Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/046D792285E311F1B3A396D0CE1D38B0.roa
File: 046D792285E311F1B3A396D0CE1D38B0.roa (raw, json)
Hash identifier: KfMRag/ZXJXBtyArj19GQ46Te5BLwjLbNuD7qe/ZieA=
Subject key identifier: 18:E0:68:93:10:85:37:B4:A7:44:11:80:5C:D1:00:73:4C:CB:1E:40
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DACD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/046D792285E311F1B3A396D0CE1D38B0.roa
Signing time: Wed 22 Jul 2026 15:35:51 +0000
ROA not before: Wed 22 Jul 2026 15:35:47 +0000
ROA not after: Tue 08 Sep 2026 15:35:47 +0000
asID: 214143
IP address blocks: 154.194.208.0/22 maxlen: 24
154.194.212.0/23 maxlen: 24
154.197.60.0/23 maxlen: 24
154.197.86.0/23 maxlen: 24
154.223.248.0/21 maxlen: 24
154.223.248.0/22 maxlen: 24
154.223.252.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 08:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121549 (0x1dacd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 22 15:35:47 2026 GMT
Not After : Sep 8 15:35:47 2026 GMT
Subject: CN=6a60e357-d015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:43:7b:fb:ac:f4:76:ff:c9:86:70:03:31:c4:
e4:db:4a:4a:9a:81:22:c5:d4:be:33:dd:67:fa:69:
e9:c0:86:86:5f:39:5f:e6:53:62:68:e1:67:1e:fb:
d3:0d:7f:32:3b:09:0c:2f:b8:12:53:84:27:9f:0b:
67:19:d8:8c:1b:b2:ed:ff:71:20:70:57:0e:20:79:
b7:62:52:23:91:54:f7:0d:47:9f:ef:50:9e:a9:3a:
6f:06:21:bf:15:d1:2d:e4:f7:d0:8f:44:45:e7:e0:
64:93:57:41:d6:27:f3:eb:22:f4:d1:dd:7f:21:34:
36:63:71:57:81:64:be:82:61:c4:ea:5c:2c:25:8a:
65:a1:0e:3f:8d:2d:8a:34:4e:f3:dc:f6:a5:2b:73:
53:12:f0:1a:f1:6f:64:53:eb:6a:a4:42:e0:64:9f:
53:81:7a:7c:b8:c2:7e:a5:e5:7f:37:9f:1e:2b:9a:
35:20:89:a7:76:98:3f:04:26:6b:2d:a1:86:d3:f4:
6b:cd:72:e2:4c:a2:b8:93:5b:66:40:30:12:4d:09:
c9:4d:8c:ef:80:2e:60:ce:88:69:cf:03:91:21:58:
29:30:64:3f:9a:a3:a3:60:0b:bc:c6:be:29:51:f3:
a0:dc:a2:6a:83:d4:04:d5:b0:60:3e:e2:ee:f8:d7:
43:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E0:68:93:10:85:37:B4:A7:44:11:80:5C:D1:00:73:4C:CB:1E:40
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/046D792285E311F1B3A396D0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.208.0-154.194.213.255
154.197.60.0/23
154.197.86.0/23
154.223.248.0/21
Signature Algorithm: sha256WithRSAEncryption
07:89:14:be:cd:55:23:09:e8:0d:b0:ba:91:31:8a:19:f2:98:
7c:90:25:ba:ef:43:14:ed:d4:82:75:49:ed:27:c1:66:67:dd:
b9:06:50:cc:41:c9:0c:d5:88:bb:0e:22:64:cc:68:26:be:2f:
18:c5:6f:a6:cd:b1:fc:6a:7c:a4:83:21:33:b8:20:70:51:4f:
44:bf:a1:29:15:02:c1:47:ca:8d:89:c4:f1:e4:80:e6:60:16:
f2:24:13:28:a3:e1:83:1b:00:cc:4a:b3:72:80:d8:bd:9e:48:
08:45:16:9e:da:d9:c6:ad:87:49:c1:f7:f8:d7:3e:7e:4f:23:
46:4e:a3:d7:f6:01:e0:59:66:17:4d:78:bc:ab:55:f0:29:4a:
65:c3:6c:71:0e:57:d7:1e:11:19:ca:92:dc:f1:df:10:04:d2:
63:d2:e0:96:94:54:5f:f4:74:f7:c3:64:01:86:6a:3e:1d:3b:
b6:f4:74:91:85:e5:ee:35:cf:77:2d:ea:9d:bf:18:b3:cc:7e:
07:a1:25:49:63:4f:4d:c8:f0:0d:dd:09:d0:e7:85:df:47:05:
fa:69:81:c9:75:ee:bf:93:6a:4f:23:96:c9:70:29:fa:6a:6c:
bb:4b:b3:fb:bb:66:e6:ac:5d:a6:88:08:59:0b:1c:ab:af:fb:
9f:5c:ff:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:49:18 2026 by rpki-client