Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE068F0884DC11F1BF13B11ACF1D38B0.roa
File: AE068F0884DC11F1BF13B11ACF1D38B0.roa (raw, json)
Hash identifier: CSrsM8jyUXzs8VOCgy1CDtb/Bq76RXRPp0LQ4yRFXhc=
Subject key identifier: 33:31:15:D9:D8:85:F1:5C:76:97:28:62:D8:80:00:DE:24:68:48:2A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DA5A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE068F0884DC11F1BF13B11ACF1D38B0.roa
Signing time: Tue 21 Jul 2026 08:17:57 +0000
ROA not before: Tue 21 Jul 2026 08:17:54 +0000
ROA not after: Fri 21 Aug 2026 08:17:54 +0000
asID: 154132
IP address blocks: 154.198.10.0/24 maxlen: 24
154.208.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121434 (0x1da5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 08:17:54 2026 GMT
Not After : Aug 21 08:17:54 2026 GMT
Subject: CN=6a5f2b35-ab75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f7:70:b9:a0:f3:94:98:14:46:71:7f:e7:c8:
ae:9c:79:e7:fa:7a:0d:5f:20:56:26:8e:db:95:c4:
12:f2:71:1e:53:b2:d3:88:4f:63:a7:13:e6:a5:e7:
94:aa:a6:7c:a1:f9:29:c5:8d:e5:05:e9:39:f3:94:
81:5d:b9:f0:23:b1:b2:b9:80:f9:ec:3c:f9:e2:af:
ff:2c:26:e3:c1:cb:39:fe:5d:1f:40:71:ba:60:ad:
78:66:f7:70:cc:c8:c9:a3:11:61:44:fb:e9:14:a5:
9b:34:62:64:23:67:fd:3b:fa:61:67:aa:74:ae:38:
a7:50:b6:04:43:93:07:4e:43:96:89:a3:de:1b:2e:
a4:8b:fa:0e:8e:6a:6d:fd:97:8c:a5:fd:ec:26:7f:
0b:e4:6e:0c:8c:91:58:09:3c:ea:e9:41:61:6e:35:
bc:af:6c:40:d8:5e:6d:e3:56:fb:45:2e:b0:79:52:
28:b6:87:c0:50:a5:fd:8c:ef:88:9f:39:47:1b:b8:
b1:46:db:2d:5e:7d:3d:19:e7:18:2a:60:b0:47:eb:
07:bb:f7:2b:d6:9d:f9:a9:05:32:14:b8:30:d8:c8:
66:78:5a:33:10:b7:89:f4:a3:92:10:94:5a:4f:d3:
4c:e2:ad:3f:aa:58:ab:c9:d7:ff:67:c7:cb:9a:e5:
90:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:31:15:D9:D8:85:F1:5C:76:97:28:62:D8:80:00:DE:24:68:48:2A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/AE068F0884DC11F1BF13B11ACF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.10.0/24
154.208.67.0/24
Signature Algorithm: sha256WithRSAEncryption
23:39:e5:67:2a:c0:b9:c9:10:f2:94:fe:90:a8:a3:10:53:30:
55:f8:64:73:94:f9:15:fd:c1:49:21:9e:fc:2b:45:0d:a1:a9:
c4:9b:02:fa:02:e5:04:91:b5:e3:6b:9c:72:bd:ed:1c:3e:b3:
0f:57:a6:49:b0:78:85:fc:62:42:39:a2:59:94:61:c5:a9:33:
2a:08:64:f7:10:4d:70:26:db:5c:4d:62:f5:fe:76:35:3e:85:
3c:93:eb:7a:c3:c3:e2:25:bd:77:01:53:d8:73:21:ab:91:2b:
39:0b:e9:f0:e7:5f:0b:ad:97:f8:4d:87:2d:d6:41:3a:28:6d:
4b:83:6a:a6:b1:a8:cd:f3:98:f4:a2:90:47:ef:ee:5d:69:63:
f5:be:6f:c6:60:21:ab:e7:fb:33:6b:47:a3:4b:e2:e3:6b:8d:
d7:51:f3:ad:bb:a8:10:3f:dd:f9:40:cb:a5:f9:d4:6c:e8:a2:
90:9e:f4:7b:e6:12:c5:6d:5e:44:fb:e0:b9:c7:aa:eb:ff:df:
2a:cc:f9:a5:27:8b:06:56:6a:2b:7b:95:00:51:0a:91:14:3d:
86:ff:af:88:5c:9b:84:45:f4:c5:de:1c:75:8c:52:73:88:8d:
80:24:f8:2f:2e:da:73:93:ea:78:94:f0:a6:c2:3c:3c:7a:8a:
95:2e:c1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:50:19 2026 by rpki-client