Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F572870757211F1AB1C04CACE1D38B0.roa
File: 8F572870757211F1AB1C04CACE1D38B0.roa (raw, json)
Hash identifier: 8YWsJVcGwl/MVSnxhQiqkHuZHRvx3K65LjL+Y9Vr6k8=
Subject key identifier: 97:27:5D:6A:CD:9F:67:36:6E:8C:0B:21:80:F3:B7:14:0E:0C:B6:CC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D650
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F572870757211F1AB1C04CACE1D38B0.roa
Signing time: Wed 01 Jul 2026 17:30:32 +0000
ROA not before: Wed 01 Jul 2026 17:30:26 +0000
ROA not after: Fri 18 Dec 2026 17:30:26 +0000
asID: 40115
IP address blocks: 154.205.214.0/24 maxlen: 24
154.205.215.0/24 maxlen: 24
154.205.216.0/24 maxlen: 24
154.205.217.0/24 maxlen: 24
154.205.218.0/24 maxlen: 24
154.205.219.0/24 maxlen: 24
154.205.220.0/24 maxlen: 24
154.205.221.0/24 maxlen: 24
154.205.222.0/24 maxlen: 24
154.205.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 08:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120400 (0x1d650)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 1 17:30:26 2026 GMT
Not After : Dec 18 17:30:26 2026 GMT
Subject: CN=6a454eb8-97df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d9:16:d8:cc:e9:d2:d2:f5:e7:7a:42:3d:0c:
3d:b4:9f:a1:0b:9a:c5:38:ac:b0:94:10:6d:10:15:
d3:79:6a:65:c3:8d:01:8b:3a:9a:99:02:91:cd:ad:
30:87:07:fc:56:26:65:3a:ef:87:d5:40:f8:4f:86:
ad:89:7c:17:7c:6e:0b:2c:71:10:62:ec:b1:1d:bd:
58:27:e2:1b:c6:cd:df:5f:2e:5e:52:9b:23:22:08:
29:95:55:12:b7:87:7e:52:b7:1b:c2:c5:30:48:5a:
be:b2:de:ad:e6:86:83:d1:87:a3:b0:f8:e8:63:3b:
0c:5e:c3:7d:aa:f2:a2:56:ae:79:34:01:31:a1:68:
9e:91:d9:b6:19:41:3c:2f:77:a1:9f:f7:c0:b9:ba:
bf:02:8b:9c:ae:e5:8f:e8:c7:58:6e:9e:a2:5f:b8:
cd:81:81:fe:82:14:8f:4c:fe:1f:cb:c7:c9:5c:6d:
cf:72:10:a1:49:54:ec:1c:b7:50:83:ab:3e:fe:28:
41:d0:ed:17:2d:49:91:c1:ef:c8:62:36:97:ee:13:
04:35:21:79:73:3a:3d:1f:0d:f5:06:1c:2e:ed:96:
da:a4:7d:0e:bd:05:6a:cd:57:aa:da:33:da:eb:f7:
87:bc:33:6f:cb:6e:c8:94:b6:07:df:f2:b3:5b:3a:
a1:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:27:5D:6A:CD:9F:67:36:6E:8C:0B:21:80:F3:B7:14:0E:0C:B6:CC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/8F572870757211F1AB1C04CACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.214.0-154.205.223.255
Signature Algorithm: sha256WithRSAEncryption
c9:71:89:b1:32:fe:26:5d:7c:7f:12:0c:79:0b:6a:76:1c:b0:
65:6c:8a:f0:4f:7a:ea:43:e4:6f:72:89:53:51:63:52:b0:e9:
95:a3:d8:6a:ed:21:46:d8:78:61:d6:1c:45:cb:0a:ae:d9:4b:
46:11:56:c5:13:cc:69:e6:c6:2d:65:36:1d:f6:28:09:c0:40:
04:41:11:0d:5c:52:45:63:61:0c:de:82:ad:bd:61:90:28:3b:
33:d0:64:4f:b2:1c:e3:7d:86:38:76:16:e7:28:09:0e:a1:45:
ce:88:7e:c3:a8:97:32:9c:a8:d9:e0:ec:c2:c6:d9:24:55:35:
7b:61:28:ad:bd:c4:ee:d9:c3:cc:0b:0a:e6:c2:1d:11:ed:0b:
2d:a5:3e:6b:12:bc:89:e5:c4:49:ff:4d:5a:48:46:10:f5:20:
19:be:7d:71:69:1c:f6:f4:45:aa:1f:af:a4:fd:33:9e:bb:3a:
66:5a:2a:87:e1:ac:64:f0:b8:a7:a6:e1:10:d4:41:03:a8:97:
03:d9:98:74:5a:50:5f:3a:15:14:9a:04:f0:e1:5d:fd:a7:b0:
67:fc:03:24:ca:cd:50:14:37:8c:92:d5:a1:50:45:e4:b2:a8:
cb:04:54:01:3a:c4:63:20:9f:3c:13:38:60:7c:a5:f7:28:0e:
ea:49:26:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:30:48 2026 by rpki-client