Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC74FEDC81C711F1B98C2DD8CE1D38B0.roa
File: DC74FEDC81C711F1B98C2DD8CE1D38B0.roa (raw, json)
Hash identifier: K6L/apiL6EGrYkv9MvggewpeZ6JRRgI2BRFEZ6ZGTsM=
Subject key identifier: 04:62:27:99:EA:50:F1:18:62:FA:AA:A8:23:08:3E:02:73:AC:55:6C
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D97F
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC74FEDC81C711F1B98C2DD8CE1D38B0.roa
Signing time: Fri 17 Jul 2026 10:11:23 +0000
ROA not before: Fri 17 Jul 2026 10:11:19 +0000
ROA not after: Mon 24 Aug 2026 10:11:19 +0000
asID: 214432
IP address blocks: 154.89.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121215 (0x1d97f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 17 10:11:19 2026 GMT
Not After : Aug 24 10:11:19 2026 GMT
Subject: CN=6a59ffca-c30e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:88:dc:46:1a:40:41:16:4d:83:cf:ed:50:76:
c9:be:f1:2b:9e:a3:3d:49:f2:87:ad:65:fe:27:95:
0d:a3:65:50:6f:f9:45:15:c0:31:5b:4f:fb:33:6d:
5c:81:98:da:ee:1c:57:cd:ff:d1:bb:32:ef:a8:35:
87:ef:25:40:29:86:e2:43:11:e4:06:86:45:86:2d:
09:b4:84:56:26:3f:d7:c6:f5:df:08:dd:49:46:53:
76:91:c7:20:49:5f:86:b4:9f:d1:9c:f0:bc:78:05:
b7:e0:4a:6d:dc:f8:e5:a8:27:63:50:4d:5c:09:2b:
fa:6e:10:ab:37:0f:2d:f3:8a:b2:3f:05:2f:e5:f8:
86:7b:d2:9a:f6:e4:6d:f8:20:86:cd:0d:41:f9:7d:
c2:7f:66:99:bd:30:b4:27:9b:fe:8d:5c:e7:a1:b1:
35:fa:9e:89:1d:de:16:6c:de:57:2f:1c:7f:1d:8f:
8e:f9:b3:47:ad:d7:f4:4d:4b:dd:08:11:da:a9:d4:
41:28:19:08:1f:92:2f:e7:0b:29:85:bd:2f:eb:76:
1d:d0:1a:3c:52:da:c2:7c:80:a2:a5:7e:f1:7c:82:
d1:6e:47:6d:43:32:55:3b:53:e7:61:ec:15:0f:ff:
67:d1:3f:b7:8d:a3:fa:f2:5d:3f:cb:12:f8:88:ae:
33:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:62:27:99:EA:50:F1:18:62:FA:AA:A8:23:08:3E:02:73:AC:55:6C
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DC74FEDC81C711F1B98C2DD8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.89.194.0/24
Signature Algorithm: sha256WithRSAEncryption
31:3d:09:8a:31:93:49:4e:e8:fb:59:d5:ca:14:3e:cf:a8:16:
17:cd:bf:f4:2c:2f:fd:d0:ba:20:ed:c1:d2:35:f4:ff:2e:40:
bf:9b:3f:26:81:3c:0c:40:1d:58:80:0e:2c:a7:ff:74:03:47:
db:6b:fc:34:9d:ba:66:18:95:02:c9:76:d6:ed:96:ae:b9:cc:
55:fc:49:bf:4f:70:61:e2:5e:bf:7e:69:f3:8b:e1:e2:51:cb:
49:1a:95:8a:d9:a0:80:e0:33:3c:fc:20:ca:9d:46:35:96:05:
e2:1e:75:22:49:35:4f:0a:d6:0f:83:14:bc:ec:fb:f2:2b:cf:
3b:24:91:30:d6:b1:02:3e:b4:0f:64:43:96:9e:fd:af:ca:6e:
bd:87:f3:ba:cc:a0:e2:40:3e:df:4e:14:7b:ba:62:2a:5e:47:
60:a2:a7:db:3e:01:26:be:66:88:c6:4b:b4:2b:c2:ac:1c:ad:
d7:a2:32:b5:4a:ac:a3:32:f6:5b:c3:1b:b8:e2:7e:45:eb:01:
5f:45:c1:6c:7a:82:69:60:6f:ba:1b:a9:56:50:98:a8:5d:74:
d6:b9:51:2d:f9:a3:7e:51:54:a5:be:b8:57:2d:b6:8c:2b:be:
2d:88:ca:1a:4e:f3:a1:1a:3a:0f:5d:7d:3e:56:67:6d:99:d9:
2e:bc:55:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:29:32 2026 by rpki-client