Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B528750850411F195DD6006CF1D38B0.roa
File: 3B528750850411F195DD6006CF1D38B0.roa (raw, json)
Hash identifier: pVbBNnbhxXddtetclv9YWDYcPvjXdY7N+bvgyL9GkYQ=
Subject key identifier: C5:2A:AA:9B:03:0E:77:66:5C:AE:FB:ED:00:D8:83:12:C4:C6:FB:02
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DA96
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B528750850411F195DD6006CF1D38B0.roa
Signing time: Tue 21 Jul 2026 13:01:05 +0000
ROA not before: Tue 21 Jul 2026 13:01:01 +0000
ROA not after: Sun 16 Aug 2026 13:01:01 +0000
asID: 17497
IP address blocks: 154.196.156.0/22 maxlen: 24
154.196.172.0/22 maxlen: 24
154.196.216.0/21 maxlen: 24
154.196.216.0/24 maxlen: 24
154.196.217.0/24 maxlen: 24
154.196.218.0/24 maxlen: 24
154.196.219.0/24 maxlen: 24
154.196.220.0/24 maxlen: 24
154.196.221.0/24 maxlen: 24
154.196.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 08:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121494 (0x1da96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 13:01:01 2026 GMT
Not After : Aug 16 13:01:01 2026 GMT
Subject: CN=6a5f6d91-8c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:29:af:73:b8:d1:2e:ef:07:4f:e6:cc:8e:c5:
12:d7:b8:cc:83:0e:9c:73:3c:5f:59:6c:d1:a8:bc:
c8:a4:ca:95:18:31:72:c5:48:8b:3f:d0:37:1f:e0:
6f:fd:d7:d5:52:d3:6c:89:39:09:ad:c5:28:75:6d:
39:43:1b:c1:d5:01:6a:75:14:5f:74:97:dd:16:bc:
06:20:32:39:5e:ff:25:9b:19:e0:56:0e:11:0e:a8:
90:36:b1:d0:c7:e9:bd:29:58:80:90:38:9c:40:eb:
0b:41:30:5b:97:50:da:4e:21:f3:bd:39:63:43:65:
32:1f:13:02:76:8c:c5:63:46:90:fd:92:7c:16:5a:
ef:9e:09:1a:03:5d:eb:42:40:15:19:7f:f0:b4:3a:
a9:4f:35:19:1f:ac:18:5d:20:b7:c2:82:eb:85:e4:
3c:2f:4d:6d:8e:b2:bc:71:9c:51:bc:2e:14:bb:67:
fd:41:6c:96:c4:95:c9:3c:84:75:be:bf:d8:7d:55:
64:f8:cb:28:7a:71:6f:c9:b6:f9:88:e4:25:20:4d:
e4:42:d3:94:34:1d:72:29:bc:43:57:c5:bf:30:5a:
29:dd:95:4d:e2:d0:a7:c2:8b:38:45:ac:03:ca:6b:
45:48:40:ab:8d:85:64:48:5a:64:58:7d:9e:7c:2e:
a6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:2A:AA:9B:03:0E:77:66:5C:AE:FB:ED:00:D8:83:12:C4:C6:FB:02
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3B528750850411F195DD6006CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.156.0/22
154.196.172.0/22
154.196.216.0/21
Signature Algorithm: sha256WithRSAEncryption
30:bf:4e:7a:34:b2:3f:68:24:14:86:18:b6:80:e0:72:d4:09:
8d:41:27:f8:37:ad:04:60:00:87:10:43:67:9b:3f:6e:0f:c4:
73:b3:1d:58:7b:f1:66:92:e8:f8:15:2d:7e:ec:2f:c8:40:4f:
65:61:14:dc:4d:27:bd:d8:8e:63:fb:98:7a:d7:0c:2a:6a:08:
bf:e0:fd:d8:13:8d:01:80:65:2f:8f:69:a9:26:70:b0:5b:b6:
50:47:02:06:6e:7a:81:9f:c2:58:d5:7b:67:e1:db:44:0a:87:
16:0f:4e:70:c0:cd:cb:10:d9:50:c5:35:28:b7:ec:ef:d7:86:
fc:14:2d:0a:ac:78:70:40:9d:19:51:f1:75:1a:47:eb:97:c1:
d3:99:01:00:7c:67:1c:ca:b7:91:92:e0:af:25:83:97:bd:f4:
0b:f9:68:31:0e:7f:3e:1c:a3:ec:9c:95:ad:5f:f8:d6:55:2a:
da:4e:8a:1f:28:e1:32:2a:b1:2d:9c:f6:c9:03:c2:0a:b1:7a:
16:d4:ca:7a:f4:d7:d9:d6:42:16:c8:ab:6f:f9:59:5e:a3:ea:
df:05:fa:07:de:c7:04:98:bb:f5:f2:27:61:78:19:58:54:e2:
41:9f:98:e7:50:c5:f7:44:8b:3a:87:cf:5a:0e:4c:17:06:74:
f5:a3:c7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:55:59 2026 by rpki-client