Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CFB2DB7484F111F1BA6D3918CF1D38B0.roa
File: CFB2DB7484F111F1BA6D3918CF1D38B0.roa (raw, json)
Hash identifier: gA0YbdItssQkhFW7cic1KrX9OsE8T6THnePSS1ez/P0=
Subject key identifier: 11:22:D0:2A:CD:2C:EA:33:8B:AF:FB:AF:2D:8F:F4:66:AE:65:2A:E5
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DA76
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CFB2DB7484F111F1BA6D3918CF1D38B0.roa
Signing time: Tue 21 Jul 2026 10:49:13 +0000
ROA not before: Tue 21 Jul 2026 10:49:09 +0000
ROA not after: Mon 07 Sep 2026 10:49:09 +0000
asID: 63099
IP address blocks: 154.193.2.0/24 maxlen: 24
154.193.35.0/24 maxlen: 24
154.196.179.0/24 maxlen: 24
154.196.180.0/24 maxlen: 24
154.200.26.0/24 maxlen: 24
154.200.43.0/24 maxlen: 24
154.200.51.0/24 maxlen: 24
154.200.52.0/24 maxlen: 24
154.200.131.0/24 maxlen: 24
154.200.140.0/24 maxlen: 24
154.200.142.0/24 maxlen: 24
154.200.154.0/24 maxlen: 24
154.200.156.0/24 maxlen: 24
154.200.157.0/24 maxlen: 24
154.200.158.0/24 maxlen: 24
154.200.159.0/24 maxlen: 24
154.200.160.0/24 maxlen: 24
154.200.161.0/24 maxlen: 24
154.200.162.0/24 maxlen: 24
154.200.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121462 (0x1da76)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 10:49:09 2026 GMT
Not After : Sep 7 10:49:09 2026 GMT
Subject: CN=6a5f4ea9-69ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c3:e9:24:41:06:4c:4b:96:33:6b:c9:61:ff:
8d:d7:b3:1a:ee:e3:23:f1:4a:8f:ee:56:c5:80:4d:
e9:9a:54:30:04:72:bc:fe:59:23:ab:5e:7a:1d:ab:
45:49:6d:a7:89:d5:d3:fd:2f:30:09:50:06:31:b0:
58:31:04:6b:e3:5b:10:40:29:98:16:54:7f:58:77:
77:2d:bc:ab:71:ab:55:9e:76:f2:04:36:f3:00:08:
57:5e:79:33:72:ba:28:4b:7f:32:91:e7:83:5c:57:
81:ec:7b:77:b4:40:b5:2c:c5:5c:77:27:40:85:34:
d8:18:ee:2f:f8:89:84:41:56:a4:38:6c:fd:70:4f:
ac:97:31:d6:19:fd:22:ee:c7:5d:1a:1b:3d:92:99:
80:c9:76:94:21:d6:93:10:80:97:23:c8:26:b7:7a:
6b:7a:f4:32:1a:13:43:a5:9f:05:49:3f:a4:7d:22:
07:69:d6:f8:c2:8c:09:9b:f0:c0:d3:bb:1b:31:1d:
11:f6:90:c0:a6:99:81:26:65:b1:03:fa:ec:8e:c8:
af:d7:1d:ad:69:87:10:65:0b:60:e5:d8:8b:65:44:
04:a8:92:3e:0f:ca:f1:24:a2:60:b8:ef:78:d9:c1:
19:26:e8:39:1d:4a:88:65:94:e5:53:95:fb:eb:9a:
82:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:22:D0:2A:CD:2C:EA:33:8B:AF:FB:AF:2D:8F:F4:66:AE:65:2A:E5
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/CFB2DB7484F111F1BA6D3918CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.193.2.0/24
154.193.35.0/24
154.196.179.0-154.196.180.255
154.200.26.0/24
154.200.43.0/24
154.200.51.0-154.200.52.255
154.200.131.0/24
154.200.140.0/24
154.200.142.0/24
154.200.154.0/24
154.200.156.0-154.200.162.255
154.200.191.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:bb:25:5d:d2:0a:be:e4:0e:ce:35:2a:7e:5b:2c:9a:60:61:
57:a8:13:62:cf:ec:c8:55:be:03:58:f0:b4:be:33:db:5f:87:
8d:03:df:53:db:08:6f:ab:d8:fe:86:7b:92:07:e1:05:d0:68:
68:c7:37:fd:fb:8e:3c:3f:13:6b:92:88:a3:4f:4d:69:78:01:
db:65:01:88:8b:14:31:b6:93:2a:8a:c7:23:d1:33:83:1f:e7:
ee:d8:26:e7:3f:7b:16:4f:c4:71:22:62:3c:e6:71:c6:bc:7d:
d2:8c:93:8e:97:c2:99:d5:30:da:ac:e3:8e:59:73:06:54:e2:
32:e6:94:e8:44:c3:2f:ed:68:3e:37:0c:a1:96:cc:f8:f3:02:
a9:e5:f4:90:25:f1:e9:58:0c:71:0d:d3:4b:61:4f:87:88:b8:
9a:51:5b:1a:2f:90:e0:90:ef:e0:64:fa:60:4b:21:0d:dc:3b:
81:ec:52:5c:59:1c:f7:6e:89:18:88:1a:d5:b0:d0:fd:af:e4:
c0:18:37:23:d7:2d:ce:7b:56:04:b8:8c:11:43:19:1a:37:9a:
d9:9d:d6:ef:cb:d9:d2:d2:da:5f:d2:ac:ab:5f:bd:27:1a:65:
d7:8b:9b:6b:e3:17:2d:6b:3a:1a:6e:74:be:2b:12:3c:c9:05:
aa:d1:b9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:19:03 2026 by rpki-client