Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/366704B2866911F192BF2A11CF1D38B0.roa
File: 366704B2866911F192BF2A11CF1D38B0.roa (raw, json)
Hash identifier: SZE/Ec0Cv4GE+K4FVzWKVdl1c3zLVOy2T28cHoxGitw=
Subject key identifier: 5E:A2:92:CF:8C:24:1A:E1:41:7E:0D:28:56:61:32:C0:5F:D0:D1:E9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DB11
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/366704B2866911F192BF2A11CF1D38B0.roa
Signing time: Thu 23 Jul 2026 07:36:27 +0000
ROA not before: Thu 23 Jul 2026 07:36:23 +0000
ROA not after: Sun 30 Aug 2026 07:36:23 +0000
asID: 401696
IP address blocks: 154.201.64.0/19 maxlen: 24
154.201.94.0/23 maxlen: 24
154.201.94.0/24 maxlen: 24
154.201.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121617 (0x1db11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 23 07:36:23 2026 GMT
Not After : Aug 30 07:36:23 2026 GMT
Subject: CN=6a61c47b-8bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:36:28:88:e9:7d:48:64:49:3f:8e:19:11:db:
bd:f6:22:a5:25:c5:29:59:79:97:b2:83:bd:17:44:
5d:75:98:50:77:8d:78:54:30:23:fb:64:98:f2:cd:
e6:bd:e1:ab:68:48:d0:2a:b0:f6:48:b8:92:c7:6b:
6d:51:51:66:f8:a2:61:52:92:4e:2a:cf:34:95:7f:
a6:a3:d6:58:dc:b5:3f:41:bb:33:f8:b8:7d:ac:1f:
83:7c:5a:e8:a4:b6:6e:49:90:c0:ff:e0:22:ab:41:
22:db:16:72:50:14:27:23:72:2f:0e:b3:31:d8:c0:
7e:24:7e:32:91:ec:5f:e2:14:df:18:b2:c2:42:41:
be:a7:ec:f2:5e:a3:f9:58:60:46:1c:23:cc:fa:a6:
8e:45:74:20:ae:db:86:b2:02:61:6d:07:e4:8c:4d:
e7:fc:00:06:37:b8:60:3f:14:a6:ff:36:74:ac:1d:
cc:85:07:c1:36:17:20:e7:0e:ce:da:6f:8b:c9:2b:
2e:24:fc:06:6c:5d:31:2e:31:60:48:16:f2:02:99:
11:14:29:6d:90:69:48:10:de:65:cc:c2:a1:93:1e:
6f:91:9a:58:2c:f4:01:73:31:ab:c6:68:27:12:6a:
fa:03:c4:70:6f:d2:ec:4b:c3:b5:64:5a:d4:dd:be:
c7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:A2:92:CF:8C:24:1A:E1:41:7E:0D:28:56:61:32:C0:5F:D0:D1:E9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/366704B2866911F192BF2A11CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
54:ad:a4:0e:43:48:01:99:08:56:01:2b:fc:1e:fc:04:1b:ed:
5a:ee:23:de:83:f2:ce:3c:38:86:db:9c:49:2a:09:b7:bc:ba:
57:e6:14:fd:8a:0e:86:e0:21:69:ca:95:e3:8b:bb:51:98:9f:
f9:06:ed:b4:4b:6a:6b:a2:a7:94:69:f4:ad:3e:50:05:8d:a3:
57:e5:46:4f:51:c4:f7:ad:b1:b8:d4:37:2d:2c:47:da:67:3f:
a1:d0:41:13:64:f2:99:9d:75:cd:25:4d:4a:58:2e:46:b6:db:
cc:d6:51:b5:1a:1a:1c:6e:4b:39:42:06:3e:d1:9d:44:bc:76:
63:5c:20:a1:30:29:0c:6a:19:80:dc:11:db:60:8e:68:6e:b7:
cc:42:f3:85:52:84:3f:7e:85:59:28:67:2f:04:1a:96:82:09:
bc:e7:f7:84:b4:cb:d2:2d:6d:9b:67:d5:3a:75:94:e7:54:51:
7d:18:a9:cb:dd:a4:64:de:57:0c:fc:58:09:80:ec:5e:4e:a0:
28:e6:70:18:24:92:80:14:7a:ab:6c:98:eb:e6:1f:c5:c0:0d:
52:5b:65:c0:6d:e3:a1:69:a7:1e:6e:ea:f7:5b:cb:b2:ca:93:
85:b6:68:7b:44:3a:1f:c0:5b:64:ea:d6:2e:25:1b:a4:29:11:
65:fa:b2:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:34:30 2026 by rpki-client