Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/058A96F6713311F186F081FECE1D38B0.roa
File: 058A96F6713311F186F081FECE1D38B0.roa (raw, json)
Hash identifier: K0tMRM62XpY2epDxWUCYVZPkFvBQ6SeWmSvEXVZe+tw=
Subject key identifier: DD:E6:83:6B:CB:82:75:B2:4C:91:18:C5:01:ED:F7:BA:6D:67:1F:BA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D543
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/058A96F6713311F186F081FECE1D38B0.roa
Signing time: Fri 26 Jun 2026 07:45:38 +0000
ROA not before: Fri 26 Jun 2026 07:45:33 +0000
ROA not after: Mon 31 Aug 2026 07:45:33 +0000
asID: 399077
IP address blocks: 154.91.64.0/24 maxlen: 24
154.91.65.0/24 maxlen: 24
154.91.66.0/24 maxlen: 24
154.91.67.0/24 maxlen: 24
154.91.68.0/24 maxlen: 24
154.91.69.0/24 maxlen: 24
154.91.70.0/24 maxlen: 24
154.91.98.0/24 maxlen: 24
154.91.99.0/24 maxlen: 24
154.91.100.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120131 (0x1d543)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 26 07:45:33 2026 GMT
Not After : Aug 31 07:45:33 2026 GMT
Subject: CN=6a3e2e22-7c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d2:92:87:74:12:57:13:56:78:56:d2:31:95:
56:1b:ee:d8:1e:c4:17:17:30:ee:72:54:a1:82:c2:
77:f0:dc:41:e5:8a:ae:79:77:14:3f:3f:bd:e6:a6:
d1:8f:cb:0c:af:47:2e:ea:ab:6a:31:0e:81:d2:b8:
5b:28:95:79:30:10:89:67:ff:ea:b4:e2:67:bd:1f:
e5:71:9d:70:1c:6b:a0:80:7a:66:84:35:c7:1a:95:
0b:68:ac:1d:bf:22:86:48:71:e9:6d:cc:b2:6c:c9:
39:d4:6a:80:f4:16:ba:a9:2a:fb:58:04:59:74:1f:
2d:f0:b8:a5:33:a3:b0:f8:e1:a0:c4:41:10:56:b9:
e1:df:8b:b3:3c:ab:6b:17:0c:81:cd:52:1c:2b:ae:
01:b9:85:dd:59:2b:ac:ee:f4:ce:6e:ed:77:df:1f:
8c:b4:95:fd:ec:18:69:4f:dd:8e:3c:75:bf:87:5e:
a2:a4:9e:93:11:46:82:13:cf:4a:84:01:d0:f3:0d:
5c:bb:dc:3e:11:6d:9f:9e:76:fa:3f:7a:df:b8:33:
33:df:92:8a:26:66:5d:19:72:bc:63:e1:bd:52:d2:
35:10:ab:65:d4:42:f2:c9:38:f6:03:08:5c:c7:8b:
86:00:61:45:6c:7c:04:fb:cd:d0:1c:f4:32:48:21:
06:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E6:83:6B:CB:82:75:B2:4C:91:18:C5:01:ED:F7:BA:6D:67:1F:BA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/058A96F6713311F186F081FECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.64.0-154.91.70.255
154.91.98.0-154.91.100.255
Signature Algorithm: sha256WithRSAEncryption
bb:26:86:fa:2e:82:00:f9:4f:98:e6:09:2d:be:57:10:e4:3a:
54:c4:1a:23:e2:48:7c:19:15:8c:d5:ee:67:04:5e:40:94:6a:
5b:07:e9:c0:c4:bc:e4:ab:60:75:bf:82:01:c4:44:91:09:b1:
23:56:21:e8:17:fe:54:ce:4e:80:cd:5e:9d:f4:25:16:c8:4f:
71:fa:1a:da:e0:50:32:c2:42:0c:e6:a7:76:65:0f:c9:25:cb:
0c:12:f1:59:c3:0f:43:ac:50:38:3a:c3:8a:a6:ac:51:4e:5a:
d7:15:e7:8b:2c:73:8d:29:01:69:e7:9d:d4:fc:d4:80:57:15:
34:9d:03:19:78:26:1a:fc:51:55:2f:fc:4c:4c:ac:a1:d1:a9:
e4:ed:b1:08:77:0d:97:81:c6:b1:20:0f:1e:13:d2:e3:ea:c1:
50:ee:33:50:4a:04:2e:39:01:c7:dc:d0:1b:7c:81:30:03:1c:
0c:88:4e:42:6d:dc:d5:3d:11:b0:99:71:8d:97:a9:96:af:ea:
0e:45:70:01:f0:18:0f:0d:66:aa:7e:c6:d0:f4:e1:a9:84:ef:
14:50:b8:a9:75:53:ba:d8:7d:b4:89:3a:a3:11:27:8b:46:de:
fb:ec:3b:e3:d8:45:68:59:a9:45:c0:67:e5:2f:31:11:56:30:
57:b4:ee:3c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:53:37 2026 by rpki-client