Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2755666E84DC11F1A042B716CF1D38B0.roa
File: 2755666E84DC11F1A042B716CF1D38B0.roa (raw, json)
Hash identifier: B7IbxJHYXCTYqI2y/WlJJx2moU/87/SSyFJ/jAEaC4M=
Subject key identifier: 38:55:AA:00:03:80:F4:9E:21:CB:36:D0:19:44:1C:AE:A4:83:92:3D
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DA58
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2755666E84DC11F1A042B716CF1D38B0.roa
Signing time: Tue 21 Jul 2026 08:14:12 +0000
ROA not before: Tue 21 Jul 2026 08:14:07 +0000
ROA not after: Thu 19 Jul 2029 08:14:07 +0000
asID: 17561
IP address blocks: 154.88.53.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121432 (0x1da58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 08:14:07 2026 GMT
Not After : Jul 19 08:14:07 2029 GMT
Subject: CN=6a5f2a53-ee36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e8:2a:5b:19:7f:8e:76:e6:f3:d7:c6:82:60:
8b:cc:90:f2:15:ad:92:0d:4f:6d:23:6d:53:18:ce:
1c:83:38:da:07:c1:18:90:14:5e:3d:83:62:bc:2c:
98:cb:48:40:97:40:89:4c:5a:b1:54:8f:ef:3a:23:
bf:25:d4:64:8f:18:28:8d:a6:04:ed:23:d2:33:e9:
00:fc:ad:51:66:b2:b2:d7:2f:e0:62:66:63:72:89:
13:35:26:e7:4a:1d:4e:3f:a7:1e:8e:96:6b:f3:78:
36:b4:e7:1d:e7:60:29:00:1c:71:34:86:dd:75:fa:
07:08:17:88:92:4d:22:fd:b2:ae:97:aa:70:76:f2:
e8:6c:40:ee:7e:26:c1:9b:1f:83:22:ae:55:f3:52:
54:f6:12:4e:80:46:7c:f5:1a:28:21:e2:9a:63:28:
22:b7:09:66:3a:1d:b7:4a:5f:87:4b:7f:3d:bd:b1:
79:14:54:19:67:f7:f8:55:b0:a0:9e:6d:c1:3f:2f:
77:f4:3b:75:88:9e:7e:28:74:2d:dc:47:ce:73:ff:
d2:e6:60:24:fb:62:e1:c3:8c:d4:99:df:4e:19:11:
d6:07:14:25:7a:03:c0:1a:fd:50:e5:cf:59:43:a8:
45:63:9c:50:35:8a:c3:d5:97:05:82:ce:b6:4d:1a:
2d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:55:AA:00:03:80:F4:9E:21:CB:36:D0:19:44:1C:AE:A4:83:92:3D
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2755666E84DC11F1A042B716CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.88.53.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:03:c4:ca:8f:18:8a:bc:28:d3:6b:2c:56:cf:c3:2f:ff:cb:
88:ee:df:6f:a9:8b:20:74:de:19:86:3d:81:81:d1:de:28:26:
56:03:1e:d1:ce:4c:56:04:a2:7c:d5:d0:02:15:4f:38:43:55:
9b:98:90:3d:76:b8:e1:e7:7d:bb:68:7f:32:85:d8:9c:cb:6d:
56:0c:9e:44:49:7b:f2:e3:1d:b7:0e:5f:42:6e:03:8d:c4:0a:
03:8e:7f:e6:25:5e:e6:fa:97:60:f8:07:cc:8c:e1:6f:dc:84:
87:ec:4e:b1:70:80:1b:72:cc:92:a4:7a:1b:38:78:08:5a:36:
ca:b9:91:c1:77:b6:75:65:86:15:b2:b1:83:cb:61:74:d6:33:
38:f3:e1:3a:8c:2a:22:9c:8a:38:8c:c5:b9:f6:a5:09:f1:b4:
9a:72:d3:e2:89:a8:75:f8:38:5e:7c:88:9c:8f:d2:c4:35:e5:
d2:26:aa:1c:cf:08:a1:2f:a8:bf:8b:a1:65:15:42:39:61:f9:
bb:5d:26:c0:5e:e1:52:fd:78:db:82:ca:33:6b:e3:25:fe:8e:
78:a3:aa:67:bc:16:94:73:de:1f:1d:62:23:a5:0a:6b:e7:34:
7c:9a:9d:da:22:8a:ad:8d:28:b6:10:e2:c7:65:b8:f0:9d:67:
6c:f8:57:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:47:14 2026 by rpki-client