Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE75F3F4854A11F1AF120AAECE1D38B0.roa
File: DE75F3F4854A11F1AF120AAECE1D38B0.roa (raw, json)
Hash identifier: C2nZSBwJ0jZG9qLnK3krA5Vve10f5Xm1ZSW0kAUp2aE=
Subject key identifier: AA:86:23:2A:81:71:B7:17:BF:37:97:6B:C2:67:8C:2A:D0:5D:CA:8B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DAB8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE75F3F4854A11F1AF120AAECE1D38B0.roa
Signing time: Tue 21 Jul 2026 21:26:43 +0000
ROA not before: Tue 21 Jul 2026 21:26:39 +0000
ROA not after: Thu 27 Aug 2026 21:26:39 +0000
asID: 138915
IP address blocks: 154.93.73.0/24 maxlen: 24
154.93.93.0/24 maxlen: 24
154.93.103.0/24 maxlen: 24
154.93.106.0/24 maxlen: 24
154.93.107.0/24 maxlen: 24
154.93.108.0/24 maxlen: 24
154.93.109.0/24 maxlen: 24
154.93.112.0/23 maxlen: 24
154.93.112.0/24 maxlen: 24
154.93.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121528 (0x1dab8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 21:26:39 2026 GMT
Not After : Aug 27 21:26:39 2026 GMT
Subject: CN=6a5fe413-d795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7b:6e:c4:2e:72:1c:5e:e6:71:9b:4f:c1:7a:
70:6c:cd:f2:5c:88:d6:d4:93:db:c1:60:8b:58:cf:
27:9f:55:19:3f:f8:a2:30:77:5b:5c:a7:13:e3:43:
72:e0:ee:59:3b:a3:32:39:69:42:f7:a7:41:6a:20:
87:93:1b:51:71:7a:32:f8:55:7b:b6:30:1d:7d:c3:
70:38:84:01:e6:88:d2:34:28:fd:d0:92:c1:be:83:
ca:3e:d8:1f:d1:f0:0a:76:fc:4a:c6:8e:92:64:2a:
87:27:e6:28:12:8b:cd:bf:d8:85:e3:71:d1:53:85:
45:0c:2f:5e:0c:22:00:bd:b4:ec:00:97:d5:fb:35:
26:c9:99:bc:d9:28:de:3c:a2:cb:22:67:d4:b4:d3:
56:e4:43:c3:98:95:a9:8c:61:7a:82:b7:cb:16:86:
dd:91:d8:00:97:87:21:88:f6:75:83:f2:5c:c8:0a:
10:92:6d:5b:52:43:2c:23:c7:f8:05:a4:d1:f3:eb:
fd:cd:d8:74:39:3e:20:e2:19:39:ff:56:84:18:c1:
9f:f4:ca:ad:81:9f:0b:0d:a4:a3:90:d5:15:f3:3c:
9e:78:6a:9e:ca:28:f9:d4:b8:f7:a2:dd:9d:3b:32:
64:5b:5a:47:15:5c:06:a5:16:19:91:a0:f7:63:8c:
98:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:86:23:2A:81:71:B7:17:BF:37:97:6B:C2:67:8C:2A:D0:5D:CA:8B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DE75F3F4854A11F1AF120AAECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.93.73.0/24
154.93.93.0/24
154.93.103.0/24
154.93.106.0-154.93.109.255
154.93.112.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:96:73:fc:be:de:0b:1c:b5:56:32:fc:92:d0:0c:38:02:92:
6b:e5:2e:28:3a:33:f4:ba:3e:9c:ab:87:21:e9:b6:01:4a:bc:
03:d8:45:29:2c:83:0e:82:37:d0:9d:c8:99:6a:d9:c3:57:74:
96:41:9e:4f:c8:06:0e:8d:ce:10:32:fd:34:86:62:9f:9f:95:
e6:a7:22:82:72:8f:ff:f5:1e:c0:af:a5:e4:7f:cf:de:c4:2f:
85:1c:99:8b:18:88:95:07:0b:2c:56:cb:1f:28:4c:ff:0b:18:
56:0f:35:3e:77:61:11:d4:48:fa:d0:98:49:94:1f:d7:6b:bd:
fd:93:5f:18:78:f5:52:7b:43:98:aa:9d:f4:26:e4:18:73:62:
33:39:96:c9:21:8d:70:c7:40:b7:32:63:fb:b6:3d:59:84:69:
40:29:9b:0d:ec:97:df:49:0e:5f:ef:0a:b0:04:47:d6:44:4f:
09:ac:98:76:0c:7e:21:d2:0e:df:9c:da:a0:57:21:b1:73:1b:
61:10:7a:56:0f:c1:32:28:75:4b:0e:41:1a:ac:92:85:29:d7:
53:74:b9:b5:0d:71:c2:e1:6d:c8:b8:80:11:21:4b:71:86:25:
45:01:eb:05:d2:92:dd:83:9a:af:e8:a8:29:44:89:f6:d4:fc:
1b:9e:0b:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:24:39 2026 by rpki-client