Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B1BE8FE707111F19467D2E5CE1D38B0.roa
File: 4B1BE8FE707111F19467D2E5CE1D38B0.roa (raw, json)
Hash identifier: 0e3+cmjFU93Qos0ABIpOFtlZk5vU2tBDrlHW4pq3eu0=
Subject key identifier: E7:08:93:C0:A7:11:E1:79:D2:55:94:EB:E0:74:20:3B:C9:DE:22:FC
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D518
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B1BE8FE707111F19467D2E5CE1D38B0.roa
Signing time: Thu 25 Jun 2026 08:38:52 +0000
ROA not before: Thu 25 Jun 2026 08:38:48 +0000
ROA not after: Sat 01 Aug 2026 08:38:48 +0000
asID: 44559
IP address blocks: 154.198.37.0/24 maxlen: 24
154.198.38.0/24 maxlen: 24
154.198.39.0/24 maxlen: 24
154.203.206.0/24 maxlen: 24
154.203.207.0/24 maxlen: 24
154.203.212.0/24 maxlen: 24
154.203.213.0/24 maxlen: 24
154.203.214.0/24 maxlen: 24
154.203.215.0/24 maxlen: 24
154.203.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 12:38:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120088 (0x1d518)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 25 08:38:48 2026 GMT
Not After : Aug 1 08:38:48 2026 GMT
Subject: CN=6a3ce91c-5eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:69:e8:16:79:8b:55:93:ce:0d:47:72:20:aa:
8e:72:bd:55:8c:36:8f:7d:7b:23:70:de:51:79:3c:
e9:8c:bc:c1:f8:be:58:a4:6d:92:46:b8:19:a5:b3:
e1:54:0e:b7:a8:27:4d:8e:5f:41:c9:38:ac:1a:a3:
69:9a:fb:da:d6:1b:75:81:71:c4:1d:8a:4d:89:86:
52:60:6c:41:43:2f:60:08:5e:5e:6f:4a:ca:01:7a:
5c:63:54:c1:bd:d7:09:0c:bf:c6:dc:10:d7:db:d5:
fb:ca:f3:33:be:26:24:02:2d:5d:45:35:b1:fb:28:
5f:fb:4c:b2:27:c7:e2:00:29:3c:c5:eb:a7:02:79:
03:f2:09:4b:4f:fb:5e:3b:f9:cb:f0:0e:4b:7e:c6:
88:51:bd:23:3e:12:0f:ce:bc:f0:00:38:dc:ab:ef:
bb:cb:37:92:4a:9d:b3:1b:8b:ac:23:f4:05:63:1f:
36:40:d5:02:f4:df:0e:8c:6d:5f:8e:4a:cd:1f:39:
6a:89:7c:80:6e:b3:8a:3b:68:39:9a:cd:cb:b6:d0:
64:2f:15:da:1f:da:0b:98:a9:a8:d6:fd:a2:91:e8:
73:98:ab:c1:1f:44:fe:9a:e6:f8:60:74:51:b5:c7:
8c:88:78:40:b5:26:5d:8f:1f:df:28:51:24:70:87:
52:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:08:93:C0:A7:11:E1:79:D2:55:94:EB:E0:74:20:3B:C9:DE:22:FC
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/4B1BE8FE707111F19467D2E5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.37.0-154.198.39.255
154.203.206.0/23
154.203.212.0/22
154.203.217.0/24
Signature Algorithm: sha256WithRSAEncryption
31:4c:73:a6:03:26:bf:85:c0:2b:af:71:85:1e:3f:55:4b:ef:
95:b7:ee:4b:72:f2:3b:08:cf:f0:e1:c7:0c:b1:03:b1:2d:22:
f3:29:8e:63:3d:59:cd:5d:94:e4:97:cf:29:fa:fb:e0:ae:37:
87:fb:5e:9d:53:be:53:8a:51:b2:da:47:df:c7:45:05:ec:35:
64:35:45:ea:e1:96:b3:9e:09:f4:49:b9:c8:15:5b:27:72:99:
fe:99:12:b1:da:5d:b8:47:06:a1:ad:27:f6:88:28:34:32:02:
bf:ec:a9:c1:d5:69:1f:0f:7c:9c:ca:1a:e7:a9:a7:23:10:69:
77:90:c7:92:da:3e:5e:8c:58:90:99:04:78:cc:f4:22:19:9a:
6d:df:65:c0:4b:31:f7:07:39:26:00:da:13:ca:c5:06:0d:b4:
f6:02:ae:77:1a:b1:cc:55:7e:81:87:0f:36:fc:a1:45:bc:99:
d2:d9:6c:a3:f8:4b:8b:28:25:18:d8:b1:01:a5:56:81:34:1c:
3d:4d:f7:c3:9c:d9:4c:13:b4:49:93:11:40:0f:cf:88:6d:56:
52:ff:b8:f4:24:07:24:3c:84:14:ee:f5:d4:b2:d2:83:59:50:
cd:c0:b7:ca:5f:da:53:13:17:ec:b9:8e:75:aa:51:df:29:e2:
f5:58:b9:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:01:46 2026 by rpki-client