Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47B3DE8A791611F19822E9EDCE1D38B0.roa
File: 47B3DE8A791611F19822E9EDCE1D38B0.roa (raw, json)
Hash identifier: Uy7DnDn/4+uIQOxLUhDFtNk/dh04Sps/dgrByF9TPx8=
Subject key identifier: 2A:96:3D:18:2E:93:EA:9A:9A:A1:60:FC:96:13:49:EB:F0:BC:4C:73
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D734
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47B3DE8A791611F19822E9EDCE1D38B0.roa
Signing time: Mon 06 Jul 2026 08:40:03 +0000
ROA not before: Mon 06 Jul 2026 08:39:58 +0000
ROA not after: Sun 23 Aug 2026 08:39:58 +0000
asID: 49453
IP address blocks: 154.193.188.0/24 maxlen: 24
154.193.189.0/24 maxlen: 24
154.193.190.0/24 maxlen: 24
154.193.191.0/24 maxlen: 24
154.208.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 08:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120628 (0x1d734)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 6 08:39:58 2026 GMT
Not After : Aug 23 08:39:58 2026 GMT
Subject: CN=6a4b69e3-925f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a2:0c:ff:e2:b1:51:cc:aa:fa:d7:06:d5:d3:
72:fa:5c:4b:59:bc:3a:1b:d5:00:9c:45:ca:1c:f9:
c5:b9:5c:e6:e3:cb:82:7d:b9:19:d7:2f:0a:6d:a2:
87:0a:e3:1c:9a:96:35:99:a1:07:0f:ea:92:b1:1a:
ba:89:e9:9c:1a:12:be:90:5d:0a:69:94:53:34:ef:
69:14:79:32:1e:54:13:f7:f2:42:e7:e7:d6:80:b0:
e2:ad:21:61:d7:de:7c:1c:bc:24:c8:45:39:ab:1f:
fb:d3:c4:ab:03:f9:7d:80:4a:b6:a7:37:90:52:22:
30:83:14:82:f2:de:f9:30:5b:e8:31:40:de:82:93:
75:2c:6e:d5:df:c2:19:c7:e3:9a:e3:c4:46:bb:57:
35:b4:24:36:3d:6a:d2:e6:3a:86:9d:5f:5c:bc:33:
79:5f:84:a4:36:9e:0b:3b:47:c4:b1:c4:00:3b:2a:
ca:1f:94:07:5a:8e:a0:23:f3:49:15:ba:00:05:fa:
3e:74:8c:62:f1:56:52:9e:b6:77:1a:0e:ab:d4:26:
81:72:10:80:b5:56:66:6b:6e:05:ea:94:11:c2:6e:
f3:65:b1:05:de:df:df:d8:a4:f5:d2:3d:54:cc:9b:
a3:d7:bc:f0:b7:e1:b9:6c:b4:f6:9a:f7:c1:5a:37:
0a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:96:3D:18:2E:93:EA:9A:9A:A1:60:FC:96:13:49:EB:F0:BC:4C:73
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/47B3DE8A791611F19822E9EDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.188.0/22
154.208.112.0/24
Signature Algorithm: sha256WithRSAEncryption
81:53:4d:8e:88:8b:33:b6:ff:28:c1:11:69:07:ef:91:9b:ec:
55:c0:ff:4b:56:6c:36:be:1a:df:b6:7b:41:8f:31:97:07:25:
12:d3:2b:e4:5f:df:c6:ca:12:71:ed:13:9c:ec:b5:6b:1a:0b:
a2:90:0e:39:c2:62:bf:24:3f:66:26:e7:04:94:b6:dd:dd:e0:
73:c0:06:76:f8:f9:6b:51:67:5c:aa:66:df:e2:8d:3c:a9:9f:
1f:d0:5a:45:19:fe:d8:3e:2e:ba:b2:0d:3f:8e:17:70:1d:90:
b1:79:86:97:0c:c4:76:ad:ad:88:20:da:a6:88:c9:a4:a8:9a:
a9:e4:28:c9:47:99:8f:c6:d2:ca:f8:31:fa:c3:33:32:72:a3:
54:fb:d9:d8:81:cd:6e:97:dd:73:31:9a:7a:40:d0:8e:c4:aa:
72:a4:2c:5f:b0:2b:94:61:df:24:25:6c:6c:d8:da:fd:e2:f2:
da:9d:47:c8:17:6f:40:a5:1d:d2:2b:e1:6d:98:03:4f:e7:18:
24:e3:d7:2d:47:c8:2d:35:0c:0a:df:dd:91:68:6a:32:e2:36:
bd:89:9e:40:a2:c9:41:a5:d2:26:fc:60:6b:dd:5d:07:88:66:
e2:82:90:20:06:64:79:89:43:e6:0b:57:a7:31:0a:e5:53:47:
20:d0:94:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:55:25 2026 by rpki-client