Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7CA8A627AB011F19DCC37B1CE1D38B0.roa
File: F7CA8A627AB011F19DCC37B1CE1D38B0.roa (raw, json)
Hash identifier: FexyyOyiU9JXleJDdBYmsI0YqrBehyYGqI93aMkFCiU=
Subject key identifier: F1:A1:AA:57:5F:05:3D:B7:04:20:0D:2A:D4:11:7B:AA:67:45:2C:6E
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D79A
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7CA8A627AB011F19DCC37B1CE1D38B0.roa
Signing time: Wed 08 Jul 2026 09:39:52 +0000
ROA not before: Wed 08 Jul 2026 09:39:47 +0000
ROA not after: Fri 07 Aug 2026 09:39:47 +0000
asID: 147176
IP address blocks: 154.215.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sat 25 Jul 2026 08:25:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120730 (0x1d79a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 8 09:39:47 2026 GMT
Not After : Aug 7 09:39:47 2026 GMT
Subject: CN=6a4e1ae8-3001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:00:96:1f:65:5a:f0:46:f7:ff:c0:9b:62:0d:
56:06:14:71:d1:70:b6:65:34:1f:24:f4:27:42:f0:
c2:3a:00:10:23:87:27:0a:d7:db:4d:e1:c3:a7:14:
c1:d6:51:a1:a6:de:76:38:98:7a:af:f9:b3:fb:1f:
6b:98:fd:f3:e1:13:64:d6:b4:68:53:36:e3:74:bd:
e8:2d:57:12:e5:bc:26:03:38:ec:e4:33:b2:b0:d9:
1d:81:56:e5:ab:9f:77:0e:24:f2:a6:73:14:9b:03:
f7:f7:7d:fe:ae:d1:bd:65:aa:e7:d8:7d:a9:a6:2f:
da:c3:cc:37:73:0f:e3:3b:bc:65:ff:c9:7b:58:30:
8c:2f:a1:5d:61:7b:b0:fe:99:b6:9f:ad:1c:01:63:
ba:32:7b:50:09:cf:de:23:42:da:24:60:67:38:42:
47:d6:55:9f:b5:af:08:21:12:14:04:1c:6e:35:a9:
31:21:06:e4:76:13:9e:6b:a9:bf:74:f9:b2:d3:e5:
85:8d:51:09:0c:ae:13:28:37:67:75:26:9f:72:e7:
f5:8f:4d:16:ec:e9:74:64:bc:bd:ac:4e:71:12:28:
72:f8:d5:94:60:53:a4:30:7f:b9:40:6d:83:c4:c7:
e0:cc:48:ca:78:bb:62:72:0d:d4:ee:16:b9:fd:16:
75:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:A1:AA:57:5F:05:3D:B7:04:20:0D:2A:D4:11:7B:AA:67:45:2C:6E
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/F7CA8A627AB011F19DCC37B1CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.215.14.0/24
Signature Algorithm: sha256WithRSAEncryption
05:bd:d7:ab:2a:9f:70:4c:02:a9:a9:6d:71:9b:b1:7c:0c:a9:
f2:8d:bc:0b:e9:9f:8f:58:17:c5:5a:db:22:cd:9d:3d:61:2e:
84:53:8b:fd:c1:8b:8b:61:f1:96:d3:ef:52:28:47:eb:ee:50:
36:97:27:09:55:3c:3e:1a:26:31:4c:5c:fd:32:c3:88:c4:c0:
d1:3a:fa:ee:68:a4:fa:f0:27:76:f5:57:c2:22:7f:54:61:57:
8b:8b:8a:81:d2:0b:9f:6f:8b:ee:48:21:e5:e8:ec:8f:7e:f3:
ee:26:df:a9:f6:64:23:43:0f:97:47:d5:b4:94:31:e6:45:ab:
8c:c2:ed:ad:c4:88:66:cd:1a:84:5e:3a:25:37:de:0c:1d:52:
37:25:20:12:38:28:21:b7:d8:56:f4:85:11:25:98:50:7f:d4:
11:f2:c7:c4:25:d4:94:d8:7e:c7:40:44:e5:40:a9:2f:e7:98:
d9:7c:00:d9:19:8c:3b:89:34:3a:0a:54:1f:09:c0:10:db:a0:
a4:a5:73:13:7e:b9:56:06:5e:4c:75:23:86:ca:7c:7c:51:15:
75:38:13:23:f5:aa:73:a6:9f:5d:32:a3:91:e5:be:38:e4:c0:
3a:a3:6d:96:8b:9e:e7:ff:83:c6:78:bd:fe:3d:bd:ae:19:de:
57:8c:ff:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:11:08 2026 by rpki-client