Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/835BC16081C611F18B0B07D0CE1D38B0.roa
File: 835BC16081C611F18B0B07D0CE1D38B0.roa (raw, json)
Hash identifier: WTEcQlY0tZXAzefHIZjGFhOxZFMkeY+tbiZfLN0W5no=
Subject key identifier: 5A:24:98:33:ED:31:91:6A:CA:94:7E:79:3B:56:EB:AB:DE:BC:A2:C8
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D97B
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/835BC16081C611F18B0B07D0CE1D38B0.roa
Signing time: Fri 17 Jul 2026 10:01:44 +0000
ROA not before: Fri 17 Jul 2026 10:01:40 +0000
ROA not after: Mon 24 Aug 2026 10:01:40 +0000
asID: 153706
IP address blocks: 154.89.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121211 (0x1d97b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 17 10:01:40 2026 GMT
Not After : Aug 24 10:01:40 2026 GMT
Subject: CN=6a59fd87-90bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4c:47:05:e7:ae:a8:6a:49:c2:db:5d:c1:26:
8a:ca:77:73:49:be:fc:b2:b1:f4:f2:6b:84:ad:1f:
4a:41:51:4b:65:82:0e:f5:fb:81:23:81:f9:8f:d8:
9c:7c:20:f1:0b:a5:a7:c1:c5:b4:f0:08:a4:39:3f:
6e:9a:c6:40:87:19:6f:42:47:17:58:1b:92:03:4b:
79:62:ec:42:c8:c7:e4:cb:b8:a1:1e:13:2a:cd:09:
a2:2d:45:43:34:92:bb:1d:cf:54:00:1e:a9:48:70:
d1:c3:ed:3b:e3:bd:a7:34:b3:73:73:c2:42:40:10:
29:ad:8c:fc:b5:54:66:bf:a3:e8:14:a5:60:aa:1c:
70:56:d9:c3:bf:17:6e:8f:61:9a:b5:9f:92:1d:d1:
c3:05:26:dc:62:d3:20:20:a3:74:5b:48:79:ca:6c:
8a:fe:d1:af:e4:e9:f7:9d:88:1a:7c:be:4c:04:68:
fe:48:bc:bb:24:19:9e:47:ac:9b:f6:8b:86:b3:1e:
0d:54:0b:c4:cf:08:b4:b5:33:28:06:9f:26:a6:6f:
bf:6d:6b:2b:fd:ce:52:c6:46:70:16:d9:1e:8f:8e:
51:e1:d2:79:65:05:e4:69:09:70:45:fa:7a:31:c7:
7c:e8:b1:fb:28:e4:02:24:a4:e1:72:9b:aa:6d:d7:
72:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:24:98:33:ED:31:91:6A:CA:94:7E:79:3B:56:EB:AB:DE:BC:A2:C8
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/835BC16081C611F18B0B07D0CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.194.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:5f:53:ae:bf:a2:47:75:dc:3f:72:17:90:14:b4:36:2a:da:
2c:72:34:b4:18:d0:71:9a:6a:88:e5:2e:a6:a4:6a:4d:af:7f:
06:21:70:ff:6b:e7:f2:3c:ff:31:b7:e7:49:32:f6:6f:63:c2:
d5:ed:aa:f9:24:61:13:0d:59:55:ad:3e:d0:21:c5:80:6d:d1:
b8:41:df:f8:8d:7a:75:26:73:cb:44:93:43:33:7e:72:4b:39:
90:3f:1a:cd:9b:33:4c:23:73:e3:cf:e0:f1:06:f8:6e:59:57:
56:ee:bb:a0:e0:ab:33:d6:7f:2d:de:ab:68:83:de:8b:2e:94:
eb:5a:b1:66:1b:a7:4e:04:b4:c7:e7:30:a8:11:90:69:6c:c5:
df:22:af:31:20:90:39:5c:57:42:04:52:2b:8c:3f:93:0c:db:
98:23:69:27:46:a6:78:06:c2:e8:01:32:ef:17:74:f0:e9:67:
3b:d0:7b:7b:c9:19:b7:91:c8:b4:c5:ca:0d:c9:1a:c8:cf:f9:
ca:78:9b:22:a2:a9:42:fc:ee:52:19:69:60:ad:24:d2:2d:d8:
27:84:73:54:27:16:3c:61:c1:4b:4b:63:29:29:e2:f7:dc:2b:
62:2e:e1:a5:db:83:33:38:82:67:8a:8f:47:20:36:3d:02:cf:
89:3c:db:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:27:22 2026 by rpki-client