Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9501476A84D111F184ADAAD8CE1D38B0.roa
File: 9501476A84D111F184ADAAD8CE1D38B0.roa (raw, json)
Hash identifier: edIC32PC51t+kI63LkfAzpA7X3Qi42ebMXkNk53n33E=
Subject key identifier: C5:97:4E:D5:73:0A:A5:3D:56:9F:AA:8B:DD:BA:AE:B5:47:39:05:3F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DA4E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9501476A84D111F184ADAAD8CE1D38B0.roa
Signing time: Tue 21 Jul 2026 06:58:31 +0000
ROA not before: Tue 21 Jul 2026 06:58:27 +0000
ROA not after: Tue 01 Sep 2026 06:58:27 +0000
asID: 984
IP address blocks: 154.193.62.0/24 maxlen: 24
154.193.84.0/24 maxlen: 24
154.193.85.0/24 maxlen: 24
154.196.133.0/24 maxlen: 24
154.196.161.0/24 maxlen: 24
154.200.155.0/24 maxlen: 24
154.202.136.0/24 maxlen: 24
154.213.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121422 (0x1da4e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 06:58:27 2026 GMT
Not After : Sep 1 06:58:27 2026 GMT
Subject: CN=6a5f1897-e4b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:86:ce:09:dc:02:1b:bd:ac:6e:07:aa:2a:07:
48:5f:c0:b9:8f:4d:50:6e:74:2a:6d:ff:e6:5c:e1:
0f:7b:44:a8:a0:71:eb:50:a8:63:a0:89:b6:db:78:
1b:0f:6f:0a:c5:1b:d2:21:de:f3:49:61:9c:e2:ad:
64:cb:bc:e8:b9:3d:3b:45:b6:c2:8f:73:67:c0:b9:
b6:ca:e5:a4:e4:f1:3c:37:fe:b0:d1:6e:d6:7a:8a:
2f:57:8f:dd:27:ae:1c:9d:d7:ac:ff:d1:4b:ae:6b:
1f:6d:dd:82:ce:c3:88:69:e5:57:2a:c9:45:82:74:
73:1a:bb:d7:ec:23:cd:9d:01:9b:03:4b:2a:08:f3:
da:30:31:3d:23:af:0f:75:d8:e4:84:cd:53:69:88:
29:6c:e6:85:bc:05:9b:6f:ee:f0:aa:15:19:ec:c3:
1c:3f:ae:0f:b3:e7:74:0e:d7:4b:b6:fa:37:48:97:
e5:64:be:50:ab:70:f7:6c:10:29:be:67:e4:17:91:
2e:a1:c6:8e:f6:e6:07:ac:5e:dc:9a:1b:20:4a:40:
b5:0b:66:e2:17:83:2d:dd:8a:45:f1:b9:5c:09:bc:
b6:99:3c:0a:b6:d7:54:6d:d7:c9:f6:94:b4:86:eb:
e0:4c:b4:eb:fa:22:b9:ed:07:b0:e6:c3:05:d3:1e:
e3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:97:4E:D5:73:0A:A5:3D:56:9F:AA:8B:DD:BA:AE:B5:47:39:05:3F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9501476A84D111F184ADAAD8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.62.0/24
154.193.84.0/23
154.196.133.0/24
154.196.161.0/24
154.200.155.0/24
154.202.136.0/24
154.213.220.0/24
Signature Algorithm: sha256WithRSAEncryption
89:58:7a:78:3d:6f:94:75:91:f1:3c:6b:a1:fa:e1:70:b4:0c:
60:50:f5:02:9b:a3:38:73:81:61:32:4e:35:0d:95:36:48:ef:
44:fb:41:c6:eb:ba:87:98:9e:74:b3:9a:47:61:43:47:51:8b:
d0:83:bb:ec:34:c6:c1:36:a2:9c:1a:13:6f:62:1a:c2:a2:fa:
5a:12:c2:fb:57:88:78:c5:29:e7:91:73:33:39:f4:ff:50:a6:
6e:50:ef:49:7b:ff:25:08:37:28:61:cc:20:4b:e7:bd:8a:83:
2c:35:55:02:e3:63:76:1c:0e:07:7b:91:08:94:f6:76:00:18:
94:d0:21:32:92:77:a6:49:b6:80:ac:6b:ad:13:ad:f7:22:33:
a9:f4:ee:c4:1d:b9:f1:34:96:70:43:fb:27:85:7a:13:e8:c6:
e2:34:7d:97:3b:70:25:33:85:e0:ad:37:11:8d:6f:aa:b0:98:
89:63:c9:01:a0:ad:1b:fd:5a:7a:65:a8:94:09:73:df:f1:2a:
4c:d5:08:ad:7c:c8:1b:c2:b2:f0:44:72:aa:29:ca:7b:b7:f8:
3a:04:74:4f:d7:60:88:a0:e8:c1:d4:9d:09:23:1b:58:c0:a3:
18:c0:dd:ad:d4:f3:38:9d:aa:c6:67:5a:29:8d:e6:f1:5b:72:
8c:df:83:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:15:40 2026 by rpki-client