Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73AF16FC841B11F1BC7664FBCE1D38B0.roa
File: 73AF16FC841B11F1BC7664FBCE1D38B0.roa (raw, json)
Hash identifier: jM0G/k5kku3aI7gYrxB9tog5Y0UGvKYMzjRcd3TZfCA=
Subject key identifier: 14:80:06:46:59:BF:13:00:8E:DE:37:44:21:50:E4:9C:61:8E:47:E5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D9D4
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73AF16FC841B11F1BC7664FBCE1D38B0.roa
Signing time: Mon 20 Jul 2026 09:14:47 +0000
ROA not before: Mon 20 Jul 2026 09:14:43 +0000
ROA not after: Sun 16 Aug 2026 09:14:43 +0000
asID: 17497
IP address blocks: 154.196.135.0/24 maxlen: 24
154.196.140.0/23 maxlen: 24
154.196.140.0/24 maxlen: 24
154.196.141.0/24 maxlen: 24
154.196.164.0/22 maxlen: 24
154.196.164.0/24 maxlen: 24
154.196.165.0/24 maxlen: 24
154.196.166.0/24 maxlen: 24
154.196.167.0/24 maxlen: 24
154.196.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121300 (0x1d9d4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 20 09:14:43 2026 GMT
Not After : Aug 16 09:14:43 2026 GMT
Subject: CN=6a5de707-8a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:10:59:ed:c2:c6:23:7c:db:7f:e3:0d:4e:48:
88:84:ab:09:18:4c:33:31:7c:68:e5:93:2f:77:01:
a5:97:ec:3b:e8:bd:d4:36:21:df:e6:3a:4e:ef:6c:
a3:80:30:dd:b1:98:da:98:bb:d7:c0:fe:97:5b:b7:
12:a3:cd:66:88:6d:79:97:ca:b9:e7:d8:cb:b0:6d:
76:d0:84:de:3e:d7:59:96:eb:22:75:75:81:20:22:
ca:eb:05:f1:a5:f0:8c:e2:a1:73:4d:94:1b:1b:67:
1a:83:87:51:77:56:c9:1f:a2:da:16:38:ad:e7:cf:
a0:33:c6:39:8a:5d:3d:92:be:5d:89:a6:d7:94:ef:
dc:b8:68:ec:e5:6b:4e:30:1a:4e:06:00:45:26:60:
27:95:e8:c0:fa:e9:f5:a3:73:64:66:6a:6b:b5:60:
92:b1:08:65:36:b3:79:10:37:98:ef:6c:41:3c:f1:
3e:49:fd:5a:6d:dd:5b:b4:c4:a4:50:6d:66:65:03:
5a:ff:74:06:58:0a:f0:79:b8:79:59:62:72:d5:a7:
12:4a:8f:e1:3f:54:7f:2e:4f:4f:cb:60:c1:6f:fe:
84:ac:82:24:51:d0:90:4b:32:4e:78:b8:9e:6d:0c:
e8:91:1b:00:68:19:42:eb:40:44:7e:ca:31:98:83:
c5:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:80:06:46:59:BF:13:00:8E:DE:37:44:21:50:E4:9C:61:8E:47:E5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/73AF16FC841B11F1BC7664FBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.135.0/24
154.196.140.0/23
154.196.164.0/22
154.196.223.0/24
Signature Algorithm: sha256WithRSAEncryption
70:f8:8f:f6:62:f8:57:70:0a:24:5e:83:00:f8:71:5b:e1:c7:
ce:00:af:5a:2b:cf:90:0e:6b:58:94:59:78:12:05:c2:93:11:
14:b5:b2:98:27:45:38:d4:6c:a0:94:a6:d3:13:08:a3:65:e0:
fa:1d:d9:c9:ec:c4:61:67:75:b2:68:02:fd:ab:51:51:51:8a:
1a:79:8d:61:66:67:2c:b4:8a:03:58:4f:69:59:03:26:f8:7a:
43:e3:29:a7:c4:3c:4d:c2:f3:db:a1:0b:16:20:1b:c7:b6:cf:
69:d7:28:94:79:c2:db:3a:03:b4:5b:4f:ee:35:b8:07:18:0c:
8d:07:c5:43:af:af:ac:db:a1:e4:0a:75:06:79:7b:b0:09:35:
e9:c8:25:a8:aa:2e:fb:40:1f:f7:50:fe:e1:a2:01:aa:c6:37:
61:7e:58:9d:54:c5:2b:47:a3:5a:e7:7b:42:78:59:18:3d:54:
e4:23:d6:90:37:a3:21:e3:0e:9b:a4:8c:05:90:29:3c:24:0b:
f7:b4:08:2c:92:dc:d1:00:0c:d5:74:a4:ae:db:e2:ac:8c:cf:
c9:cf:a6:e6:b7:36:fe:07:43:f1:79:ae:12:cc:23:64:c6:ba:
64:b6:f9:aa:b8:da:88:75:16:20:17:95:f9:c1:20:60:d6:33:
39:74:85:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:08:09 2026 by rpki-client