Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC2F34F8866711F1B1FCFC07CF1D38B0.roa
File: CC2F34F8866711F1B1FCFC07CF1D38B0.roa (raw, json)
Hash identifier: CC03Q5h/1kUgTQySZNToN0YFT1GjsRd5vGyHBKhXhiE=
Subject key identifier: E5:8B:38:D0:40:54:D2:05:9A:FB:1F:43:99:4C:EE:76:2E:45:E0:E5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DB0D
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC2F34F8866711F1B1FCFC07CF1D38B0.roa
Signing time: Thu 23 Jul 2026 07:26:19 +0000
ROA not before: Thu 23 Jul 2026 07:26:15 +0000
ROA not after: Sun 30 Aug 2026 07:26:15 +0000
asID: 137899
IP address blocks: 154.201.64.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121613 (0x1db0d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 23 07:26:15 2026 GMT
Not After : Aug 30 07:26:15 2026 GMT
Subject: CN=6a61c21b-cb52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:71:3d:a7:be:4f:20:67:2a:8d:d9:a3:5f:27:
db:54:b9:0c:fb:e2:c6:93:ce:a2:c9:c5:98:be:97:
6a:c5:80:90:ec:07:9f:2b:e5:0a:9c:75:69:cd:8a:
b0:e2:10:1b:f4:35:85:7b:3c:a4:ff:f9:c9:5e:18:
5b:71:5c:40:b8:f0:a2:ec:31:e6:11:09:45:93:a6:
20:e2:4a:3e:e2:53:88:04:36:da:db:77:5d:1d:e7:
c9:60:26:b1:f0:1d:6f:a4:d3:db:62:a5:5e:fa:7c:
2a:fc:25:4d:a5:76:e5:84:3b:9e:79:91:83:e9:26:
3e:02:99:24:a3:3e:1b:4e:29:9d:39:bd:cc:d8:67:
fd:d1:73:c3:18:c6:6c:ad:19:21:41:80:ed:c4:57:
6d:88:4c:c7:f1:b1:02:c8:97:d1:4b:4a:95:59:60:
b6:b4:e7:bc:84:88:82:5a:a1:11:4d:f4:b0:9b:83:
9d:05:7f:58:10:52:ee:4c:64:c2:f8:05:cf:99:6e:
80:d2:b4:8e:3b:ce:09:51:b8:27:9e:2d:32:19:92:
8e:c7:0c:9d:18:7f:d7:78:ed:19:db:76:b7:7a:00:
e4:1f:d5:a4:22:ed:cb:cd:30:3a:af:2c:28:4e:e6:
c3:5a:49:2e:27:25:e3:58:a5:9e:cf:45:98:d8:df:
ac:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:8B:38:D0:40:54:D2:05:9A:FB:1F:43:99:4C:EE:76:2E:45:E0:E5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CC2F34F8866711F1B1FCFC07CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.201.64.0/19
Signature Algorithm: sha256WithRSAEncryption
45:d1:a4:3e:13:32:56:4b:83:8e:42:16:ba:77:b7:e5:d1:2b:
03:01:56:e1:0a:37:6d:7f:c0:be:46:37:38:b4:f6:7b:e6:a4:
dd:ce:25:69:b6:99:8a:ba:1d:2c:9e:a7:31:74:f6:eb:f1:66:
d7:a7:e4:94:12:25:97:12:e4:f3:25:a6:86:27:63:5d:aa:fe:
d4:32:70:40:58:0a:4c:4f:d3:4d:5f:f8:1b:25:d8:18:2a:28:
c0:25:4f:0e:d0:f9:14:43:93:82:da:cf:07:d7:c1:2d:dd:ed:
47:6a:72:b7:15:65:ee:65:d6:28:12:da:ee:50:86:76:b8:2e:
5b:42:a4:c9:f2:aa:98:ca:5a:d1:f0:19:37:4a:31:36:6e:ad:
0f:ea:de:2d:aa:06:b2:e2:8c:2e:02:e2:a6:06:08:23:fb:2c:
8f:6c:ff:2e:1c:b3:08:59:b7:89:b8:e7:54:1b:3f:29:5d:f5:
4e:df:18:a1:28:2b:3a:65:db:97:01:10:76:b1:72:1d:ac:f1:
25:84:39:81:2b:81:a7:ab:5f:1f:b4:b1:e3:43:94:f3:87:f9:
9c:47:da:36:1d:f7:15:74:9b:77:e7:5d:eb:bc:35:dc:cc:b3:
2f:32:bf:3c:75:85:48:00:ff:e1:8e:c7:dd:05:b0:e9:c9:33:
c7:63:d9:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:58:23 2026 by rpki-client