Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87AB7AC2745F11F1A0AAB6CFCE1D38B0.roa
File: 87AB7AC2745F11F1A0AAB6CFCE1D38B0.roa (raw, json)
Hash identifier: mVlfJdTyTxRdSRiCBH9UsoD1PtwozCEfiOtqLfZZECY=
Subject key identifier: 95:96:CF:CC:4B:AB:76:5F:D3:25:61:FD:F4:A1:F1:D6:18:AB:80:A0
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D631
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87AB7AC2745F11F1A0AAB6CFCE1D38B0.roa
Signing time: Tue 30 Jun 2026 08:41:47 +0000
ROA not before: Tue 30 Jun 2026 08:41:42 +0000
ROA not after: Thu 06 Aug 2026 08:41:42 +0000
asID: 44559
IP address blocks: 154.209.144.0/24 maxlen: 24
154.209.145.0/24 maxlen: 24
154.209.152.0/24 maxlen: 24
154.209.153.0/24 maxlen: 24
154.209.154.0/24 maxlen: 24
154.209.155.0/24 maxlen: 24
154.209.158.0/24 maxlen: 24
154.209.195.0/24 maxlen: 24
154.219.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 12:38:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120369 (0x1d631)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 30 08:41:42 2026 GMT
Not After : Aug 6 08:41:42 2026 GMT
Subject: CN=6a43814b-0f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f6:c8:df:71:30:0b:b7:28:ff:68:12:45:a3:
df:ff:1c:fb:d3:0e:3a:a8:61:53:79:1a:62:7c:b4:
7e:e2:81:90:fe:3a:6f:13:04:c0:af:7d:74:45:ae:
16:61:88:10:df:c2:9d:01:56:8b:12:d3:ab:31:97:
7d:40:7d:b7:14:63:d3:29:af:f0:bb:cb:60:17:14:
f4:06:98:f1:de:77:04:c4:f6:c2:5b:7d:3c:15:31:
44:4b:22:f8:ea:9a:7a:f8:a6:ce:30:19:52:f6:ce:
ed:1f:34:66:f9:f4:aa:70:6a:50:22:99:f8:90:6f:
79:bc:8c:c0:1b:64:69:0a:89:6b:b8:28:b0:ef:51:
3b:70:0d:45:ce:43:14:c7:47:d9:45:7b:62:35:31:
3f:8d:fd:4f:fd:d1:6c:42:a3:e3:fd:82:6a:44:a8:
47:62:a7:af:5f:f8:aa:cc:e2:a2:f2:3b:8a:4f:52:
7f:92:13:d1:a8:ed:cf:72:d3:29:cf:85:56:83:c3:
a1:ec:52:4b:2a:f6:2a:1d:b9:5f:88:3d:4f:58:05:
91:f7:83:36:21:ef:49:6b:59:4c:10:5a:2c:53:9f:
72:07:fe:7a:58:7a:a5:57:da:fc:47:b5:08:60:9f:
e1:c3:da:67:1c:f7:b4:5f:78:89:3d:f5:c3:c7:da:
6e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:96:CF:CC:4B:AB:76:5F:D3:25:61:FD:F4:A1:F1:D6:18:AB:80:A0
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/87AB7AC2745F11F1A0AAB6CFCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.209.144.0/23
154.209.152.0/22
154.209.158.0/24
154.209.195.0/24
154.219.204.0/24
Signature Algorithm: sha256WithRSAEncryption
81:74:bf:03:11:b6:ef:5f:e6:41:53:ef:12:36:5c:4d:0b:46:
36:ec:3c:6c:63:7d:27:37:b7:5a:92:55:cb:18:18:69:8c:5e:
15:44:df:71:db:11:4d:7b:de:40:aa:dc:1a:f9:26:4e:a3:82:
2a:4d:d0:28:40:33:e6:8e:6e:0f:04:4a:47:a5:4a:34:bf:bb:
fa:f1:4e:6f:02:25:c4:cd:08:8d:07:7d:d0:16:b6:c1:e4:78:
fb:f8:dd:1b:f9:00:18:16:bc:35:1a:88:b0:93:a1:35:0f:79:
d4:3a:e4:fe:5a:af:72:a8:6e:d3:25:ca:cd:7d:4e:c2:8c:ba:
6d:02:88:25:6f:9c:a4:90:ec:66:8c:3c:89:3e:f6:5e:94:20:
f3:81:47:ac:df:57:09:25:9e:f1:61:d2:44:36:9b:42:08:2a:
56:5f:ca:6e:5c:89:69:1b:14:5b:71:85:e1:be:7a:41:28:23:
65:e2:c7:04:28:36:01:ab:82:d8:87:d5:5e:6e:ef:84:4f:4e:
bc:7e:11:7c:7b:03:87:a3:8d:94:2a:21:5f:70:2f:bd:21:0d:
21:86:7e:d8:cc:20:08:2c:68:95:59:61:43:d7:18:9f:8e:81:
0d:57:02:7b:f2:d4:78:58:31:aa:10:b4:40:a6:45:50:af:85:
1e:08:1b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:01:47 2026 by rpki-client