Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F40CDDC866B11F1849BC01ACF1D38B0.roa
File: 3F40CDDC866B11F1849BC01ACF1D38B0.roa (raw, json)
Hash identifier: en82Y32B6sGjQ8ztP32PO5rWt5mGm82ROAw4FZ66exM=
Subject key identifier: B3:62:F0:3D:80:3A:75:1A:49:46:2F:4E:EA:21:5D:B1:F3:BE:0D:96
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DB17
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F40CDDC866B11F1849BC01ACF1D38B0.roa
Signing time: Thu 23 Jul 2026 07:51:01 +0000
ROA not before: Thu 23 Jul 2026 07:50:57 +0000
ROA not after: Thu 03 Sep 2026 07:50:57 +0000
asID: 198652
IP address blocks: 154.83.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 08:36:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121623 (0x1db17)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 23 07:50:57 2026 GMT
Not After : Sep 3 07:50:57 2026 GMT
Subject: CN=6a61c7e5-ecbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a4:ab:fe:10:50:82:1a:56:e6:31:93:58:28:
ed:06:a2:4d:52:34:5d:c5:b9:da:ca:9e:04:04:5a:
15:82:bf:c7:b1:4d:6f:be:3e:44:db:d0:37:19:96:
57:f1:b0:d5:a1:a9:e7:5e:6d:6f:a7:ce:29:a5:5e:
d9:fe:2a:6e:55:0f:3e:9b:be:79:f7:f0:b2:0d:87:
62:17:eb:c0:ae:c5:a8:e1:4f:45:5f:82:6c:30:0f:
c3:62:47:4d:92:54:37:b2:f6:b2:c5:ae:91:79:a1:
e3:a1:ee:9a:ee:d5:71:16:ca:49:48:9d:f7:a3:ae:
54:c2:59:cf:36:2a:53:cc:c1:93:78:1a:83:28:3c:
46:8d:fa:31:12:52:76:c5:8c:37:20:9f:12:a9:94:
6e:ca:30:89:c1:ee:63:77:8d:f4:5b:36:60:bf:ed:
a1:a8:4f:c4:7b:e7:3a:aa:5e:16:f3:7e:b9:df:1a:
8f:ea:d5:15:6b:5d:1e:99:b6:ec:c0:bc:bd:64:e6:
20:6b:44:73:79:ce:40:78:68:6f:f0:78:45:6f:bc:
c5:74:03:e9:57:44:45:ac:4e:09:9a:62:0b:4b:51:
1d:ae:25:be:ea:0f:eb:67:43:a1:72:88:ee:08:59:
77:a1:7a:0d:be:38:ff:b6:99:68:ff:eb:7c:9e:7b:
9a:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:62:F0:3D:80:3A:75:1A:49:46:2F:4E:EA:21:5D:B1:F3:BE:0D:96
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/3F40CDDC866B11F1849BC01ACF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.210.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:6a:db:f7:fe:20:dd:b6:86:3d:b4:d5:ca:f8:7e:c6:c7:8f:
6a:e6:fc:d0:3d:7b:51:a0:f0:c4:89:7d:67:dd:4d:fe:40:ff:
f0:fa:31:a0:37:b5:3a:af:d8:6c:6c:c4:0e:95:8b:7f:45:93:
92:9a:36:03:01:7d:c1:7c:46:77:f4:46:29:af:80:24:cf:65:
0f:d5:39:94:9a:dc:c8:2d:e7:68:77:69:20:0f:49:67:4d:68:
dc:eb:4b:ba:e4:88:40:60:1e:7a:ad:30:00:86:97:8c:fb:09:
15:9b:93:1f:5d:13:4e:e8:49:11:9c:a0:32:28:1e:bf:b1:55:
90:9d:61:73:d4:6f:b9:f9:61:b4:e1:f1:dc:3c:44:7b:94:17:
2c:26:e3:15:f4:13:b8:fe:bc:e5:16:eb:2e:f9:c8:a4:af:97:
ed:0e:4a:17:b2:3a:e4:82:35:cd:0b:a7:8a:b0:15:3d:5f:9d:
c4:ab:4e:cb:a8:a3:09:df:00:56:b9:64:04:3e:72:1f:e4:28:
0d:41:46:72:df:2f:8d:68:ce:81:4a:71:88:6d:6b:b5:a1:6e:
b5:c7:3b:22:9b:0b:f5:5b:8d:3e:9f:37:2c:ab:a4:8f:d9:fa:
f7:db:95:4d:f9:f9:27:9b:da:76:07:fd:11:65:9d:fe:d9:b6:
0e:45:14:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:55:55 2026 by rpki-client