Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF879058834D11F1BDF3E21BCF1D38B0.roa
File: DF879058834D11F1BDF3E21BCF1D38B0.roa (raw, json)
Hash identifier: 70I4vQgE9frl8RybNBL7dytIAJXNgy8MDZ77NeYisgk=
Subject key identifier: 18:2B:DF:81:7E:A7:82:8C:80:E3:8A:A0:51:AE:F1:34:F5:F5:1C:5A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D9A1
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF879058834D11F1BDF3E21BCF1D38B0.roa
Signing time: Sun 19 Jul 2026 08:43:11 +0000
ROA not before: Sun 19 Jul 2026 08:43:07 +0000
ROA not after: Sun 16 Aug 2026 08:43:07 +0000
asID: 17497
IP address blocks: 154.196.135.0/24 maxlen: 24
154.196.140.0/23 maxlen: 24
154.196.140.0/24 maxlen: 24
154.196.141.0/24 maxlen: 24
154.196.164.0/22 maxlen: 24
154.196.164.0/24 maxlen: 24
154.196.165.0/24 maxlen: 24
154.196.166.0/24 maxlen: 24
154.196.167.0/24 maxlen: 24
154.196.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 08:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121249 (0x1d9a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 19 08:43:07 2026 GMT
Not After : Aug 16 08:43:07 2026 GMT
Subject: CN=6a5c8e1f-3a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:de:65:bd:89:ad:25:2d:dc:28:86:35:71:14:
01:3f:9c:d4:19:aa:7d:89:2b:6d:ec:b9:9c:39:e9:
db:fd:c6:bc:b2:aa:1d:05:38:25:f1:a7:10:6a:c4:
28:2d:09:85:14:8e:3b:90:5b:ef:52:1b:97:ea:ce:
b7:83:75:c8:5c:eb:f6:5a:e6:9f:45:f1:38:41:e4:
32:6f:00:87:f6:9a:f1:b4:e5:1e:39:fa:37:2a:86:
cd:a8:a7:a6:9d:8d:07:a7:5e:0f:b9:f3:e6:bb:51:
ca:ae:f7:3a:df:07:73:92:ad:9f:8a:19:bd:22:81:
b8:2e:8f:7c:48:a9:28:d3:63:8a:6f:a7:ef:a7:f8:
28:5d:eb:2c:b2:dd:bd:44:48:06:cf:87:62:0e:21:
b5:d2:ce:2e:6a:f6:43:aa:12:47:3b:ef:a3:4d:ef:
4f:3e:3f:35:fc:77:f1:69:4d:8a:e3:90:a9:ad:63:
e3:c7:5e:c1:09:82:25:47:73:60:54:1c:3c:fe:74:
ef:e2:d9:50:bc:e6:26:a4:35:49:c3:d7:b0:fc:07:
1f:a7:e6:5f:ca:4f:1e:fd:37:89:bb:62:7e:79:ea:
8b:07:e3:29:97:0e:b9:dc:2c:57:41:92:68:0b:03:
d8:6f:27:4a:7a:70:5e:ac:ac:7f:59:cb:bf:2f:c3:
d2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:2B:DF:81:7E:A7:82:8C:80:E3:8A:A0:51:AE:F1:34:F5:F5:1C:5A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DF879058834D11F1BDF3E21BCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.135.0/24
154.196.140.0/23
154.196.164.0/22
154.196.223.0/24
Signature Algorithm: sha256WithRSAEncryption
11:9e:6f:51:0a:20:e0:91:84:c7:88:13:17:5e:73:6c:65:59:
ed:f0:3e:63:20:03:ff:b2:90:3c:39:75:ad:2c:6d:8f:65:e0:
1c:31:94:cb:fd:a1:e9:3c:42:04:1d:d0:8d:0b:dd:71:89:64:
c0:5f:7a:83:22:19:d6:ae:06:b7:d0:24:0c:7f:9c:23:4b:5d:
14:27:27:91:12:80:ea:9d:c0:06:72:fb:27:98:44:a7:f4:79:
41:bd:77:1d:57:45:b8:0d:75:da:58:3b:f8:f8:a1:32:cf:bf:
0c:b2:11:8f:35:7d:de:61:9a:04:00:0c:b8:a6:fd:ba:ee:63:
a0:6d:40:5b:f2:85:ed:93:b5:e2:16:52:35:7e:f0:99:86:d2:
dc:8c:15:2a:c3:5a:dc:a0:a2:3b:74:8b:d6:93:12:39:21:f3:
cf:2b:8e:ae:5a:9b:c5:6a:34:59:70:90:64:1f:49:21:05:6f:
ee:e6:4c:23:bd:c8:ce:20:af:37:5b:b3:1c:37:02:b8:8e:e2:
07:9d:c8:44:f3:45:5b:5a:a4:d4:be:a4:03:7c:29:0e:09:18:
37:5d:27:04:9a:98:27:15:6f:e4:28:ef:f6:89:10:3c:1f:d1:
3b:9d:5a:8b:99:41:98:42:da:ec:03:56:19:9a:60:65:95:ee:
91:7e:89:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:30:38 2026 by rpki-client