Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0766C188843011F1B09699F8CE1D38B0.roa
File: 0766C188843011F1B09699F8CE1D38B0.roa (raw, json)
Hash identifier: cYBrFK+UjHyne2cBSDtJAQtTvWr7qb1ijMT+CDeQ91o=
Subject key identifier: 7C:D6:F6:A8:28:A9:A9:CC:50:6A:04:E2:00:B9:CC:E9:95:65:75:8D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DA18
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0766C188843011F1B09699F8CE1D38B0.roa
Signing time: Mon 20 Jul 2026 11:42:04 +0000
ROA not before: Mon 20 Jul 2026 11:42:00 +0000
ROA not after: Thu 27 Aug 2026 11:42:00 +0000
asID: 63139
IP address blocks: 154.81.1.0/24 maxlen: 24
154.94.64.0/24 maxlen: 24
154.94.65.0/24 maxlen: 24
154.94.66.0/23 maxlen: 24
154.94.79.0/24 maxlen: 24
154.94.80.0/24 maxlen: 24
154.94.81.0/24 maxlen: 24
154.94.83.0/24 maxlen: 24
154.94.84.0/24 maxlen: 24
154.94.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121368 (0x1da18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 20 11:42:00 2026 GMT
Not After : Aug 27 11:42:00 2026 GMT
Subject: CN=6a5e098c-e7d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0f:aa:b7:35:d1:45:34:35:45:a0:3b:f7:fa:
c9:6d:bd:56:4f:fd:ea:f9:62:f6:d5:18:cd:43:06:
81:9c:11:ab:98:63:5a:a8:3e:81:db:63:b8:09:87:
e0:6f:c3:32:a7:90:b8:d3:9e:8d:a7:f7:15:7c:36:
c2:e5:ea:38:65:c3:a8:3c:e1:52:6d:93:67:b2:ad:
8c:01:ef:df:10:58:c1:08:32:3b:ba:a8:2b:74:5a:
06:73:2b:db:a0:4a:7b:70:fb:40:e0:d4:3c:36:6a:
1a:94:ac:f9:e7:fb:24:78:0a:75:84:27:88:81:e3:
9f:a9:99:24:ae:c7:7a:ae:3d:ab:94:f6:e4:a2:09:
28:84:c0:91:ae:e5:8c:14:04:b0:62:2c:5c:d9:43:
2e:58:7b:15:2f:99:ef:b5:75:40:be:87:dd:78:67:
43:18:13:bb:4e:12:1d:be:23:90:bd:1e:16:7c:2a:
0e:72:93:24:ba:1c:30:a5:2c:3b:f3:71:8e:6c:46:
63:76:20:be:72:89:0c:55:0c:d0:01:80:8f:0f:db:
e0:6b:c9:63:2f:00:84:dd:e1:96:c1:12:16:dd:30:
e8:43:3c:d4:fb:6d:3b:29:4e:a6:ad:e6:bc:94:c6:
11:ac:a9:02:d1:c5:ff:d6:da:cb:f5:26:b2:45:42:
73:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D6:F6:A8:28:A9:A9:CC:50:6A:04:E2:00:B9:CC:E9:95:65:75:8D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/0766C188843011F1B09699F8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.1.0/24
154.94.64.0/22
154.94.79.0-154.94.81.255
154.94.83.0-154.94.85.255
Signature Algorithm: sha256WithRSAEncryption
16:da:10:0b:39:39:91:1d:5e:48:92:41:04:02:7c:fa:df:c0:
62:b9:17:39:ff:fe:31:4d:0a:54:3d:bf:9b:f0:04:96:e0:bc:
67:59:1e:e7:22:93:f5:1d:54:96:2b:b9:d7:1c:68:18:8d:66:
bf:b6:34:2c:05:33:fa:fb:54:42:2c:16:e0:03:2b:52:46:3f:
22:65:92:79:d2:4f:5c:e3:31:26:05:ea:ad:18:80:6e:47:ab:
2b:48:82:be:9e:4f:1b:e4:9b:b6:8e:d7:b1:fc:9d:ab:7c:cb:
0d:8a:b1:f4:14:02:1d:70:9a:69:f6:15:c9:dd:14:2b:c6:1a:
44:02:4d:f2:3e:9c:fb:a8:b9:86:b3:a8:6c:c5:90:ef:c8:79:
a1:9a:da:6b:59:83:6a:09:17:61:40:71:e7:13:70:1d:f1:6a:
84:fc:7f:b8:91:db:c0:55:a9:fe:ee:27:ee:34:1a:1f:c4:ec:
61:76:dc:c9:ee:5c:ef:1c:93:eb:0e:2a:89:f5:23:67:fe:2f:
59:d2:5a:23:b2:b7:88:98:93:23:65:9e:fa:8f:e7:55:2e:97:
af:d0:73:75:07:cf:d6:1b:db:db:85:66:81:06:a8:8e:c9:b5:
72:85:c6:92:b6:c8:59:6a:46:40:6d:dd:ef:97:2b:64:a0:15:
25:b6:54:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:11:38 2026 by rpki-client