Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2F17E0A844011F1850E3BDDCE1D38B0.roa
File: D2F17E0A844011F1850E3BDDCE1D38B0.roa (raw, json)
Hash identifier: wRWmq6duumgrgn6jgtCPS/pKteizz+oGP4WFUtGygA0=
Subject key identifier: 15:1D:43:10:D7:7E:92:00:3F:41:CF:ED:7C:E0:B9:4C:3A:F8:AD:1C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DA2E
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2F17E0A844011F1850E3BDDCE1D38B0.roa
Signing time: Mon 20 Jul 2026 13:42:18 +0000
ROA not before: Mon 20 Jul 2026 13:42:14 +0000
ROA not after: Thu 27 Aug 2026 13:42:14 +0000
asID: 154132
IP address blocks: 154.94.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121390 (0x1da2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 20 13:42:14 2026 GMT
Not After : Aug 27 13:42:14 2026 GMT
Subject: CN=6a5e25ba-adf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:54:f0:41:ff:60:df:2d:6c:0f:e7:ae:b0:ab:
c7:1c:ba:33:a7:ea:bb:f3:c0:75:91:1d:3f:af:bf:
dc:80:27:ff:74:b8:da:31:36:fe:1e:eb:9e:58:e4:
69:b1:59:0d:eb:8b:56:34:bf:26:f9:a2:79:61:b3:
b1:e5:c7:fe:2a:8f:96:a5:6c:cb:c7:b3:df:c9:3d:
d5:d7:61:d9:39:0a:d1:22:3a:fe:f4:77:88:d7:84:
97:f3:c3:22:34:b3:fc:59:65:73:92:7a:47:f1:77:
e5:e8:cd:93:6f:d1:bf:ea:e6:09:ff:f5:25:15:d3:
1c:44:59:50:ff:f3:d1:ed:de:e3:13:92:a2:0a:d7:
42:3b:09:f3:fb:eb:ce:e3:32:dc:fb:19:b7:11:f4:
c9:b9:20:d2:ca:bd:ba:09:1c:98:9c:7a:c3:ef:2d:
11:84:f7:ef:a9:b3:c3:3c:94:f9:84:80:86:a1:81:
97:20:f7:5d:30:61:d7:68:1f:1f:a0:c1:2b:e3:43:
21:73:e1:c8:e3:53:c6:03:0e:55:48:86:18:94:b1:
1d:02:39:ef:18:fa:05:e3:32:ca:31:aa:b8:da:b0:
5b:42:3a:22:ee:1d:5e:a2:e6:9f:78:ca:28:5e:7d:
13:9f:40:19:58:e1:65:c3:dc:33:bf:cd:a7:48:20:
ce:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:1D:43:10:D7:7E:92:00:3F:41:CF:ED:7C:E0:B9:4C:3A:F8:AD:1C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D2F17E0A844011F1850E3BDDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.94.60.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:5e:5e:07:e4:12:fb:c0:5a:09:19:e9:21:bb:80:ab:32:2e:
0b:41:f6:01:ca:d3:1c:9d:e6:77:b9:17:0e:ff:f7:42:0d:f6:
34:25:85:1b:6f:5b:5e:e2:1d:e0:ad:75:99:c8:36:2f:43:96:
06:08:ab:02:03:92:6e:01:1d:c3:65:20:38:03:7a:5f:5a:8f:
82:da:74:af:5e:a7:94:e1:46:8e:13:fe:5f:9f:38:bf:b4:f2:
12:af:b0:f1:b4:03:0a:5e:24:e9:95:ef:1b:2e:9e:c9:b0:50:
7c:4a:ad:0a:0a:c2:cc:ce:5b:f5:a3:34:88:8f:00:fa:e5:4b:
2f:16:58:2d:e4:5f:aa:e8:07:a8:ab:d0:14:9d:bf:ea:d2:c5:
c4:db:8d:a0:41:85:64:f4:bc:30:be:37:42:da:02:2a:3e:0a:
fd:a5:2b:f0:05:88:4e:7a:96:2e:4a:a7:a3:82:43:a5:69:24:
d8:b3:78:b5:58:98:53:f5:fe:2b:09:7d:90:be:15:3a:c6:46:
1e:a7:90:d8:53:88:56:9d:ee:9f:4e:d6:c2:4f:c7:f5:e8:2d:
66:4c:a1:1d:e6:a3:5a:1a:b6:51:df:72:2a:fb:71:2d:69:47:
3f:66:2c:68:1e:26:53:25:f4:d3:ab:38:1f:06:62:ab:22:ff:
16:a6:aa:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:56:39 2026 by rpki-client