Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5A21FD676F611F19B151C05CF1D38B0.roa
File: C5A21FD676F611F19B151C05CF1D38B0.roa (raw, json)
Hash identifier: 4NCluR4E/lz7Sigw4uN7Lgs52kpMfh1oElGQnaGBsy0=
Subject key identifier: C5:51:E2:14:54:07:74:8D:25:47:0E:5D:20:3C:26:98:3A:CB:24:B2
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D6C8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5A21FD676F611F19B151C05CF1D38B0.roa
Signing time: Fri 03 Jul 2026 15:49:28 +0000
ROA not before: Fri 03 Jul 2026 15:49:23 +0000
ROA not after: Mon 10 Aug 2026 15:49:23 +0000
asID: 138915
IP address blocks: 154.223.58.0/23 maxlen: 24
154.223.60.0/23 maxlen: 24
154.223.62.0/23 maxlen: 24
154.223.64.0/24 maxlen: 24
154.223.66.0/23 maxlen: 24
154.223.68.0/23 maxlen: 24
154.223.70.0/23 maxlen: 24
154.223.72.0/23 maxlen: 24
154.223.74.0/23 maxlen: 24
154.223.76.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:08:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120520 (0x1d6c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 3 15:49:23 2026 GMT
Not After : Aug 10 15:49:23 2026 GMT
Subject: CN=6a47da08-dff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:be:76:8f:ab:07:70:2e:1b:b0:ac:d7:4f:ad:
1f:6c:0a:a7:09:53:47:0b:bd:2c:a6:1d:22:5d:55:
a3:76:ec:ae:e5:b1:26:8c:a9:65:59:c4:44:1b:ab:
69:de:05:09:4a:86:00:34:46:82:05:b1:ef:be:10:
e0:88:ea:ab:30:ba:e9:40:e7:cf:96:08:d3:cb:bb:
74:fe:43:64:93:b4:dd:fc:0d:e1:82:ce:d9:76:f6:
f0:43:1e:eb:9a:e1:82:ed:93:32:83:bc:03:4a:92:
62:f2:14:07:2c:de:10:da:f8:80:b3:4b:47:6d:63:
23:ea:d7:ba:6d:c5:e3:3b:63:73:86:37:31:6d:83:
b5:2a:ea:2f:90:e9:97:5e:48:1c:53:9b:39:43:4c:
f6:00:02:21:62:e4:40:9c:53:ca:62:4b:3a:8f:67:
b8:41:41:4d:2b:65:75:af:03:39:02:14:01:89:f7:
4c:f7:bd:f0:8c:d6:6b:66:cd:a5:d3:ac:05:e1:de:
3a:48:f0:de:fe:32:94:5f:47:ea:f3:ca:f2:7b:aa:
40:c3:06:fd:d7:cf:cb:07:50:91:28:94:df:b0:2d:
ef:9c:26:50:80:a1:f6:f5:f5:ad:cc:20:03:28:2f:
25:ae:98:bc:ee:f5:f3:82:3d:76:9c:cb:b3:37:53:
40:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:51:E2:14:54:07:74:8D:25:47:0E:5D:20:3C:26:98:3A:CB:24:B2
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C5A21FD676F611F19B151C05CF1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.58.0-154.223.64.255
154.223.66.0-154.223.77.255
Signature Algorithm: sha256WithRSAEncryption
41:99:34:80:24:12:63:8e:27:c7:9c:85:0e:b9:64:56:46:8d:
40:f2:ce:04:82:e5:bb:b7:1c:fb:82:4e:8f:83:fd:0a:d0:b8:
a6:ac:a8:5f:69:9a:77:ce:b8:69:4c:cc:2a:60:19:68:09:93:
61:a7:db:eb:de:80:e5:82:37:25:9c:b0:df:01:2f:60:33:67:
70:1e:45:23:0f:4b:7f:aa:1d:89:dd:3d:86:d6:19:8c:f4:8a:
99:5a:f0:7e:e0:95:eb:50:ce:27:f6:c1:84:a5:6b:f6:11:74:
44:b1:3f:00:dc:a1:e6:d0:f6:3d:1b:19:58:e1:2a:b9:26:3b:
27:6b:d8:a5:a1:c9:84:13:9b:1d:7d:ed:85:59:ee:86:52:1b:
3b:c5:4e:41:7d:7d:99:99:70:94:c8:fe:e0:ad:2f:9c:93:55:
0c:e0:4c:6a:f5:9e:ae:95:88:bc:a0:b4:5c:37:a3:50:c8:37:
96:2e:12:6d:e8:93:e2:4c:84:ab:93:3f:33:be:04:aa:df:85:
0f:12:8b:c6:21:b7:97:7a:9e:63:f5:f7:46:60:f1:8d:27:b9:
4c:59:b6:61:22:5c:db:0a:05:09:84:f0:05:18:88:60:0c:bf:
7e:93:e3:89:b9:d0:9c:35:3f:4b:3c:c2:5a:c1:60:d2:ce:df:
bb:76:52:25
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Tue Jul 21 06:34:03 2026 by rpki-client