Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E4CB482873411F1B2F2CCE5CE1D38B0.roa
File: 1E4CB482873411F1B2F2CCE5CE1D38B0.roa (raw, json)
Hash identifier: OqcMwRfqr03ERFkXvy964WL3+uqlmN1tClUz3NokxIo=
Subject key identifier: 24:74:A9:04:4E:46:E7:24:8A:36:C8:FF:56:F7:7D:41:6E:5D:54:8B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DB24
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E4CB482873411F1B2F2CCE5CE1D38B0.roa
Signing time: Fri 24 Jul 2026 07:48:54 +0000
ROA not before: Fri 24 Jul 2026 07:48:50 +0000
ROA not after: Tue 01 Sep 2026 07:48:50 +0000
asID: 11427
IP address blocks: 154.194.8.0/22 maxlen: 24
154.194.16.0/21 maxlen: 24
154.194.24.0/22 maxlen: 24
154.194.196.0/22 maxlen: 24
154.194.216.0/21 maxlen: 24
154.198.128.0/19 maxlen: 24
154.202.144.0/20 maxlen: 24
154.202.192.0/18 maxlen: 24
154.213.168.0/21 maxlen: 24
154.220.128.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121636 (0x1db24)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 24 07:48:50 2026 GMT
Not After : Sep 1 07:48:50 2026 GMT
Subject: CN=6a6318e6-8540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:00:59:10:b9:59:ec:3f:34:48:9f:27:db:32:
31:88:06:a3:a2:49:60:91:e3:36:83:66:ff:cc:aa:
fe:08:35:f3:4f:a2:b4:d1:3c:fa:3d:f0:08:be:c2:
f3:f7:df:c4:85:9e:fb:48:58:06:b7:1a:3b:21:7b:
e8:bb:e9:39:6b:0a:a5:ac:23:1c:a6:cb:b4:cd:60:
e7:dc:16:25:ce:70:08:9d:a9:bc:f5:54:ab:29:42:
6f:0f:7f:8f:fa:ab:e9:fe:56:bb:93:47:1a:38:40:
ad:c3:a5:a7:ce:4f:e0:3f:4f:05:86:8a:db:66:0f:
18:d7:fc:c2:05:f6:43:6b:03:a8:27:a9:7b:73:c0:
50:19:87:05:24:60:d5:1f:04:c8:76:a2:64:67:09:
69:4c:87:03:5e:cc:81:57:82:90:dc:32:8d:d2:a2:
55:26:c8:6a:4a:42:2d:5f:8d:e7:2d:2c:dc:de:da:
53:56:b1:45:e1:2b:40:cf:9e:52:4a:7f:c1:e0:13:
9f:76:b8:44:c9:3c:b7:02:48:f0:3f:cd:34:39:7a:
08:78:ee:ca:ab:d5:a8:23:19:0a:4b:5f:50:bb:9f:
56:66:a9:d9:f6:ab:81:26:d9:34:89:6f:a3:55:a0:
23:a9:03:80:7b:90:57:4d:a1:d1:82:87:99:43:ff:
14:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:74:A9:04:4E:46:E7:24:8A:36:C8:FF:56:F7:7D:41:6E:5D:54:8B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1E4CB482873411F1B2F2CCE5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.8.0/22
154.194.16.0-154.194.27.255
154.194.196.0/22
154.194.216.0/21
154.198.128.0/19
154.202.144.0/20
154.202.192.0/18
154.213.168.0/21
154.220.128.0/18
Signature Algorithm: sha256WithRSAEncryption
7f:3c:b7:4c:71:e9:19:4e:e5:43:28:5c:d3:84:91:2d:5b:08:
ff:59:74:27:d0:ad:e6:7f:0a:49:ef:bf:02:68:91:1d:9d:0d:
f9:cc:b7:d4:bd:83:08:44:ad:89:a9:8e:58:a5:eb:00:6b:fe:
6a:da:4b:05:54:72:13:42:7a:85:03:35:92:ca:9e:cc:17:70:
36:8f:4e:94:78:fd:39:32:aa:b4:3f:63:62:7d:3d:a8:df:e6:
4c:2d:36:91:62:3a:48:c3:f4:b2:7c:1e:d9:e1:da:79:13:76:
88:30:f0:b5:ba:a8:20:49:07:18:46:6c:1c:db:ca:3e:c7:6d:
a4:5e:b0:f5:49:f3:8c:1e:2a:21:1f:a9:89:b8:37:d6:c8:67:
3e:86:28:5d:60:16:ed:83:f3:04:0c:73:56:2d:01:54:ef:eb:
3a:63:d4:00:f9:eb:e0:28:24:e6:0d:1d:2f:3a:a8:e2:8c:d1:
10:8f:c5:3a:35:8c:46:2f:65:54:8b:65:4b:ad:80:ef:f3:b1:
2c:24:6a:93:ab:21:99:db:2b:03:8e:aa:f9:a0:13:4b:aa:c0:
a3:a1:57:e1:1f:65:35:75:b5:72:ec:a0:27:0a:d7:4b:9f:68:
6a:b8:0c:08:28:4e:1b:2e:50:00:a6:4b:e6:8f:fb:83:ad:d6:
a3:50:0c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 00:43:51 2026 by rpki-client