Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7404FF82843311F1B7130C0ECF1D38B0.roa
File: 7404FF82843311F1B7130C0ECF1D38B0.roa (raw, json)
Hash identifier: HceYFRJJ01r0ikR+Q5fcsXptF33ZGeNTJRa4B7KewSQ=
Subject key identifier: DC:66:44:1D:EE:2D:C8:C5:E1:00:D2:1E:07:F9:86:2B:7D:C1:77:EC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DA24
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7404FF82843311F1B7130C0ECF1D38B0.roa
Signing time: Mon 20 Jul 2026 12:06:35 +0000
ROA not before: Mon 20 Jul 2026 12:06:31 +0000
ROA not after: Thu 27 Aug 2026 12:06:31 +0000
asID: 63139
IP address blocks: 154.93.64.0/24 maxlen: 24
154.93.65.0/24 maxlen: 24
154.93.66.0/24 maxlen: 24
154.94.91.0/24 maxlen: 24
154.94.122.0/24 maxlen: 24
154.94.123.0/24 maxlen: 24
154.94.124.0/24 maxlen: 24
154.94.125.0/24 maxlen: 24
154.94.126.0/24 maxlen: 24
154.94.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121380 (0x1da24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 20 12:06:31 2026 GMT
Not After : Aug 27 12:06:31 2026 GMT
Subject: CN=6a5e0f4b-f834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ed:d3:9f:2e:ca:c7:7f:53:34:2d:b3:ce:ab:
3e:3c:d3:e4:52:61:f0:1e:b0:4b:2c:aa:1b:7c:08:
96:d4:bf:e3:00:92:f5:e5:75:66:6c:ed:d4:a3:f4:
8c:54:be:59:2f:3f:16:d3:66:72:ad:c2:de:af:7c:
86:19:a7:0c:df:03:d6:c5:75:9e:c4:1d:62:1b:76:
ba:b0:e3:96:21:82:45:78:25:80:dd:d0:6b:1f:a8:
95:d3:c2:79:b2:47:be:5e:7d:72:05:b0:2e:ed:ed:
36:7b:ee:08:1f:0f:1d:21:c0:d7:5b:09:b0:1c:f3:
67:aa:da:bf:1b:54:a8:b1:53:2e:0e:af:4a:7a:53:
3e:b1:e3:45:d8:35:ea:50:c3:2d:55:20:c1:94:93:
d1:39:30:f8:67:99:5c:94:4f:70:96:a4:59:bf:7a:
a6:d4:b1:6c:2d:18:16:0c:b2:e4:2a:ff:c1:2c:b9:
8d:cc:2c:43:06:48:d4:97:95:79:8b:3f:55:e3:3a:
a8:97:1c:fd:61:30:05:da:89:29:78:09:1c:0c:0c:
a8:10:89:93:19:03:2e:6f:7a:74:70:70:5f:28:19:
35:8c:93:5b:80:90:67:b9:47:14:07:a3:52:95:6d:
24:18:d6:b4:21:5a:5e:96:9a:74:29:76:5f:88:df:
13:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:66:44:1D:EE:2D:C8:C5:E1:00:D2:1E:07:F9:86:2B:7D:C1:77:EC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/7404FF82843311F1B7130C0ECF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.64.0-154.93.66.255
154.94.91.0/24
154.94.122.0-154.94.127.255
Signature Algorithm: sha256WithRSAEncryption
99:41:ad:21:d1:1a:18:10:cd:ca:12:31:92:fa:20:77:7e:99:
fa:2f:6b:f4:b5:a3:f6:7b:c2:84:02:42:55:82:6c:01:a2:62:
a2:41:b7:ac:75:60:04:ff:8a:6f:bf:af:a5:c3:56:0b:b8:d1:
b5:b2:e6:b4:03:5b:57:e5:c3:96:87:c9:30:ba:11:c7:20:53:
c3:dd:c2:22:f3:1f:c4:0b:5c:72:40:6d:ed:79:d5:ab:8a:8a:
b5:ee:38:1e:d2:39:f7:0a:9f:02:c0:b0:ec:54:6e:59:27:ef:
c5:c0:82:60:92:4d:55:49:f0:f5:75:6e:ad:24:61:35:7a:08:
ec:76:bf:be:16:33:23:64:96:ea:42:5d:24:37:fb:3d:b0:40:
b3:b8:76:5b:34:9f:23:29:f4:e6:62:db:4f:84:08:d7:78:89:
e5:a6:72:ba:02:b6:ee:3a:43:3f:50:68:7c:85:30:ab:9f:c1:
f7:ed:69:dc:0f:07:e5:51:d6:65:43:cd:45:90:c9:e6:b4:8a:
98:8f:be:49:81:fe:d8:6f:2e:cd:0c:17:46:2a:b9:1c:eb:86:
22:9e:b7:ab:8d:10:35:a6:a2:f9:e8:e3:c7:08:e1:da:8e:b0:
d5:85:08:20:9a:c5:e6:a5:f8:68:e2:36:31:84:34:59:b0:ae:
f5:53:79:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:15:44 2026 by rpki-client