Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFC709887D3D11F1BF1DD0E7CE1D38B0.roa
File: DFC709887D3D11F1BF1DD0E7CE1D38B0.roa (raw, json)
Hash identifier: KZoGrSVh2J4dpXQDijHCh5U1p2pC03UzamAotQJ7M2M=
Subject key identifier: EB:EF:43:2A:BC:88:FB:24:AB:11:5E:92:A6:80:5B:FD:F8:79:BB:4F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D834
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFC709887D3D11F1BF1DD0E7CE1D38B0.roa
Signing time: Sat 11 Jul 2026 15:33:33 +0000
ROA not before: Sat 11 Jul 2026 15:33:28 +0000
ROA not after: Wed 07 Oct 2026 15:33:28 +0000
asID: 150750
IP address blocks: 154.208.32.0/19 maxlen: 24
154.208.33.0/24 maxlen: 24
154.208.34.0/24 maxlen: 24
154.208.35.0/24 maxlen: 24
154.208.36.0/24 maxlen: 24
154.208.37.0/24 maxlen: 24
154.208.38.0/24 maxlen: 24
154.208.39.0/24 maxlen: 24
154.208.40.0/24 maxlen: 24
154.208.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120884 (0x1d834)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 11 15:33:28 2026 GMT
Not After : Oct 7 15:33:28 2026 GMT
Subject: CN=6a52624d-a0dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a9:94:ae:51:a5:1e:e7:0c:fd:e2:03:bf:b2:
a1:2b:a0:02:f6:19:34:f7:2e:32:a2:64:92:7d:5d:
e1:81:f6:44:e1:16:5e:5f:73:cf:3e:42:9a:bc:83:
8e:35:09:94:70:e4:8a:1e:12:22:70:3b:44:3d:4a:
19:a8:2f:2e:d9:65:59:f7:b9:2f:6e:dc:88:fc:11:
de:72:60:f0:a4:c6:4f:86:21:3e:8f:4e:56:13:f0:
21:00:08:27:68:31:6a:ce:bd:ba:97:11:21:f6:07:
3a:95:28:38:b2:b4:7f:96:de:52:72:4e:b6:01:c0:
99:79:b3:4e:03:55:da:41:37:05:be:26:1f:ee:ba:
02:aa:c9:99:c7:de:d6:bd:ab:4b:92:90:ab:38:cf:
f0:44:71:69:2d:d4:de:a3:63:14:14:2f:cf:a6:52:
a4:a6:f7:29:79:ec:3d:81:31:c4:9d:a4:b0:fe:a4:
51:17:4d:59:dd:4c:ff:1e:ea:5f:ba:49:df:4d:0a:
2c:f5:c4:14:f9:46:bf:43:b4:64:27:60:97:10:0a:
ce:9a:3f:01:7e:12:17:78:05:64:98:f8:b0:fe:93:
be:90:42:8e:e3:a1:05:2f:5f:9e:cf:d8:1b:e6:95:
d0:f6:86:ff:db:97:c0:5c:73:64:b0:0a:ed:05:23:
eb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:EF:43:2A:BC:88:FB:24:AB:11:5E:92:A6:80:5B:FD:F8:79:BB:4F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/DFC709887D3D11F1BF1DD0E7CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.208.32.0/19
Signature Algorithm: sha256WithRSAEncryption
a0:d7:3a:7a:92:8c:1a:d6:bc:64:80:66:12:23:58:ea:8b:4f:
bf:a9:da:77:77:a8:3e:e4:6d:fc:4b:2c:c7:f9:67:7b:eb:99:
58:0e:35:94:b1:dc:14:7d:8b:9b:40:8a:49:2c:43:d1:88:20:
24:b7:11:9c:13:0e:c4:ba:17:3f:8b:b5:71:91:bc:80:95:37:
18:a0:4a:8e:3b:89:a8:10:5e:5c:e4:30:a7:c8:7a:a4:54:2b:
02:98:0a:12:d4:07:13:b4:4e:2c:11:92:c2:1a:66:8d:02:3b:
3a:2e:9b:79:75:11:36:b0:4a:5f:9e:4c:61:c5:89:a7:0e:34:
d8:12:fc:fc:27:ac:7b:4a:45:a3:9b:d3:30:0b:dd:21:2e:5d:
f8:76:24:36:cf:dd:1d:08:52:99:a6:06:57:7c:b9:45:b7:cf:
b2:09:c7:3b:c2:3b:af:d1:fe:20:8a:86:62:6f:e2:9e:4f:1b:
d5:82:b3:a7:70:2c:1f:6b:41:e6:25:d2:bc:0e:93:e6:c9:35:
67:e6:8e:ec:dd:cd:be:bd:ff:7f:2c:e1:76:82:e8:c6:e8:20:
4c:f2:e0:59:d5:46:db:93:fb:5a:54:8c:97:7a:bb:aa:6c:54:
4a:5e:9d:a2:db:c8:83:33:66:e3:93:80:20:43:78:ad:f9:5f:
08:0e:94:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:40:42 2026 by rpki-client