Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1FE931F4867011F19A3A3AB8CE1D38B0.roa
File: 1FE931F4867011F19A3A3AB8CE1D38B0.roa (raw, json)
Hash identifier: 8VaXbzd1c+cHcemFpQNuo4Fpdl6JrsjKZzN1axEwM8g=
Subject key identifier: FF:1C:59:8C:8D:8D:04:C1:E1:0D:9D:6A:BE:37:39:14:C4:21:96:33
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DB1F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1FE931F4867011F19A3A3AB8CE1D38B0.roa
Signing time: Thu 23 Jul 2026 08:25:56 +0000
ROA not before: Thu 23 Jul 2026 08:25:52 +0000
ROA not after: Mon 14 Sep 2026 08:25:52 +0000
asID: 21859
IP address blocks: 154.194.56.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121631 (0x1db1f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 23 08:25:52 2026 GMT
Not After : Sep 14 08:25:52 2026 GMT
Subject: CN=6a61d014-6b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:03:65:16:05:49:3b:90:41:96:00:9e:a8:87:
18:96:b3:20:76:9e:f9:b6:81:95:53:43:2e:23:8d:
84:79:ff:ef:10:83:54:f3:b3:1c:16:0c:9b:a4:6d:
56:27:97:0d:f2:80:41:c0:d7:ac:be:0a:f2:6c:fd:
5d:b0:47:98:3d:af:eb:39:a6:d6:64:e5:5f:de:6c:
22:61:4f:0d:d5:59:82:7f:01:ac:62:35:4d:aa:c9:
8b:ca:e3:88:c0:c8:57:12:4c:57:14:17:f1:34:09:
95:8a:7a:60:29:3f:80:9a:01:6e:7e:98:05:2c:d3:
a6:b4:fd:98:b4:89:67:3a:2e:c6:d8:06:3f:09:ab:
95:2f:00:a8:b7:d9:45:77:ce:c2:f6:55:26:4e:68:
7e:7f:15:ce:94:6b:21:ca:2e:c5:a6:98:e0:e4:c9:
5e:97:29:ad:b0:cb:98:73:79:f1:2c:67:ea:31:c5:
03:e0:a6:05:7b:54:38:85:c7:35:be:86:38:82:0f:
f5:7d:ac:c5:1b:0d:6e:34:62:62:8c:ee:6d:22:09:
49:4c:56:d5:21:e3:a1:f5:db:32:c3:f3:0b:22:74:
61:39:66:f5:24:3e:8e:2b:e5:a9:95:1a:21:47:c7:
3d:ee:1b:22:a4:91:65:b1:f8:4f:49:cd:8a:ce:a4:
df:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:1C:59:8C:8D:8D:04:C1:E1:0D:9D:6A:BE:37:39:14:C4:21:96:33
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1FE931F4867011F19A3A3AB8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.194.56.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:3c:ca:fb:01:ed:67:05:53:3a:9f:1a:79:53:51:39:cb:e5:
89:f7:5a:90:55:82:52:88:c0:46:6f:68:e7:ac:32:28:5e:e8:
43:ac:94:33:d9:99:92:01:0a:c7:eb:74:77:f2:7d:32:d7:7c:
cf:ce:7e:58:97:cf:f6:1a:57:e6:81:9d:3b:b5:81:ca:dc:38:
82:8d:0b:b6:35:33:01:8f:d1:49:ad:fd:d2:44:c2:d3:e8:b5:
5d:9b:42:73:40:0d:fe:d8:16:83:eb:53:e7:ec:5f:b4:e1:35:
05:63:ec:35:7c:7b:84:06:94:45:0f:fd:0c:eb:b8:87:e3:06:
13:25:e5:fe:d5:d9:10:11:08:69:d0:3a:28:52:0c:ed:f7:2e:
1b:28:a6:d5:2a:6a:c8:9e:e9:0a:a3:fe:cf:7b:f2:60:21:30:
f0:7a:94:3f:95:a1:a0:75:fc:e9:0d:8a:b6:e3:61:84:49:3a:
9a:45:03:18:1b:a4:b9:79:56:a4:94:13:af:5b:02:0d:ac:10:
42:16:f8:ee:ab:35:3a:68:bc:2e:d8:8f:81:51:40:c7:37:6b:
81:b4:ae:a7:1b:f5:76:5a:9e:ff:e8:34:93:75:14:3f:51:b7:
c3:57:1f:fd:21:08:18:86:ad:e2:4c:e0:80:66:0f:ad:6a:10:
a4:4e:a4:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:22:37 2026 by rpki-client