a6:93:f0:5a:36:39:a3:6e:f6:29:1e:b9:
10:b3:6e:52:2c:41:5e:bc:ae:12:77:b3:01:a1:22:11:45:27:
1d:9e:48:dd:70:15:97:64:6b:28:c0:96:16:63:9e:d0:fc:38:
45:b1:81:cc:3c:03:fd:90:cb:a8:5e:4a:62:58:bc:05:14:98:
b9:ba:cd:96:aa:5f:2e:74:6f:a2:26:72:b8:89:7b:7a:b9:ba:
3b:db:23:bc:a8:e9:5a:f6:6b:ea:51:29:76:35:ed:b3:f6:af:
da:ed:e7:64:48:2e:c9:a8:e4:57:3a:21:da:dc:ad:cf:53:1d:
23:f0:b3:c7:e2:10:55:d2:42:37:ed:b8:fa:c4:1a:af:c5:ed:
ae:da:1e:97:5b:00:66:2b:21:27:49:8c:5c:3b:53:5e:aa:79:
a1:bc:5c:16
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Aug 8 03:07:28 2026 by rpki-client