Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41EF6EB8854811F1A08B111CCF1D38B0.roa
File: 41EF6EB8854811F1A08B111CCF1D38B0.roa (raw, json)
Hash identifier: pvkfLCvovt9OVWKrC6ZYp9xyVN3hwNmRzxsMQzVJZ+k=
Subject key identifier: 52:EB:9A:12:53:59:49:D4:38:60:CE:30:DE:51:EC:69:FC:B6:9B:1E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DAB2
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41EF6EB8854811F1A08B111CCF1D38B0.roa
Signing time: Tue 21 Jul 2026 21:08:02 +0000
ROA not before: Tue 21 Jul 2026 21:07:58 +0000
ROA not after: Sun 16 Aug 2026 21:07:58 +0000
asID: 271916
IP address blocks: 154.205.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121522 (0x1dab2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 21:07:58 2026 GMT
Not After : Aug 16 21:07:58 2026 GMT
Subject: CN=6a5fdfb2-e077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:1f:72:b4:b2:c9:b2:39:db:c4:5b:1d:bd:31:
06:da:74:8a:c6:b7:fe:17:e7:62:39:d2:98:49:0e:
ef:93:6a:95:f8:0f:a0:6d:da:79:b8:ab:13:67:df:
23:89:6b:98:53:57:a5:e4:85:a6:ef:bd:9d:9d:48:
2c:df:3f:43:73:59:fc:20:f8:cd:04:26:1c:66:5c:
97:f0:53:7a:fc:98:4c:76:aa:da:9f:01:2e:63:74:
d1:ef:90:ba:b3:45:b3:b5:2b:0a:bc:fd:97:c7:24:
65:5e:f1:c3:eb:b0:7c:a4:4a:b9:7f:16:e4:29:56:
a1:c9:58:d1:67:4a:cd:a0:5b:08:d0:6e:a1:be:53:
d6:df:ef:3a:c5:3c:2a:74:4b:d2:f3:13:c0:9b:6d:
5b:83:22:b0:39:6e:85:52:0a:51:f2:a9:a5:c9:c2:
9b:43:8e:e7:8e:c7:af:37:e3:20:64:2d:cb:a8:b1:
0a:a6:7f:a8:a8:78:c0:af:73:3e:f5:77:eb:d3:23:
6a:42:54:c9:f2:06:f5:ce:17:f9:30:10:b2:59:4d:
6a:03:37:c2:8a:48:24:67:bd:c7:bc:fa:41:b8:d2:
c4:f1:69:1a:46:93:eb:5c:66:49:7e:60:d5:44:be:
84:e7:cf:c9:00:a6:89:e0:05:d6:d6:46:ef:5c:e9:
5f:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:EB:9A:12:53:59:49:D4:38:60:CE:30:DE:51:EC:69:FC:B6:9B:1E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/41EF6EB8854811F1A08B111CCF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.24.0/22
Signature Algorithm: sha256WithRSAEncryption
78:92:08:d3:9e:90:c1:77:ad:7e:d0:29:8c:b4:a7:dd:ee:0c:
ec:50:c6:af:1e:87:03:e4:fa:7a:d0:84:07:d7:26:97:af:7a:
76:24:64:91:2a:87:4a:26:c3:d8:d0:1e:8f:12:e8:b8:46:d5:
66:12:a9:72:c7:d8:15:50:0c:37:c9:61:e6:29:e0:4d:f5:86:
be:99:dc:cd:67:e8:14:d8:8e:69:d6:ed:4b:97:ae:8a:80:22:
6f:d2:19:0c:59:5b:6d:18:9b:57:36:1a:b7:ec:05:e7:76:33:
a0:3a:00:18:a2:b5:68:4a:01:80:55:44:70:67:87:99:f5:a0:
4a:d7:dc:0a:d5:aa:bb:50:0d:d1:82:a6:60:87:dd:ec:94:73:
fc:61:2d:32:6b:6f:ba:ef:35:c0:1b:07:b2:6f:41:d2:8b:58:
2f:29:b5:bb:5b:30:69:a5:48:20:7c:4f:a7:05:b6:be:41:6b:
0b:12:bf:b1:22:7b:d5:76:55:1b:45:4f:ad:8c:28:67:11:c5:
da:3f:bd:d5:da:c9:5a:41:85:62:22:32:a6:30:80:b4:fa:3f:
8b:04:78:a8:c7:b4:3f:7c:70:92:02:b2:09:d6:fe:0c:99:2f:
f4:6a:0b:0c:5b:2e:df:8e:12:c2:47:51:a0:31:a7:27:f4:00:
53:b1:a9:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:07:36 2026 by rpki-client