Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C780186850A11F18622A7ABCE1D38B0.roa
File: 3C780186850A11F18622A7ABCE1D38B0.roa (raw, json)
Hash identifier: WixsqTmYU1wXLVbaU5OSLgOfDMgtimaTM9AqFbbuLI0=
Subject key identifier: 5D:FF:C5:1A:76:87:9F:9C:04:99:D5:47:56:9A:9E:39:6E:C4:5B:1A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DAA6
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C780186850A11F18622A7ABCE1D38B0.roa
Signing time: Tue 21 Jul 2026 13:44:04 +0000
ROA not before: Tue 21 Jul 2026 13:44:00 +0000
ROA not after: Wed 09 Sep 2026 13:44:00 +0000
asID: 32043
IP address blocks: 154.200.55.0/24 maxlen: 24
154.200.56.0/24 maxlen: 24
154.200.57.0/24 maxlen: 24
154.200.58.0/24 maxlen: 24
154.200.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121510 (0x1daa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 13:44:00 2026 GMT
Not After : Sep 9 13:44:00 2026 GMT
Subject: CN=6a5f77a4-ca90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:94:27:55:e8:bc:6e:32:3a:d8:8e:b6:7e:d8:
f6:c7:9f:00:19:0a:fa:e6:5c:c0:2a:b9:58:aa:d9:
48:53:a5:46:93:f7:54:c0:f3:2f:92:15:c3:f0:70:
a8:d6:5c:3e:b7:10:10:c5:a5:8a:19:82:6c:ca:fe:
e5:c2:ae:8d:0f:f8:b9:83:60:d3:46:aa:03:77:6d:
f5:ec:55:7e:22:b7:c5:1b:20:1d:9a:36:65:d1:aa:
b1:32:12:ad:d7:12:fb:47:c6:6e:63:f6:d1:d9:2b:
6c:69:fa:54:a0:5a:0b:09:3d:a3:30:8d:51:07:cc:
1d:cf:02:1c:cd:e8:d4:d9:09:5a:01:20:b2:f7:f8:
51:6c:f0:45:72:27:20:c1:06:65:7f:f1:d6:26:d4:
c9:ce:db:a1:1a:5e:66:97:3a:c7:b3:1e:87:9f:89:
2d:59:09:3d:21:be:c2:a0:99:dd:e0:94:08:2e:79:
c7:ae:b4:c1:e4:19:93:f8:9a:d6:fa:8d:27:14:49:
3d:c9:cc:25:95:22:48:5c:2f:2f:6c:8b:e0:27:35:
b5:55:4f:ec:87:49:12:f8:57:42:d3:f5:c4:43:76:
56:69:14:72:16:f4:a1:88:c9:73:ba:68:35:a4:41:
f6:06:86:40:d4:db:21:22:a9:c2:cc:2a:e0:df:96:
ea:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:FF:C5:1A:76:87:9F:9C:04:99:D5:47:56:9A:9E:39:6E:C4:5B:1A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3C780186850A11F18622A7ABCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.200.55.0-154.200.59.255
Signature Algorithm: sha256WithRSAEncryption
63:27:a5:06:02:04:45:a4:73:0a:51:c2:36:68:37:7b:f5:bd:
e7:f7:38:ed:38:d3:22:b3:b0:34:07:a2:fc:f8:91:f0:7c:f6:
1a:3b:fb:25:92:53:d4:03:ac:f7:1a:9d:8c:2c:33:1a:ca:11:
84:ad:d0:33:3b:54:5b:e5:71:a8:93:62:4a:81:43:97:83:f9:
21:5e:ed:1a:12:ba:04:5c:5f:46:8a:44:9c:1e:24:9d:d5:a1:
5d:ea:c7:12:c2:d3:db:0c:30:8f:4e:4e:24:cb:8d:1e:b8:e9:
34:8e:34:f7:77:4a:27:e2:5f:12:d1:59:74:a0:85:9e:4c:94:
da:14:2a:4e:fa:df:d8:40:7f:2a:39:f0:67:46:be:69:bd:04:
e4:f8:e3:b7:56:ba:66:eb:67:3d:15:b7:88:2d:33:82:d8:94:
d8:74:93:d7:3b:41:4b:df:16:8e:8f:fd:f0:40:85:44:7d:e7:
ba:5e:25:61:d6:64:74:25:0a:c8:ce:17:5f:c3:2f:50:96:d5:
67:ab:ba:01:74:0c:03:4a:27:01:89:e3:54:58:e4:6c:78:9c:
79:86:02:91:76:b6:c4:c5:34:01:6b:57:bb:4b:cf:a1:c4:b2:
c1:c0:6d:01:80:fe:5e:4a:bd:40:68:95:f5:88:cb:7c:c3:87:
29:0d:05:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:46:18 2026 by rpki-client