Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03A2E26E841E11F18B7A950CCF1D38B0.roa
File: 03A2E26E841E11F18B7A950CCF1D38B0.roa (raw, json)
Hash identifier: +8TIokoAC0x72zdM+/HOxK5Q4lsq2SB1m03uC/sMOvU=
Subject key identifier: 9B:18:A0:A9:70:C6:03:B4:49:DB:39:50:C8:01:5B:C3:03:03:68:66
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D9DD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03A2E26E841E11F18B7A950CCF1D38B0.roa
Signing time: Mon 20 Jul 2026 09:33:07 +0000
ROA not before: Mon 20 Jul 2026 09:33:03 +0000
ROA not after: Sun 16 Aug 2026 09:33:03 +0000
asID: 17497
IP address blocks: 154.197.16.0/21 maxlen: 24
154.197.16.0/24 maxlen: 24
154.217.232.0/23 maxlen: 24
154.217.232.0/24 maxlen: 24
154.217.233.0/24 maxlen: 24
154.222.128.0/22 maxlen: 24
154.222.128.0/24 maxlen: 24
154.222.129.0/24 maxlen: 24
154.222.130.0/24 maxlen: 24
154.222.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121309 (0x1d9dd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 20 09:33:03 2026 GMT
Not After : Aug 16 09:33:03 2026 GMT
Subject: CN=6a5deb53-89de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:4e:a8:ed:03:e2:60:ec:a3:0f:9d:05:bc:b8:
65:c0:0a:01:ca:a2:e8:d2:4d:ae:e9:83:81:2e:69:
18:83:94:4e:b5:3f:69:4c:07:d3:1a:9e:52:30:22:
b4:d5:07:8b:96:fc:42:06:82:f2:08:59:90:c1:72:
b1:33:06:73:c0:a7:4b:77:f4:e2:db:c5:5b:b5:de:
40:38:1c:72:e5:dc:58:6c:78:ad:01:e1:39:31:80:
46:ae:87:62:1b:aa:52:3b:e9:a1:02:4c:52:3e:23:
82:c7:02:12:d4:58:f4:3b:c1:13:96:38:a3:a4:2b:
08:44:0d:f8:2b:b3:f0:2f:a3:6a:aa:13:74:06:4d:
7d:f0:c9:77:55:e0:f2:28:91:54:45:59:d6:e7:70:
11:ad:27:ac:42:f1:06:da:a3:70:e4:ec:ac:5e:8c:
ea:76:3d:40:e1:09:ef:c5:9a:4c:b1:91:0e:6a:c2:
03:79:16:95:35:12:98:53:e6:2b:53:0c:39:4d:c8:
f2:68:dc:c8:32:37:59:11:be:e7:c2:fd:6b:7d:f6:
39:5c:72:ef:64:b5:e5:a4:6c:a4:ab:b4:c5:cf:d7:
e0:ce:01:e5:9e:3e:7c:25:94:77:63:67:98:c5:74:
a4:6f:5b:97:42:15:bc:fb:6e:30:bd:21:8d:12:74:
96:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:18:A0:A9:70:C6:03:B4:49:DB:39:50:C8:01:5B:C3:03:03:68:66
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/03A2E26E841E11F18B7A950CCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.197.16.0/21
154.217.232.0/23
154.222.128.0/22
Signature Algorithm: sha256WithRSAEncryption
27:3d:01:4d:94:0d:e7:9c:c9:b8:c2:3e:34:14:1c:28:0d:6b:
c0:02:fd:ea:8e:c0:c2:62:1d:d6:65:c3:73:51:9c:ae:43:d5:
9f:c0:5e:ae:7f:5d:9d:c7:85:d2:bf:fc:b1:85:e0:16:ed:c7:
4a:c9:09:44:97:64:2e:13:15:9c:3a:29:8c:73:23:d3:62:04:
47:c5:86:05:6b:00:1a:08:cb:63:c4:08:5b:38:2b:84:f7:12:
a4:88:19:6f:7a:8f:eb:78:23:9f:37:57:39:ca:8b:73:07:08:
cc:15:fe:dd:db:79:b0:cb:13:54:33:d1:81:d4:e2:59:3e:88:
6e:0e:e0:a4:e0:b1:93:c5:81:41:02:02:b8:66:49:b5:86:69:
90:a3:11:ac:ea:4e:3b:42:1d:ab:07:83:0c:d8:ba:9c:dc:06:
ac:18:ad:07:03:b8:aa:17:88:5b:34:62:c1:13:17:c9:b3:8d:
91:a4:2b:82:7a:a8:9b:96:41:57:24:ce:fd:5c:63:a0:4c:4f:
be:f3:11:67:96:ae:48:86:9f:da:d3:79:18:f0:4d:55:18:cb:
79:68:a7:5c:d3:8e:29:0c:04:28:97:d7:9f:01:0b:f7:ac:e3:
b9:2c:e3:45:bb:c8:c8:8c:13:ae:19:54:ce:93:a3:47:78:63:
83:52:e1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:08:35 2026 by rpki-client