Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/273DB632841D11F1A71E6407CF1D38B0.roa
File: 273DB632841D11F1A71E6407CF1D38B0.roa (raw, json)
Hash identifier: K/Pu5wrTFvXLPqrksfvg0sUNjkGOdZwhjcq1QqNDIh4=
Subject key identifier: F1:1C:24:06:CC:21:70:99:37:A2:50:8D:6E:68:A3:F8:39:AF:76:78
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D9D9
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/273DB632841D11F1A71E6407CF1D38B0.roa
Signing time: Mon 20 Jul 2026 09:26:57 +0000
ROA not before: Mon 20 Jul 2026 09:26:53 +0000
ROA not after: Thu 13 Aug 2026 09:26:53 +0000
asID: 17497
IP address blocks: 154.217.192.0/20 maxlen: 24
154.222.140.0/22 maxlen: 24
154.222.140.0/24 maxlen: 24
154.222.141.0/24 maxlen: 24
154.222.142.0/24 maxlen: 24
154.222.143.0/24 maxlen: 24
154.222.148.0/24 maxlen: 24
154.222.149.0/24 maxlen: 24
154.222.150.0/24 maxlen: 24
154.222.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 08:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121305 (0x1d9d9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 20 09:26:53 2026 GMT
Not After : Aug 13 09:26:53 2026 GMT
Subject: CN=6a5de9e1-5d02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:94:26:18:7a:6d:69:01:27:74:73:b6:f8:d0:
0c:7d:db:13:72:0a:a5:1c:68:65:4a:4a:29:53:fb:
9d:2a:14:32:3a:33:2d:8c:54:9a:64:7d:fc:42:ca:
b3:f4:0e:89:9e:fa:5a:3f:86:b7:51:2e:66:61:8a:
57:52:01:18:be:d7:fa:cf:6e:d1:d7:91:89:83:3d:
a8:2b:84:8a:74:2e:ed:95:0f:51:b9:e2:6a:cc:e1:
3e:01:a2:83:84:8a:bb:86:34:2a:03:ce:0e:38:b2:
17:79:66:6b:df:c9:23:a7:a4:11:44:27:a6:14:64:
3f:e0:66:49:7f:02:26:e0:78:01:b1:74:80:d4:50:
00:a7:b3:f3:bf:4c:a8:b8:17:f6:7a:80:3c:7d:55:
2e:73:13:33:f3:5e:b1:fc:35:52:8f:1c:19:4c:c7:
cb:c5:23:eb:03:07:31:3b:3a:9b:a5:c8:f0:36:c3:
fe:0c:ae:ce:b9:ed:b0:a8:89:cd:7e:26:77:0c:d4:
0c:c4:5b:8c:92:39:b2:e6:31:29:d3:91:a5:9a:85:
69:2f:de:26:f5:dd:b7:fa:65:85:9c:c3:5b:86:50:
e5:60:e2:94:64:74:46:bd:f5:79:da:f3:62:df:cf:
f2:98:ca:69:4b:64:2b:fc:2c:e2:d1:72:83:38:14:
cb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:1C:24:06:CC:21:70:99:37:A2:50:8D:6E:68:A3:F8:39:AF:76:78
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/273DB632841D11F1A71E6407CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.192.0/20
154.222.140.0/22
154.222.148.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:30:c3:78:cf:8c:f4:50:f0:89:2e:97:f6:7d:d1:3c:88:bc:
39:eb:65:b9:94:f9:b8:28:cc:df:ef:b3:ba:71:cb:3e:d9:4b:
6b:d2:a8:30:55:7e:d2:d3:d7:a0:d0:81:89:aa:49:a9:a7:12:
07:1e:ac:d3:03:56:d3:14:e5:f7:c9:08:51:63:82:b3:a5:59:
eb:ce:15:99:6e:3a:c1:f4:32:0f:2e:e6:a8:58:fb:7c:16:7a:
8e:0c:52:59:fd:c5:34:e6:fe:9c:9d:55:24:e6:16:87:53:7d:
06:42:6d:2a:32:3e:18:49:64:e7:6a:8c:f4:4d:c5:75:df:9f:
65:5a:2f:ab:17:86:ec:55:24:12:be:6c:72:e8:e1:13:c4:b2:
be:7a:cd:11:08:6b:43:fe:2d:34:33:9d:1f:98:18:73:c1:ab:
8a:ee:75:f7:c8:d6:cd:39:e0:65:b2:da:56:b8:5a:fa:6e:ef:
63:26:eb:05:39:d9:d9:42:cb:7c:97:e8:a9:59:7a:76:4d:e1:
a9:9e:3f:b2:79:cc:17:6c:43:03:d9:67:e6:b1:5c:56:7f:4d:
ca:6a:5c:8c:fd:8a:df:0f:ea:5e:3e:fb:cd:25:87:7c:eb:0c:
e6:c5:37:9c:00:e2:11:58:72:79:32:1a:68:81:11:9f:6a:99:
27:2b:9a:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:40:46 2026 by rpki-client