Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDA4D00C861111F1B20FEBEACE1D38B0.roa
File: FDA4D00C861111F1B20FEBEACE1D38B0.roa (raw, json)
Hash identifier: UukqCcrNDJR4LMKgHz7r6PLxFtNMoCgzVNVZilzsFOo=
Subject key identifier: BD:8B:AE:78:6D:82:68:A9:11:08:B2:BF:22:8D:A0:66:86:10:CB:6A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DAF0
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDA4D00C861111F1B20FEBEACE1D38B0.roa
Signing time: Wed 22 Jul 2026 21:12:06 +0000
ROA not before: Wed 22 Jul 2026 21:12:01 +0000
ROA not after: Fri 31 Jul 2026 21:12:01 +0000
asID: 197574
IP address blocks: 154.83.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 26 Jul 2026 00:07:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121584 (0x1daf0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 22 21:12:01 2026 GMT
Not After : Jul 31 21:12:01 2026 GMT
Subject: CN=6a613225-1dd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bf:19:b2:ff:0f:d5:f6:68:e2:5a:f5:cf:aa:
01:18:ed:29:d6:1e:e4:61:4b:c1:d5:4d:98:37:c2:
9e:b6:f1:9e:68:42:17:31:bf:0a:81:31:41:3a:f1:
c3:fa:e5:62:14:94:ee:1b:04:7e:0a:5e:a8:2c:f9:
31:37:7e:b6:20:b4:3a:7c:36:ea:64:59:df:d3:9a:
0b:05:f3:f9:4f:0c:1b:ae:a6:a5:61:86:23:d8:85:
a7:9c:58:e5:a6:6a:8e:0e:58:4a:dc:12:08:ff:35:
3e:90:0f:7f:78:b6:53:94:ac:06:6d:87:1e:e5:67:
83:b8:39:66:e7:c4:6a:df:8e:e6:a6:1a:5e:48:83:
7a:0c:d8:e7:bc:d3:2f:98:a1:19:d4:31:b5:de:0e:
77:ca:a3:e4:86:5d:71:15:3a:dc:a2:7d:85:20:e7:
4f:ed:87:10:64:b2:e0:e3:f9:16:e5:a6:47:81:6d:
a4:27:23:48:ad:9d:82:bc:6d:66:bc:d7:23:e6:c1:
f8:c9:d6:e1:57:17:78:d9:32:28:a1:d7:a8:db:96:
f1:ad:07:f6:7a:df:8d:4e:bf:f5:94:5c:68:29:c9:
3a:63:03:d0:d3:77:21:64:09:49:db:6f:e8:d7:f8:
8f:5a:9d:40:9b:2e:22:ab:68:04:cc:df:bf:03:70:
11:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:8B:AE:78:6D:82:68:A9:11:08:B2:BF:22:8D:A0:66:86:10:CB:6A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/FDA4D00C861111F1B20FEBEACE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.83.208.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:7a:88:74:75:12:4f:b5:80:c4:0f:de:88:17:58:bd:f3:fb:
ae:de:ee:c7:6b:90:47:8e:21:1b:cd:de:6e:7e:b1:02:de:da:
35:2c:f6:d6:f7:1b:00:3d:78:7e:d2:b5:21:d1:bf:0c:a8:d8:
08:fb:72:27:64:36:8a:18:9e:87:d7:9e:02:87:19:b4:e9:68:
9d:a0:2b:40:ca:a7:c2:22:03:cd:1d:3d:cc:6e:23:f4:15:fe:
f0:4c:91:79:60:79:5f:1b:1e:a8:e4:f3:dc:8e:0b:7b:0b:9a:
c4:1c:f3:a8:f8:a8:1f:56:1a:6f:a6:02:7e:78:47:f4:b0:10:
9e:c5:2b:32:c6:b5:64:33:b9:bf:75:5c:2a:11:c6:80:fe:d2:
81:6b:5a:4a:9f:67:a5:a3:56:08:aa:16:e5:f6:32:c6:74:d8:
cb:a5:db:e2:3c:fb:19:55:81:e2:f6:88:03:96:3a:12:6d:a5:
77:33:23:eb:bd:41:a7:63:6c:af:c0:6d:e0:73:fe:ee:61:75:
a2:7f:b1:8e:b2:14:38:5a:a6:06:11:94:51:cf:49:72:e5:83:
ac:46:f3:25:12:65:86:40:4b:18:43:8a:d8:2e:6f:aa:aa:d2:
06:71:7c:dd:80:e1:8c:77:32:0b:f8:f8:8a:cb:3a:f3:e3:2a:
d8:4a:56:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:45:47 2026 by rpki-client