Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBCA287C7D4511F1BCDAB914CF1D38B0.roa
File: CBCA287C7D4511F1BCDAB914CF1D38B0.roa (raw, json)
Hash identifier: Nr+5DxNg+XCF6I/FJAUho6LvnUZ+XuvhKkTGn5WdeZg=
Subject key identifier: EF:4D:C9:C6:1D:F5:6F:F4:76:CD:BC:15:4D:87:A7:C8:DF:A6:EA:32
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D83C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBCA287C7D4511F1BCDAB914CF1D38B0.roa
Signing time: Sat 11 Jul 2026 16:30:15 +0000
ROA not before: Sat 11 Jul 2026 16:30:11 +0000
ROA not after: Mon 10 Aug 2026 16:30:11 +0000
asID: 17497
IP address blocks: 154.193.16.0/20 maxlen: 24
154.193.16.0/24 maxlen: 24
154.193.17.0/24 maxlen: 24
154.193.18.0/24 maxlen: 24
154.193.19.0/24 maxlen: 24
154.193.20.0/24 maxlen: 24
154.193.21.0/24 maxlen: 24
154.193.22.0/24 maxlen: 24
154.193.23.0/24 maxlen: 24
154.193.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120892 (0x1d83c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 11 16:30:11 2026 GMT
Not After : Aug 10 16:30:11 2026 GMT
Subject: CN=6a526f97-cba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:b7:15:f0:f1:17:b1:b2:2f:8e:3f:e8:57:39:
00:d1:c8:58:eb:f8:57:e0:91:d0:b8:d3:29:c6:66:
2d:e6:a8:28:92:ad:d9:68:41:df:89:cf:02:f5:9f:
bb:a0:d2:83:62:76:7c:e3:26:87:13:11:c5:62:0b:
5c:fb:12:5d:7b:56:01:4d:3e:51:ef:be:16:26:e7:
5e:9e:d2:5d:87:9d:4d:11:4e:af:a1:8a:51:ce:0b:
0a:82:d0:b4:94:e2:2b:7e:43:96:56:e5:c9:11:f8:
e2:a7:62:52:d1:1d:61:e0:bf:94:eb:af:f5:c0:2e:
cd:24:72:29:10:88:d1:04:5b:15:64:1a:31:89:c2:
d8:08:30:99:d0:71:05:b5:a6:b9:d9:19:73:75:94:
9e:c8:e0:8f:60:33:c8:ff:47:e8:5e:b5:6e:31:6d:
ff:86:30:7c:6e:03:2a:b0:b5:10:07:9b:d4:25:c4:
33:11:5f:0a:59:81:d2:dc:01:35:df:27:d8:25:9b:
a8:1a:70:a1:24:cd:4f:4f:0f:91:53:90:5c:5d:30:
1f:e9:43:14:be:a1:a8:e1:0b:13:47:24:4f:43:89:
f4:81:1b:ad:83:0c:e1:cb:22:5a:cb:e4:e7:a5:d6:
6c:24:d8:64:66:cf:ba:c9:9a:da:d1:a1:b0:04:bb:
c2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:4D:C9:C6:1D:F5:6F:F4:76:CD:BC:15:4D:87:A7:C8:DF:A6:EA:32
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBCA287C7D4511F1BCDAB914CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.16.0/20
Signature Algorithm: sha256WithRSAEncryption
d2:37:98:9f:02:9d:49:fb:dd:05:90:ec:6b:5b:0e:b8:8c:ff:
a3:ca:32:09:c8:80:6d:2f:a0:e3:4d:93:47:c8:86:c1:99:5a:
28:99:f3:81:e6:03:c9:b1:47:3c:d8:b5:79:65:dd:94:a3:a8:
80:65:45:bb:27:39:48:21:3b:78:8d:8b:7b:94:fc:0f:4d:9a:
c4:f1:44:16:d2:5e:1a:1c:f9:9c:ca:ae:a8:54:9d:b6:f7:32:
44:37:91:97:4e:b0:a2:c5:7b:8b:58:cd:d3:22:6e:af:42:11:
e2:19:c1:d0:15:62:c7:93:c5:40:ad:d0:8c:1a:40:ff:4d:3d:
90:91:f3:fa:6a:30:41:0f:c3:8c:32:c8:7c:93:9d:37:f3:97:
95:f5:d1:31:39:28:4c:a0:55:be:c4:70:a9:07:62:13:ac:c5:
e3:8e:cd:48:6b:26:eb:64:2c:b5:51:aa:43:36:b5:5b:9b:7b:
8c:97:c5:2b:c3:6f:68:83:a5:3e:e5:bb:e4:72:79:2b:3b:25:
d4:3d:31:7c:12:7f:a7:81:b1:e4:62:b9:2e:5b:45:70:9d:2f:
31:4a:2b:92:64:07:a9:ab:d3:25:65:b2:4d:6a:9a:22:f6:d9:
c7:37:1e:7c:86:7f:51:12:22:f8:ed:c6:7d:a2:4e:61:51:06:
f4:7b:65:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:20:57 2026 by rpki-client