Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07140996707811F1B354490ECF1D38B0.roa
File: 07140996707811F1B354490ECF1D38B0.roa (raw, json)
Hash identifier: PpKLNRO4s7NeeNtyU/LUk602q4D/fIiGCF/rFbB8Kbg=
Subject key identifier: D6:DB:1F:5C:33:01:27:21:FC:02:01:71:26:50:51:7E:00:8C:BC:91
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D528
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07140996707811F1B354490ECF1D38B0.roa
Signing time: Thu 25 Jun 2026 09:27:04 +0000
ROA not before: Thu 25 Jun 2026 09:27:00 +0000
ROA not after: Sat 01 Aug 2026 09:27:00 +0000
asID: 49505
IP address blocks: 154.223.204.0/24 maxlen: 24
154.223.205.0/24 maxlen: 24
154.223.206.0/24 maxlen: 24
154.223.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120104 (0x1d528)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 25 09:27:00 2026 GMT
Not After : Aug 1 09:27:00 2026 GMT
Subject: CN=6a3cf468-344a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:14:11:b4:8b:5b:9e:58:91:fd:e3:cf:35:72:
c0:46:e0:60:7f:2f:07:23:a4:1e:74:f3:9f:26:e5:
b5:b1:b3:15:d6:06:dc:a3:49:18:ee:ba:22:a0:ed:
04:12:28:a6:14:e1:f3:d5:b0:84:27:fb:2c:3f:9c:
4c:86:e2:c1:08:f6:27:98:1f:e0:d8:2d:b8:cd:f3:
0b:f7:29:f4:53:b3:de:d1:5b:19:4f:26:a8:e1:e1:
d5:be:54:b2:dd:a9:33:05:5a:40:4f:59:e8:f2:39:
07:f5:b0:05:b4:6e:9d:47:69:38:56:1e:7f:cc:94:
5f:69:d9:6f:10:a7:59:ec:04:9b:88:d6:66:a1:c7:
d3:37:39:ed:ff:7e:35:6d:8a:95:28:90:ac:4b:b0:
39:1d:5d:18:f2:6f:47:a5:d8:61:26:37:b1:c7:1f:
a5:29:99:48:43:30:0e:e0:17:cd:5a:4f:fe:c0:01:
c0:bf:e0:09:c2:b6:35:86:e0:d2:0a:cd:b4:a1:aa:
53:19:d9:ce:48:a6:ea:7f:f8:5a:83:94:29:01:4d:
86:92:71:d1:e2:e5:c5:7d:60:20:d2:a1:82:de:7b:
18:40:ce:cd:1c:e5:d2:21:0f:68:cc:5b:57:c6:d0:
a4:ae:03:37:a7:3e:7c:1e:f6:cc:d0:07:f4:71:8c:
d7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:DB:1F:5C:33:01:27:21:FC:02:01:71:26:50:51:7E:00:8C:BC:91
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/07140996707811F1B354490ECF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.204.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:54:0a:aa:ad:ab:be:46:d1:d2:a9:22:9f:e4:81:48:b6:19:
18:ef:c3:d8:94:b1:7c:3d:2e:f0:27:99:6f:e7:20:5c:ce:e5:
b0:0e:5c:64:57:85:c2:3e:1f:e0:c0:5c:69:d6:83:13:ee:2a:
62:4d:3e:f5:83:38:8f:41:0a:6f:16:1c:e1:ca:5d:d6:69:c1:
2b:77:9a:29:17:70:56:42:8b:10:16:02:c1:73:f7:da:fa:11:
f4:b8:65:cd:c3:1c:6c:2e:08:48:85:65:57:ad:32:53:dc:6c:
e2:c1:de:fd:b4:ba:22:1b:c4:8c:ec:b4:20:a1:1a:86:c5:13:
65:89:f4:a5:ff:85:af:84:fc:9e:ac:19:e9:88:e5:ae:fb:9f:
ac:cb:f6:60:f1:45:39:b7:d3:14:9b:2e:20:65:14:17:bf:15:
38:b2:f6:fe:25:b4:c1:6e:cc:71:f9:90:b3:66:c7:4e:3c:70:
86:37:18:aa:80:66:73:ec:4f:a6:64:47:c0:ab:fa:b9:8c:0d:
36:d9:3e:e0:d3:e2:5e:81:1f:3c:3e:d9:84:3e:32:d2:3a:dd:
0f:1a:b3:0b:8d:1d:3b:40:1b:7d:e5:a4:c4:45:75:b4:39:fa:
81:ab:3a:7e:7d:ec:bc:4e:b6:a8:80:15:72:52:62:d4:77:9b:
de:95:f8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:03:49 2026 by rpki-client