Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E617E67E7C5A11F18BE5A706CF1D38B0.roa
File: E617E67E7C5A11F18BE5A706CF1D38B0.roa (raw, json)
Hash identifier: icuXj6qSoq+BxmjVJR0xk3/V2xIsRqPCVwhHjvmP1eE=
Subject key identifier: 81:C0:D7:CC:1C:04:0B:96:4F:38:59:A0:77:DC:32:FA:8E:03:ED:BC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D811
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E617E67E7C5A11F18BE5A706CF1D38B0.roa
Signing time: Fri 10 Jul 2026 12:28:48 +0000
ROA not before: Fri 10 Jul 2026 12:28:43 +0000
ROA not after: Mon 10 Aug 2026 12:28:43 +0000
asID: 139646
IP address blocks: 154.204.0.0/24 maxlen: 24
154.208.12.0/22 maxlen: 24
154.208.16.0/20 maxlen: 24
154.212.128.0/24 maxlen: 24
154.215.0.0/24 maxlen: 24
154.218.0.0/24 maxlen: 24
154.221.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120849 (0x1d811)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 10 12:28:43 2026 GMT
Not After : Aug 10 12:28:43 2026 GMT
Subject: CN=6a50e580-9f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:07:79:19:df:9f:fc:d0:62:f9:80:f2:7b:dd:
dd:b7:3c:68:95:5d:25:1e:cd:18:0c:99:7e:49:4d:
f7:51:4c:a1:c9:d5:d7:7e:35:c3:7f:95:5a:35:ab:
3b:37:24:e4:a4:9c:f2:27:7c:23:92:1c:b0:cf:99:
a0:1c:9c:15:56:75:bf:54:14:d5:79:b9:16:3e:cb:
fc:ac:7e:3c:c4:8d:8c:2c:dd:a8:d3:84:fd:bd:67:
f3:f5:82:58:27:69:d9:4b:ff:41:86:94:6b:ee:a4:
30:3c:26:97:1b:50:11:22:4a:8a:77:79:e5:2d:89:
62:f6:fb:19:5c:88:37:92:f9:fc:0a:5f:4f:ec:4c:
6a:98:10:a7:8a:c5:3a:c3:37:9c:dc:6e:48:2d:77:
6f:69:86:9d:5d:6b:2d:79:12:e0:5c:e2:50:ef:f8:
9b:ba:e2:ee:75:4d:8c:16:40:6a:56:b1:b9:c9:8e:
40:65:bb:e5:a9:c9:06:8b:ba:a9:07:1f:23:08:c2:
7d:7a:53:54:5b:80:24:a8:03:11:2e:ce:c8:f2:4b:
73:f2:09:df:e4:d4:43:12:d3:a0:78:33:66:a6:72:
4c:fd:4a:75:a9:73:c0:39:09:4b:af:62:8c:64:0c:
44:90:08:46:24:52:01:bb:c0:4a:88:bc:cc:b8:54:
a2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C0:D7:CC:1C:04:0B:96:4F:38:59:A0:77:DC:32:FA:8E:03:ED:BC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/E617E67E7C5A11F18BE5A706CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.204.0.0/24
154.208.12.0-154.208.31.255
154.212.128.0/24
154.215.0.0/24
154.218.0.0/24
154.221.0.0/24
Signature Algorithm: sha256WithRSAEncryption
12:c4:78:81:6e:81:43:52:f9:20:8c:6b:af:d5:61:d0:c4:08:
76:a6:04:04:c0:90:e4:e6:15:b7:ef:1d:87:bb:2f:15:f5:2f:
21:cc:5a:9a:70:05:85:b4:30:61:30:fd:00:f0:77:0c:4b:42:
75:be:2f:c1:fc:70:a1:14:91:9c:40:8a:17:c6:15:df:be:cb:
24:bf:5e:cb:0f:fd:dd:3a:2c:23:fd:c7:78:9a:eb:2f:34:5a:
a3:8e:30:66:1a:50:28:15:25:08:53:09:af:ed:40:0c:a0:ed:
5d:83:f0:1f:7b:b9:6a:38:50:94:ba:4a:e8:ff:2a:fb:db:5f:
98:7c:40:c2:23:ab:e7:72:87:dc:de:03:b2:d0:90:38:e9:3c:
df:03:3e:57:79:b8:7c:70:db:f4:e3:19:39:c9:4b:0c:5a:6c:
8d:c1:1c:41:8a:df:ec:84:5a:dd:ce:ec:3f:30:00:6c:d2:bf:
2a:d1:40:f5:12:9b:aa:9e:c6:fa:39:63:8e:2f:38:e9:31:91:
87:de:6f:a4:10:e8:75:1b:24:ff:bc:76:af:52:3c:a1:7b:6e:
f5:f0:8b:3c:9e:cb:f9:a6:a9:0d:d5:c2:b3:b2:b0:79:43:f4:
99:ce:b8:7a:17:f8:39:25:89:d3:68:7b:0c:c9:52:9e:08:ae:
ca:3b:8b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:32:02 2026 by rpki-client