Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3D11126845C11F1A0D9F302CF1D38B0.roa
File: C3D11126845C11F1A0D9F302CF1D38B0.roa (raw, json)
Hash identifier: uXOjxnh71NxDu6sq4Sr0DBTb1qNOjJMNW27cgvlBXMs=
Subject key identifier: 63:8F:1D:3A:10:05:9E:CB:FD:9A:AB:F4:F0:BB:33:54:20:FD:3E:52
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DA42
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3D11126845C11F1A0D9F302CF1D38B0.roa
Signing time: Mon 20 Jul 2026 17:02:18 +0000
ROA not before: Mon 20 Jul 2026 17:02:15 +0000
ROA not after: Wed 02 Sep 2026 17:02:15 +0000
asID: 63023
IP address blocks: 154.90.135.0/24 maxlen: 24
154.94.1.0/24 maxlen: 24
154.94.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 08:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121410 (0x1da42)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 20 17:02:15 2026 GMT
Not After : Sep 2 17:02:15 2026 GMT
Subject: CN=6a5e549a-7222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d7:61:3d:34:1b:1b:09:e0:da:4c:ff:d8:2e:
63:13:90:3e:2d:30:41:84:60:87:b8:62:e5:1b:72:
ff:f6:26:5c:13:91:4a:27:77:c2:8c:da:48:f9:d2:
5e:35:7f:15:9b:47:68:2a:6a:f5:35:65:b8:33:14:
7b:2a:3b:12:6e:d8:2c:f1:ad:49:65:82:27:98:6d:
ba:ba:14:a6:42:fc:88:d2:9d:8d:9b:e2:6a:b7:39:
d8:14:29:77:3c:42:7d:bc:58:0d:ba:a7:27:cc:eb:
d1:e4:3f:a0:a6:27:ca:5e:de:c8:74:02:7d:48:61:
14:1b:32:a9:c6:21:96:26:ff:85:e4:98:4b:fa:2c:
d3:f4:e4:e4:5f:f1:27:8b:9f:9e:66:5f:45:9a:40:
78:8c:4b:63:86:42:91:9d:11:e4:2d:25:e4:c1:ba:
a8:1a:d5:26:9c:39:be:92:26:41:f8:21:1a:fb:c3:
97:2d:9c:ee:1d:72:5a:9d:37:12:7c:a7:af:4b:6f:
88:ff:29:17:72:a8:ce:98:a2:83:f6:eb:dc:b7:67:
e4:cf:71:a4:cb:21:6d:ca:69:c9:44:95:ee:e7:45:
9f:06:f3:f7:da:85:92:82:dc:45:d7:28:d3:1c:a5:
37:cc:da:c4:12:1b:70:5a:be:16:3a:c8:b2:ae:b2:
3a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:8F:1D:3A:10:05:9E:CB:FD:9A:AB:F4:F0:BB:33:54:20:FD:3E:52
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C3D11126845C11F1A0D9F302CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.135.0/24
154.94.1.0/24
154.94.38.0/24
Signature Algorithm: sha256WithRSAEncryption
11:e7:c5:3c:2b:3f:48:f5:26:c3:24:13:6e:df:05:1b:a0:cb:
64:c0:62:b7:ce:c3:df:fc:fa:92:57:81:cd:a3:06:23:f3:d6:
4e:8f:37:99:01:11:65:e8:a2:39:f8:3f:94:1b:d2:e1:6c:a4:
39:21:0b:10:c3:72:2b:d2:69:8f:cb:98:64:25:fb:61:09:33:
39:0b:1e:c9:d9:64:07:10:e3:32:7b:16:c4:a0:7d:97:8e:8c:
f7:5e:79:eb:e4:4d:39:3b:84:e4:6d:81:b4:a7:86:0c:42:6b:
31:6d:5a:22:1c:3e:94:b5:a2:ab:1b:0c:ed:4a:9d:35:72:f0:
76:4e:8c:d3:cb:dc:ab:f0:b0:7c:ba:75:0d:7a:f0:32:15:8b:
14:12:9a:66:36:3b:0b:a0:a6:ce:e9:13:68:09:aa:1d:a6:65:
b3:a0:b5:01:9f:0f:78:ce:74:60:f3:ea:90:83:51:b3:f2:83:
fb:ad:1d:35:20:b8:14:1c:99:1c:95:9a:01:23:38:55:38:91:
7d:76:ba:eb:94:5a:61:25:46:2f:a7:de:6a:6c:53:34:a7:83:
b8:1d:f1:4f:95:f7:3d:ad:cf:8c:87:7f:b4:fe:01:7e:fb:c5:
49:3d:7c:8b:07:e9:38:a8:70:d2:9c:f0:bf:f0:06:28:b9:e0:
79:54:38:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:40:52 2026 by rpki-client