Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6ADBE6A84EE11F1B991C706CF1D38B0.roa
File: D6ADBE6A84EE11F1B991C706CF1D38B0.roa (raw, json)
Hash identifier: SIXzbVew6zBfprpVz6wOmoJj9LdRbR2j965LOWG+Mf0=
Subject key identifier: ED:34:61:02:06:A5:3C:7D:48:5E:4E:EE:B5:B4:56:20:C9:EF:26:C9
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DA74
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6ADBE6A84EE11F1B991C706CF1D38B0.roa
Signing time: Tue 21 Jul 2026 10:27:57 +0000
ROA not before: Tue 21 Jul 2026 10:27:53 +0000
ROA not after: Sat 29 Aug 2026 10:27:53 +0000
asID: 59187
IP address blocks: 154.221.32.0/22 maxlen: 24
154.221.32.0/23 maxlen: 24
154.221.32.0/24 maxlen: 24
154.221.33.0/24 maxlen: 24
154.221.34.0/23 maxlen: 24
154.221.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121460 (0x1da74)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 21 10:27:53 2026 GMT
Not After : Aug 29 10:27:53 2026 GMT
Subject: CN=6a5f49ad-34d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:53:cf:34:05:7a:00:74:dc:af:6a:09:66:a5:
64:43:af:b1:3e:f2:38:b1:97:b1:3b:44:7e:6c:01:
00:1e:7a:b4:4f:49:53:2e:36:97:9f:da:00:56:6e:
cb:83:9b:d4:de:6a:4e:b3:b9:04:aa:f5:91:79:c6:
15:31:0d:77:a9:a1:86:25:22:a4:98:17:41:ba:4e:
fe:1e:5d:2d:2d:c9:76:27:fa:8f:fa:0b:5b:cd:03:
e7:05:e7:0e:e7:24:55:03:7b:16:ed:24:1c:1e:46:
a0:e6:08:97:ae:18:99:40:7b:f4:0d:32:73:69:b3:
b6:6c:6b:c3:72:1e:d8:ca:17:f1:39:1c:08:86:ff:
87:55:dd:9f:ae:2d:4d:3a:e0:94:3a:ba:79:bf:51:
8e:0b:2a:41:74:94:b9:99:a5:69:b3:06:f7:67:4a:
8c:cc:1b:09:9a:3e:57:d0:69:85:49:e7:28:c9:8a:
c0:60:8d:76:e2:f8:20:a6:71:13:a7:58:29:e9:2c:
8c:b6:85:3e:01:dd:72:a9:ee:17:35:c1:a8:7c:b1:
4c:bd:51:eb:37:2d:61:3d:2d:9b:0d:6e:5d:3c:c9:
f7:cc:d4:da:38:44:64:95:b7:78:0e:ac:98:73:08:
3d:7a:ea:80:8f:96:08:31:2f:58:47:c4:47:ac:91:
c6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:34:61:02:06:A5:3C:7D:48:5E:4E:EE:B5:B4:56:20:C9:EF:26:C9
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/D6ADBE6A84EE11F1B991C706CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.221.32.0/22
Signature Algorithm: sha256WithRSAEncryption
42:8e:8e:3c:f7:09:23:12:3e:91:44:c8:9e:f8:9e:fe:f5:a7:
30:cf:4b:e2:68:3d:9a:03:21:bf:de:28:6d:29:b7:5e:ba:8f:
d0:90:40:14:14:7b:fd:d9:d5:38:e7:75:fd:40:6f:45:a4:c1:
0e:68:69:0f:3f:35:d6:ea:4c:13:9e:c4:c2:24:0b:2c:47:8a:
65:24:2c:b6:da:b0:7c:67:5a:37:5a:60:6e:68:cf:3e:87:64:
47:d2:b8:6e:07:bf:42:0a:cb:8b:2e:3a:6e:ff:73:50:c1:ae:
3f:7e:46:c3:e4:65:81:6b:02:fc:83:d4:6b:19:cb:0b:f6:8e:
b1:ce:78:66:bf:2b:97:3a:bc:f7:e8:0e:7f:cf:69:a2:91:34:
5a:f4:c4:a4:c7:35:a3:e9:e8:03:c8:51:75:97:5c:02:78:82:
a5:ee:cc:d5:5f:57:38:25:db:db:55:ed:35:f2:50:e2:7b:4c:
3a:e7:5f:38:3e:2e:d4:24:27:c3:41:84:df:00:b2:28:a6:ac:
c6:1c:52:7c:9b:1f:3d:89:32:88:0e:2c:3a:aa:67:71:d4:25:
84:8b:d8:bf:78:3c:73:9f:a7:8d:8f:4f:88:3a:38:eb:20:84:
ba:89:a9:f4:64:64:3a:a7:9b:0d:c7:e1:3f:9a:b4:05:4e:c8:
29:68:00:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:22:26 2026 by rpki-client