Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A6015367C5911F1BB0F6AFECE1D38B0.roa
File: 4A6015367C5911F1BB0F6AFECE1D38B0.roa (raw, json)
Hash identifier: c/YiBZRZ/ANv6L9VEjJF7nDwJf4cPGdlZJ8f7e+LhxM=
Subject key identifier: DE:20:15:5D:B7:13:43:0E:22:79:E1:5B:23:6B:EE:5D:BD:AB:FC:24
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D80D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A6015367C5911F1BB0F6AFECE1D38B0.roa
Signing time: Fri 10 Jul 2026 12:17:17 +0000
ROA not before: Fri 10 Jul 2026 12:17:12 +0000
ROA not after: Mon 10 Aug 2026 12:17:12 +0000
asID: 54801
IP address blocks: 154.204.0.0/24 maxlen: 24
154.208.12.0/22 maxlen: 24
154.208.16.0/20 maxlen: 24
154.212.128.0/24 maxlen: 24
154.215.0.0/24 maxlen: 24
154.218.0.0/24 maxlen: 24
154.221.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120845 (0x1d80d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 10 12:17:12 2026 GMT
Not After : Aug 10 12:17:12 2026 GMT
Subject: CN=6a50e2cd-b7c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f7:f7:fc:7c:0b:98:9b:17:ce:8b:74:69:8d:
e7:4a:c6:19:33:89:55:56:f8:ab:e2:13:fd:87:ca:
1e:5c:9a:11:3e:db:fe:08:9f:c0:eb:07:6d:34:d7:
df:ff:fa:9e:5b:36:6d:3a:88:31:0e:4c:03:4e:03:
e0:e7:05:f0:2d:c4:4b:0d:33:7d:00:b9:aa:bf:73:
2e:31:1c:16:b0:a4:71:03:7a:35:85:19:4a:53:81:
af:ee:28:12:48:ac:8d:ce:fb:96:ae:f5:27:9d:1f:
b1:cc:8a:0c:ba:5e:85:e1:0e:e1:ef:78:3b:48:90:
53:11:b7:e0:71:bb:3f:24:87:79:f8:18:c3:67:8c:
4c:ab:36:52:1c:c0:9e:f8:ad:b7:58:31:02:b5:52:
88:13:70:3d:39:e3:91:e8:d0:89:7b:3a:39:13:c1:
ba:ae:81:e8:43:88:e7:78:6a:ba:bf:fd:4a:a8:b0:
64:e3:aa:b4:a0:e2:6b:3c:46:22:95:fc:cc:bb:81:
03:8d:62:ec:b3:0a:0e:8c:c7:1d:57:c0:f8:30:a8:
9f:fd:17:b6:7d:9d:d9:b7:70:45:45:45:64:8e:26:
10:d6:b2:50:17:82:60:29:aa:86:07:b0:87:4e:d6:
04:d6:b1:5c:c9:4a:d1:6c:a8:d1:6d:1a:8b:f1:5c:
71:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:20:15:5D:B7:13:43:0E:22:79:E1:5B:23:6B:EE:5D:BD:AB:FC:24
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4A6015367C5911F1BB0F6AFECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.0.0/24
154.208.12.0-154.208.31.255
154.212.128.0/24
154.215.0.0/24
154.218.0.0/24
154.221.0.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:8e:cd:fe:f7:8a:a2:85:a2:ab:7c:76:bb:63:fd:44:8b:90:
e9:e8:bc:44:b3:e1:f3:45:0c:34:32:b3:48:1b:60:77:7a:62:
08:5d:4c:05:83:b8:3c:e0:10:0f:d6:55:9b:01:75:38:2c:ef:
37:cb:82:06:bb:0e:0a:8b:99:4e:93:a0:80:b8:8d:1b:1a:d0:
b5:4e:94:e0:6d:5e:10:d0:af:95:c0:13:70:c8:a6:c0:e6:b1:
94:b0:6c:0e:76:27:15:d2:5c:61:1d:74:a5:86:40:b6:e4:59:
fa:51:30:5d:53:ab:1f:11:78:f1:71:d2:d4:56:d4:59:41:15:
d2:ac:a2:4b:7b:9e:44:d2:5c:8e:90:fc:a9:f6:3f:42:94:e5:
c1:35:2d:e6:88:27:a7:87:28:61:56:84:42:63:95:d9:f0:b5:
d6:91:ed:8a:ae:53:8f:47:25:1b:62:5d:52:80:92:25:ce:39:
42:b9:67:d0:41:7f:e5:1c:19:25:51:7d:90:6c:45:fb:10:7c:
f2:e2:ad:f3:18:75:4f:48:74:cc:39:b8:15:99:36:52:ee:47:
60:f7:f8:1d:2a:2f:a5:09:7c:c3:dc:91:ae:21:b4:30:3f:b6:
6f:fb:db:b6:ed:2d:6c:34:23:4a:8d:13:aa:66:c2:44:bb:87:
e0:42:a6:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:49:57 2026 by rpki-client