Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7111C952854D11F1B764BFBACE1D38B0.roa
File: 7111C952854D11F1B764BFBACE1D38B0.roa (raw, json)
Hash identifier: b8SEaiTTX/XacD101BjcTbHrHCO2vCr22F53dL7obFA=
Subject key identifier: BC:17:B3:44:D2:67:D3:FC:CF:39:F6:9E:F6:E5:66:F2:25:44:B3:75
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DABC
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7111C952854D11F1B764BFBACE1D38B0.roa
Signing time: Tue 21 Jul 2026 21:45:08 +0000
ROA not before: Tue 21 Jul 2026 21:45:04 +0000
ROA not after: Wed 09 Sep 2026 21:45:04 +0000
asID: 401783
IP address blocks: 154.81.160.0/24 maxlen: 24
154.81.162.0/24 maxlen: 24
154.81.165.0/24 maxlen: 24
154.81.167.0/24 maxlen: 24
154.81.168.0/24 maxlen: 24
154.81.169.0/24 maxlen: 24
154.81.171.0/24 maxlen: 24
154.83.10.0/24 maxlen: 24
154.83.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121532 (0x1dabc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 21:45:04 2026 GMT
Not After : Sep 9 21:45:04 2026 GMT
Subject: CN=6a5fe864-6ec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:40:1d:34:52:7b:18:36:2d:bc:e8:29:c2:7e:
3d:da:6c:34:31:2d:5a:51:0b:2a:49:e8:a8:a8:93:
2c:48:69:4d:9e:53:5b:7c:6f:3b:37:30:bb:7f:a0:
c7:94:67:e3:ce:fe:af:a3:a8:f5:76:85:15:8b:d1:
d6:02:54:72:09:f6:b0:f3:2a:fb:45:9b:37:7c:68:
26:54:bc:21:6a:7a:36:24:0e:52:06:01:60:6f:77:
d4:84:38:2d:29:a8:16:f8:4c:62:76:03:0f:ff:ae:
12:a1:b7:a1:c6:3b:b2:e8:3d:a2:85:da:c2:ad:ab:
df:1b:5c:14:97:49:01:27:f2:cc:1f:54:1e:0f:c9:
64:26:ce:4d:98:51:ce:cf:d3:af:64:b9:68:aa:80:
2b:b6:9a:5d:51:bb:54:79:8a:4e:42:a1:0c:81:c1:
53:63:4a:cd:fb:c7:2b:f1:d0:76:a1:29:f9:78:fa:
70:f3:b8:db:d2:61:da:cf:99:72:cb:f7:8b:9f:28:
0d:4c:be:a3:83:4f:4b:4a:46:7f:5b:9a:b8:25:d5:
c2:a5:04:9f:ca:83:4d:ab:ba:67:0d:39:49:02:02:
31:de:8b:36:3d:7d:67:0f:c5:02:7a:82:59:37:66:
50:d6:db:ff:a9:09:91:c5:c6:54:69:cd:c5:8c:c8:
71:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:17:B3:44:D2:67:D3:FC:CF:39:F6:9E:F6:E5:66:F2:25:44:B3:75
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7111C952854D11F1B764BFBACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.81.160.0/24
154.81.162.0/24
154.81.165.0/24
154.81.167.0-154.81.169.255
154.81.171.0/24
154.83.10.0/24
154.83.24.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:b8:d6:26:fe:2a:43:e0:4d:d2:30:56:5b:97:f2:a0:a2:2a:
b6:c6:b5:ac:0d:18:a4:28:d3:49:e5:96:69:b2:80:7f:bf:d6:
8d:bb:5b:21:47:ec:3a:7e:30:6e:f3:3e:b3:20:11:e5:3b:94:
30:ed:e2:62:dd:fc:c6:aa:83:54:91:df:4a:9f:00:63:7f:87:
5f:fa:dc:05:e4:0e:c7:b2:27:c5:ec:e4:17:3d:12:9c:c5:ff:
39:e1:f3:dc:e9:dc:b4:57:cd:b7:0b:cf:60:56:c4:4b:e5:5f:
42:7e:a3:12:e4:2b:f3:19:84:c0:89:a8:3d:43:7a:c7:86:eb:
db:4d:df:f0:ec:ec:11:b6:70:ed:9a:b4:ba:b8:4b:48:d4:3b:
af:1c:04:27:22:37:dd:e6:e2:09:9b:22:d0:59:e2:ab:97:76:
15:1e:6d:87:a5:24:e5:3b:1d:7a:59:c1:4c:1a:7e:0a:35:30:
42:70:e1:d9:13:75:fa:95:5b:bd:c8:8a:cb:7a:bf:6d:3a:c3:
ea:0f:d1:6f:d9:3f:fc:26:75:28:f4:3d:5d:41:46:8e:60:32:
c3:42:2e:16:c5:1a:4d:59:5c:d4:7d:7b:cb:1d:12:9a:26:35:
b9:aa:3a:6b:42:49:eb:50:2c:91:4e:b3:6a:36:74:fe:63:75:
97:6a:9c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:02:12 2026 by rpki-client