Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C92A9D084D211F19ED5B0DCCE1D38B0.roa
File: 1C92A9D084D211F19ED5B0DCCE1D38B0.roa (raw, json)
Hash identifier: 4VABbAcAcGnsBhC1ksnQ+odHBlQHaA0wI34Zrl7UHvY=
Subject key identifier: 3F:73:78:4E:13:88:E0:87:68:71:EC:24:F7:34:16:4F:5B:10:D5:51
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DA50
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C92A9D084D211F19ED5B0DCCE1D38B0.roa
Signing time: Tue 21 Jul 2026 07:02:19 +0000
ROA not before: Tue 21 Jul 2026 07:02:14 +0000
ROA not after: Sun 18 Jul 2027 07:02:14 +0000
asID: 152179
IP address blocks: 154.91.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121424 (0x1da50)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 07:02:14 2026 GMT
Not After : Jul 18 07:02:14 2027 GMT
Subject: CN=6a5f197a-9aa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:fa:e1:36:8f:37:b4:b2:a0:30:96:16:39:17:
53:91:07:28:9e:65:27:95:0a:db:3e:99:cd:4d:69:
4b:1c:03:31:13:cd:53:03:84:f8:25:2a:b4:9c:1b:
e2:20:f8:de:b4:21:f1:06:3b:db:a3:a1:26:fc:ce:
c3:20:83:24:2d:44:b9:38:48:50:00:08:95:73:a2:
a0:fb:51:ee:93:e0:a5:be:db:99:08:46:6d:13:3c:
2f:b8:c6:52:62:c3:1b:1e:0d:31:90:f8:e2:1a:0b:
a9:6d:80:4a:ed:a7:e7:ba:e7:0c:a5:db:64:1b:0b:
98:2a:3f:c2:03:2e:14:5b:f9:5b:5d:c3:16:a8:4e:
4b:e0:e0:69:e1:24:ab:58:58:f8:2a:3c:df:a1:54:
3f:c5:93:10:2e:df:a7:37:0f:6e:41:df:5e:0a:61:
53:cf:ab:9e:82:a7:d5:6e:d3:40:a8:c2:b5:e8:ce:
f8:c1:08:9d:f8:51:f5:c4:7c:b8:1d:0e:cf:cd:21:
38:b4:4c:4a:18:48:6d:df:ea:11:81:79:ee:a5:97:
dc:ab:44:41:6e:8b:b1:3e:2c:f3:eb:89:04:e4:0a:
89:c4:df:75:bf:0d:ec:a7:bf:d5:8b:84:cb:89:2f:
ea:29:27:36:85:70:bb:97:2e:2a:f1:f3:4e:18:5d:
bc:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:73:78:4E:13:88:E0:87:68:71:EC:24:F7:34:16:4F:5B:10:D5:51
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1C92A9D084D211F19ED5B0DCCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.91.201.0/24
Signature Algorithm: sha256WithRSAEncryption
94:3c:77:15:90:90:42:9c:ec:5a:a0:97:ef:3f:08:17:56:a9:
2a:d0:f6:88:e4:cf:44:8a:b6:07:53:63:62:2e:ca:96:21:1d:
a3:6a:50:99:24:e1:69:ce:a4:db:b4:5f:f4:b3:e9:26:dd:e0:
5b:b8:6c:e5:8d:4b:a8:08:40:33:74:14:6f:68:5b:df:fd:f3:
b4:e5:26:8c:28:bb:09:55:e1:a7:02:a2:68:56:d1:4f:4d:1f:
8d:9b:e2:84:ec:d3:d1:e0:dc:02:c5:d4:d4:5f:b8:07:9b:45:
ad:49:71:25:86:e3:ef:4f:fd:82:0e:de:fc:2c:3b:7d:7e:db:
c1:d0:d1:3c:3e:40:47:0c:11:d5:ed:4b:b9:94:9b:5c:62:33:
1d:6c:a7:65:99:ae:8a:7b:5e:bb:d9:7f:42:f3:84:7a:80:48:
93:72:73:20:4b:0c:04:2a:c6:6a:a0:a0:69:55:1f:32:40:92:
a2:92:87:b7:e8:66:99:ac:15:58:d6:fe:46:e1:f2:13:9d:bb:
6d:ee:94:08:03:7e:ef:86:b2:35:1e:fd:c6:4e:c9:a6:11:38:
86:d5:37:16:c4:88:ef:d3:0e:75:95:34:6f:c5:ee:68:ff:a8:
7e:42:41:4a:f5:d5:dc:da:d4:35:ac:91:69:7a:76:f7:f2:1f:
fa:97:67:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:32:58 2026 by rpki-client