Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CDE3143684FF11F18349B9EBCE1D38B0.roa
File: CDE3143684FF11F18349B9EBCE1D38B0.roa (raw, json)
Hash identifier: xTddFhAay81mJM9Vbw+xZ+YSC44GtUBj8I5yek3l4tI=
Subject key identifier: C2:06:D4:02:93:30:FD:CC:8C:15:3E:D6:50:30:F7:28:AB:54:D2:4C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DA8A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CDE3143684FF11F18349B9EBCE1D38B0.roa
Signing time: Tue 21 Jul 2026 12:29:23 +0000
ROA not before: Tue 21 Jul 2026 12:29:19 +0000
ROA not after: Wed 19 Aug 2026 12:29:19 +0000
asID: 6079
IP address blocks: 154.221.192.0/18 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 08:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121482 (0x1da8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 12:29:19 2026 GMT
Not After : Aug 19 12:29:19 2026 GMT
Subject: CN=6a5f6623-5b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:90:90:0b:5e:2b:fe:55:59:96:6d:00:b2:50:
07:76:18:e2:11:76:b3:e0:cb:26:3a:14:c9:03:cf:
88:af:5a:7d:e1:f8:48:5e:c8:9b:a7:62:ab:88:4f:
7d:d5:53:f9:66:6e:71:dc:42:e0:09:17:b2:f4:af:
9c:1d:da:c5:ab:96:5f:54:76:8a:14:23:71:3a:be:
34:8a:0d:1b:ae:50:9b:13:f1:fc:ff:ba:03:e3:8d:
67:b4:c0:27:93:9c:bf:3a:14:cc:37:d0:e7:8a:70:
99:9d:28:80:bd:e8:51:48:8b:8a:b5:4a:7d:2f:09:
f6:00:95:6d:21:5e:25:9b:96:af:fe:9f:5e:38:f4:
11:27:3a:c7:c0:48:3f:8c:c9:07:20:a5:38:24:16:
3e:cb:ea:80:1d:f0:ba:07:5d:fe:e2:a8:c6:7e:da:
4c:a1:b5:09:8f:42:c8:91:ac:37:44:7f:80:8b:21:
5e:00:21:20:1c:4d:26:56:38:4f:c3:87:da:fd:9a:
d7:0b:63:ae:f8:64:a1:48:1c:c8:aa:13:f1:58:28:
b9:14:16:a6:1b:56:57:ac:c4:57:f6:e2:9d:d0:6e:
95:4e:84:ea:45:83:83:03:5d:3e:59:43:ee:77:ad:
a6:46:4e:9e:ba:81:a1:1f:98:82:2a:33:de:1a:33:
f0:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:06:D4:02:93:30:FD:CC:8C:15:3E:D6:50:30:F7:28:AB:54:D2:4C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CDE3143684FF11F18349B9EBCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.192.0/18
Signature Algorithm: sha256WithRSAEncryption
b8:99:a4:aa:65:05:e6:3c:9e:a7:6a:25:0b:27:cf:94:d8:b7:
4c:50:dc:fa:c5:4e:19:af:e5:f6:b6:08:1a:0e:c4:da:27:c3:
88:c0:f5:30:ff:b8:f1:5a:fb:68:db:43:8e:b1:6a:9d:3e:54:
19:cf:39:13:f6:b9:63:ce:fe:9c:e1:c2:af:1e:53:19:de:b8:
df:2b:36:36:66:35:3e:2b:95:b3:1e:6d:2d:98:b4:be:dd:78:
a4:f6:a7:6e:b7:0b:10:f9:76:86:9e:40:14:ae:f8:e3:23:96:
af:4f:e9:46:90:04:12:16:c1:c3:a6:4d:c4:08:76:47:7d:82:
a2:6e:bf:57:bb:9b:81:2c:3a:95:74:b3:3e:8f:43:35:6b:82:
55:f6:89:e8:43:42:8c:c8:90:b4:6b:cf:b8:b3:30:1e:e6:04:
81:d0:59:a6:de:a2:4c:e4:ae:80:32:d0:59:80:e4:cc:8c:11:
e6:3e:7c:29:1b:73:39:be:56:2d:0a:cb:bc:3a:2c:55:40:54:
16:1a:90:a2:20:bd:46:72:fb:b1:2f:be:6c:c1:2c:77:e1:5a:
a8:0d:94:f8:db:0e:c3:3d:43:93:d9:f0:2d:22:a9:4f:dc:b3:
42:33:19:4d:0b:cb:17:a6:dd:c2:c5:4e:b1:ec:44:da:b6:de:
66:62:48:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:55:21 2026 by rpki-client