Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9559D6F6834F11F1B03F19A6CE1D38B0.roa
File: 9559D6F6834F11F1B03F19A6CE1D38B0.roa (raw, json)
Hash identifier: nnFmXvM5gbTqwUm3Yu4EZTF6TyjYrcfHqfscsr/xRpI=
Subject key identifier: 16:8C:58:48:0F:91:8F:1B:9C:DD:D6:C9:03:CA:53:B3:B0:B1:E5:02
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D9A5
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9559D6F6834F11F1B03F19A6CE1D38B0.roa
Signing time: Sun 19 Jul 2026 08:55:26 +0000
ROA not before: Sun 19 Jul 2026 08:55:22 +0000
ROA not after: Thu 13 Aug 2026 08:55:22 +0000
asID: 17497
IP address blocks: 154.217.192.0/20 maxlen: 24
154.222.140.0/22 maxlen: 24
154.222.140.0/24 maxlen: 24
154.222.141.0/24 maxlen: 24
154.222.142.0/24 maxlen: 24
154.222.143.0/24 maxlen: 24
154.222.148.0/24 maxlen: 24
154.222.149.0/24 maxlen: 24
154.222.150.0/24 maxlen: 24
154.222.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 08:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121253 (0x1d9a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 19 08:55:22 2026 GMT
Not After : Aug 13 08:55:22 2026 GMT
Subject: CN=6a5c90fe-e44f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9e:2c:9c:87:91:55:5d:19:39:ed:f5:67:24:
ba:50:1a:1e:a9:36:9b:60:fb:61:cd:71:eb:4f:55:
5b:20:a9:92:fd:12:0f:06:0d:1a:13:ce:8b:9b:ac:
87:87:22:c1:09:84:5a:2a:a2:4a:6b:ac:fe:16:5c:
d9:b8:a5:4d:cf:64:a3:6e:30:02:4d:fc:6a:15:76:
e7:aa:52:f7:b6:48:4c:07:a4:ee:a0:52:18:2f:2b:
d3:6d:4a:bb:00:2d:57:c9:7a:e2:e6:03:d6:2a:34:
bd:33:cd:0d:2b:12:7e:9d:e5:3e:86:64:e5:d0:55:
db:2f:42:73:63:87:db:d6:a4:95:1f:92:00:74:11:
61:7a:04:ad:5c:ab:8b:dd:79:b1:64:b4:3f:49:9a:
05:12:e0:c1:6e:16:f0:b4:02:f1:93:55:23:18:5e:
2d:f6:d1:80:8f:57:68:38:6e:59:db:0a:bd:57:ee:
ad:1f:12:7e:46:df:aa:30:31:a2:ec:06:33:92:5c:
ed:1d:89:52:0e:42:24:11:3d:28:46:88:14:5b:b3:
ac:25:6d:40:b7:a4:85:33:62:62:45:fd:80:04:84:
64:6a:b7:25:18:6e:c2:f0:4e:17:0f:9e:70:d8:f1:
25:2c:8a:c7:d9:6c:62:08:19:86:96:39:c3:3b:fb:
f6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:8C:58:48:0F:91:8F:1B:9C:DD:D6:C9:03:CA:53:B3:B0:B1:E5:02
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/9559D6F6834F11F1B03F19A6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.217.192.0/20
154.222.140.0/22
154.222.148.0/22
Signature Algorithm: sha256WithRSAEncryption
87:74:49:69:11:32:e7:15:8c:b8:c8:f3:4e:f0:69:e6:1d:a6:
29:d5:5e:5c:c2:ca:9a:03:be:15:08:cc:1c:6e:73:f3:09:cb:
43:39:52:d9:a5:f7:57:dd:63:70:6e:96:a6:ff:0a:b1:04:a5:
46:0a:d9:e9:85:9b:a0:58:9d:43:f1:96:a6:0b:f9:20:b3:2a:
ba:99:0e:32:0a:25:75:b4:d6:4f:f5:73:b9:89:fe:54:2a:55:
7c:53:8d:3a:d7:99:7a:62:ab:b8:96:70:85:6c:d7:e3:6f:3d:
62:58:86:35:61:23:44:75:3d:7f:09:9c:41:58:fa:3a:dd:cc:
92:db:7e:19:c4:93:35:40:44:07:06:68:ac:c4:1c:e5:40:9a:
7a:f7:e1:25:40:95:55:4e:69:15:08:46:33:dd:5d:f2:bd:57:
a1:67:cc:5c:27:d4:04:bc:a2:b8:6a:ad:1e:d3:17:e7:9a:dd:
74:25:02:71:96:d1:1c:5b:ff:7a:54:87:04:d5:7c:32:54:0c:
57:e3:40:0b:1f:f0:61:9a:99:bc:19:fc:f4:97:bc:22:f7:5d:
5f:77:ab:81:2f:76:39:a5:61:f7:d5:17:a6:37:e8:25:96:98:
5c:6b:73:1b:74:f6:85:b6:41:5e:35:5b:39:15:d8:bc:f4:ce:
10:bb:bb:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:59:51 2026 by rpki-client