Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF4B6AE2707A11F1A8788C1ECF1D38B0.roa
File: CF4B6AE2707A11F1A8788C1ECF1D38B0.roa (raw, json)
Hash identifier: d8sInu5yhqHOEhTSQpJYgvVfmS9RtdT7iraXZFoXVbQ=
Subject key identifier: 60:4F:2C:E8:97:88:88:0C:AF:7D:58:B8:94:46:30:B0:A3:30:19:9C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D52E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF4B6AE2707A11F1A8788C1ECF1D38B0.roa
Signing time: Thu 25 Jun 2026 09:46:59 +0000
ROA not before: Thu 25 Jun 2026 09:46:55 +0000
ROA not after: Wed 29 Jul 2026 09:46:55 +0000
asID: 204770
IP address blocks: 154.193.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120110 (0x1d52e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 25 09:46:55 2026 GMT
Not After : Jul 29 09:46:55 2026 GMT
Subject: CN=6a3cf913-6c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ec:f0:3c:4a:0d:1b:af:d5:e1:bb:3f:df:ae:
7e:f7:45:b4:c0:22:3c:7c:d1:6d:7d:e8:f2:24:68:
83:f3:73:f1:12:11:e0:33:a1:95:ef:63:95:a0:37:
85:ce:fc:ea:62:c0:5d:56:3c:42:36:0e:ae:6f:b2:
69:08:6c:08:3a:30:ba:4f:7e:49:42:1b:68:a3:9b:
59:68:32:b2:af:d6:06:62:83:74:9a:68:d4:2a:99:
5b:4c:90:68:6c:5e:c9:95:86:a6:a2:dc:2b:c4:7b:
bf:fb:fe:ef:a4:a5:e1:22:56:f9:6e:28:98:fd:14:
94:fe:4d:4f:05:13:e4:1d:9f:da:ea:c6:3e:9a:4b:
c8:fe:9b:1a:f8:37:75:39:91:63:da:b2:d9:91:c8:
40:69:13:14:bc:0d:12:31:1b:18:5e:0f:d2:ac:f2:
8b:36:aa:94:81:cc:63:9a:33:fe:b4:4c:52:7a:8c:
35:e4:ab:db:e7:45:fe:34:ea:02:e7:c7:f3:a6:33:
8e:ec:d2:06:56:96:b6:fe:15:6c:95:9d:85:78:5f:
50:cd:4d:01:2e:78:5c:e9:bc:3e:c6:54:62:57:a0:
6d:71:cf:2d:4d:06:71:56:c9:52:9f:13:1b:9e:48:
af:68:34:e4:82:be:96:33:30:97:45:8c:73:94:82:
94:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:4F:2C:E8:97:88:88:0C:AF:7D:58:B8:94:46:30:B0:A3:30:19:9C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CF4B6AE2707A11F1A8788C1ECF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.55.0/24
Signature Algorithm: sha256WithRSAEncryption
36:59:e8:59:19:bc:c8:ad:03:74:c5:a4:26:d0:32:f1:10:16:
f6:ff:9a:7f:34:e8:33:42:3d:26:86:e6:c0:31:af:10:b9:9a:
7e:d0:6b:b7:47:3a:31:81:e6:fa:70:ec:16:27:20:d2:bb:60:
f2:67:61:91:ef:6b:85:f2:6f:d5:f3:78:f2:8a:2a:7c:8d:82:
99:f8:d1:52:77:8d:fe:88:9a:2a:6c:67:47:a6:04:83:e6:39:
54:4b:57:28:b7:7b:02:4a:7f:6a:97:02:36:96:91:45:6f:ba:
68:74:62:fd:54:40:38:f8:01:f6:ef:af:6a:1c:cc:5c:14:eb:
be:dc:cf:b0:9f:c1:ae:62:92:9a:b0:e9:a5:73:a1:b2:37:8b:
7f:b9:97:7b:89:4a:2a:45:cd:f8:3f:99:77:71:33:47:65:de:
93:58:97:f8:79:10:bb:08:f7:52:0a:ae:45:89:9f:6d:62:ad:
5a:1d:2c:23:b5:de:35:4e:43:2b:21:ff:80:28:63:77:b7:87:
9a:82:a9:46:9b:c2:87:93:15:6c:13:56:25:c6:0d:14:ad:d7:
3e:22:11:61:d8:46:e5:ff:5c:03:0b:40:79:99:36:48:25:8b:
3b:2d:af:b7:2b:3b:fd:e6:69:89:56:0a:fb:7c:5a:50:b2:84:
a8:df:5a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:23:04 2026 by rpki-client