Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49209074757411F1B5C9EED3CE1D38B0.roa
File: 49209074757411F1B5C9EED3CE1D38B0.roa (raw, json)
Hash identifier: 5MOy2vdmviHeycGveRXmEwnFoUvAhF78ggE8JZ+qGgI=
Subject key identifier: C9:46:3F:88:A8:1B:56:03:28:A6:F6:B3:89:B1:46:A2:3E:87:D8:7F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D654
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49209074757411F1B5C9EED3CE1D38B0.roa
Signing time: Wed 01 Jul 2026 17:42:53 +0000
ROA not before: Wed 01 Jul 2026 17:42:48 +0000
ROA not after: Fri 18 Dec 2026 17:42:48 +0000
asID: 40115
IP address blocks: 154.205.194.0/24 maxlen: 24
154.205.195.0/24 maxlen: 24
154.205.196.0/24 maxlen: 24
154.205.197.0/24 maxlen: 24
154.205.198.0/24 maxlen: 24
154.205.199.0/24 maxlen: 24
154.205.200.0/24 maxlen: 24
154.205.201.0/24 maxlen: 24
154.205.202.0/24 maxlen: 24
154.205.203.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 08:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120404 (0x1d654)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 1 17:42:48 2026 GMT
Not After : Dec 18 17:42:48 2026 GMT
Subject: CN=6a45519d-80f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0f:b6:9b:c2:b6:94:27:54:c5:c4:60:b9:82:
be:92:9b:bd:da:8c:f4:50:86:0d:98:3f:78:2e:07:
34:c3:08:7d:84:25:89:1f:88:15:f2:1e:9c:b0:32:
81:e7:22:c5:fa:c2:74:0d:af:8e:49:5e:31:03:db:
03:da:58:db:36:25:e2:f0:d8:12:2d:fe:42:8e:6c:
09:00:90:fd:0c:a5:7c:47:68:87:b1:ae:1b:77:b9:
f5:91:56:38:2d:65:67:3d:68:1e:41:b2:ec:15:e1:
4a:a4:42:71:1b:82:70:ae:ce:10:28:f8:34:6e:1a:
dc:05:cc:2f:64:0c:84:80:20:93:91:a8:c6:cd:11:
37:09:18:d0:1b:42:70:f0:ac:25:87:32:16:51:0b:
4b:7f:26:a1:9c:77:43:22:15:6d:2e:48:1e:84:ce:
df:e2:06:d2:bb:d7:64:dd:d7:11:b8:53:8e:e6:a9:
fb:f4:05:51:be:d3:21:5d:80:e8:9d:88:14:a0:2b:
99:e7:91:fe:28:43:2e:fe:b2:16:b1:a7:b8:f2:4a:
af:f1:ae:5d:60:25:2b:73:62:13:e1:01:90:36:4f:
b2:54:0d:46:e8:c7:64:da:3d:b7:e4:46:e7:4b:92:
cc:f0:fd:1c:7f:e1:06:6d:85:a7:95:fe:d4:85:21:
8a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:46:3F:88:A8:1B:56:03:28:A6:F6:B3:89:B1:46:A2:3E:87:D8:7F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/49209074757411F1B5C9EED3CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.194.0-154.205.203.255
Signature Algorithm: sha256WithRSAEncryption
0a:f6:64:4e:52:17:8c:31:17:55:71:fa:1d:f5:91:20:cd:98:
93:f3:ed:3e:77:fa:79:81:3b:1a:61:93:9a:39:a0:11:2d:00:
01:9b:c0:fd:25:12:b2:52:62:ba:7f:00:0e:3e:42:ae:5a:0e:
a8:33:54:52:56:7c:e7:84:8b:75:b4:13:77:1a:66:d4:6e:cb:
ce:ed:41:5e:b9:ca:9e:65:18:53:48:80:c4:8e:fa:f6:61:fe:
ad:db:2a:52:cb:e9:66:89:20:dd:1d:f7:ed:16:8c:6d:04:eb:
37:bf:d2:05:9b:1d:b4:9d:09:57:2e:87:e4:aa:01:a3:a1:89:
d2:6f:5e:63:ab:25:44:0f:ab:68:89:2a:ed:6b:65:63:a5:ca:
d0:1c:5f:02:53:27:3b:da:0a:a1:eb:3e:70:48:c1:9c:3d:c6:
62:66:c4:44:53:e7:39:27:92:6c:f6:cc:be:08:56:13:d0:fc:
1c:51:6a:32:f8:b6:dc:fc:e7:91:5c:79:90:64:63:6d:dd:40:
a3:87:ba:96:d5:ce:65:e3:fe:bf:21:53:42:46:d0:23:0a:bf:
97:f1:60:2a:0d:e2:62:56:21:0b:54:d5:da:f4:fc:89:8e:3d:
33:1b:8a:55:70:01:5c:0f:fd:3b:dd:1b:27:26:c3:f1:02:c1:
ba:11:61:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:40:23 2026 by rpki-client