Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBF2D15873E211F1AC382ECBCE1D38B0.roa
File: CBF2D15873E211F1AC382ECBCE1D38B0.roa (raw, json)
Hash identifier: UBVQU3zyrQuCKGYXbphzQbovA84QJ6G3M4mlfNOGa9k=
Subject key identifier: 77:85:39:EB:F4:CE:A2:72:CF:3D:3A:5C:D9:FF:C2:41:32:EF:BB:57
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D60A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBF2D15873E211F1AC382ECBCE1D38B0.roa
Signing time: Mon 29 Jun 2026 17:48:55 +0000
ROA not before: Mon 29 Jun 2026 17:48:50 +0000
ROA not after: Mon 03 Aug 2026 17:48:50 +0000
asID: 215925
IP address blocks: 154.90.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120330 (0x1d60a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 29 17:48:50 2026 GMT
Not After : Aug 3 17:48:50 2026 GMT
Subject: CN=6a42b007-d436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:c7:ce:90:dd:d8:af:dd:af:dd:98:d3:27:2e:
7b:ca:53:f8:5d:76:51:64:5a:e1:d7:a1:9a:1c:60:
b2:8b:95:7b:8a:6d:ff:08:ab:ee:c6:45:69:79:7e:
d5:b3:66:59:7f:3d:8a:1c:53:fe:ce:d2:58:57:c3:
e4:a0:f7:63:ab:59:3c:b7:2d:25:ac:8b:8c:58:a0:
43:d3:bf:5b:4f:8e:f1:4e:5d:88:03:94:8e:52:63:
ca:fd:04:9f:45:36:75:ba:22:51:c6:eb:82:86:2d:
28:6a:5c:7c:85:2b:90:26:bb:e8:2d:e8:8a:7c:cd:
88:85:11:d1:7f:a2:d5:fd:b1:c3:02:ef:c2:91:60:
30:8a:19:75:b0:05:80:80:0f:90:12:bc:0a:d3:2c:
bd:f8:7d:09:ee:f1:2d:96:db:53:b7:55:56:c1:ad:
7a:5b:2f:54:ce:4f:27:5a:f7:c8:ae:8f:6d:86:73:
0b:ba:5d:0e:08:35:d9:89:cc:44:98:23:f4:0d:a1:
0a:c3:7e:a3:07:7f:62:93:76:12:d8:0a:96:01:74:
32:0c:dc:6b:c8:54:12:51:55:c8:dd:bf:0d:5e:4f:
80:28:14:86:27:17:c7:ba:4a:ee:de:54:d6:db:a7:
08:1b:b9:02:1c:e4:c7:1b:0f:5d:26:29:f2:d4:51:
f7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:85:39:EB:F4:CE:A2:72:CF:3D:3A:5C:D9:FF:C2:41:32:EF:BB:57
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CBF2D15873E211F1AC382ECBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.90.70.0/24
Signature Algorithm: sha256WithRSAEncryption
20:cb:53:2b:c5:13:c0:b6:7e:e6:09:82:6d:95:6f:1d:8d:56:
fb:f8:b5:f9:a0:82:09:40:0e:86:45:d2:d7:64:ba:c7:46:3a:
75:59:98:cf:03:26:d6:a7:2b:8a:e2:fa:69:b9:f2:c9:6e:fa:
4c:7b:5c:4c:dc:80:57:4b:d5:53:3d:63:71:8e:19:ff:3f:bd:
3f:3e:06:69:11:17:af:e7:b0:07:70:b4:04:3d:3d:4b:94:00:
ae:97:5b:08:8e:d3:55:40:15:bb:9a:74:15:fc:3d:1d:e4:58:
63:c7:ce:9b:bb:57:2c:ff:b1:d4:e0:b2:a6:5f:22:73:be:08:
87:95:2d:08:de:03:63:fd:12:98:18:be:7e:6b:12:e0:fb:21:
9f:80:c5:c1:83:f8:bc:58:35:e8:5e:1e:2f:9b:ee:bb:3d:5c:
b6:b9:84:d8:20:6e:e0:0e:d4:6b:bf:80:a9:c0:67:f2:9a:83:
9b:e9:00:21:0f:04:fb:49:2c:f8:17:1c:7c:cf:eb:ee:0e:44:
00:eb:fb:da:e9:c5:14:9c:20:6c:2b:12:84:fe:9e:06:74:01:
83:68:1b:c6:82:d2:e6:62:b1:36:56:58:17:eb:d1:64:38:e5:
44:01:8f:29:70:b7:09:d3:d1:ba:0b:46:cd:49:5e:c2:16:b4:
90:71:77:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:48:28 2026 by rpki-client