Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C65ADDA4713E11F1B96D14C5CE1D38B0.roa
File: C65ADDA4713E11F1B96D14C5CE1D38B0.roa (raw, json)
Hash identifier: 3a3lNmzQSi3JUDQKivVBmv6b1wUYOsuCYFUQAp+U/rU=
Subject key identifier: 2A:B9:14:51:1D:47:63:14:D8:78:C2:B5:6A:A9:43:9A:20:7F:4A:AA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D559
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C65ADDA4713E11F1B96D14C5CE1D38B0.roa
Signing time: Fri 26 Jun 2026 09:09:46 +0000
ROA not before: Fri 26 Jun 2026 09:09:41 +0000
ROA not after: Thu 30 Jul 2026 09:09:41 +0000
asID: 401783
IP address blocks: 154.196.160.0/24 maxlen: 24
154.200.46.0/24 maxlen: 24
154.200.48.0/24 maxlen: 24
154.200.53.0/24 maxlen: 24
154.200.54.0/24 maxlen: 24
154.200.60.0/24 maxlen: 24
154.200.130.0/24 maxlen: 24
154.200.154.0/24 maxlen: 24
154.200.156.0/24 maxlen: 24
154.211.211.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 23 Jul 2026 00:08:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120153 (0x1d559)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 26 09:09:41 2026 GMT
Not After : Jul 30 09:09:41 2026 GMT
Subject: CN=6a3e41da-7c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:94:86:60:14:a6:e7:12:9c:cb:82:5c:9f:02:
1b:c6:2e:01:f3:1e:b9:d0:a8:62:4e:a5:b1:ad:f3:
52:c2:9b:ea:d0:29:63:c4:8a:a9:d0:4e:a8:99:92:
70:10:85:5c:2f:45:ff:97:72:da:15:18:61:24:0a:
46:76:17:54:bd:ae:ed:4e:54:06:78:38:2a:33:b3:
e1:8f:85:9f:95:1e:c5:50:6c:94:fd:01:02:ee:10:
37:b8:fd:1f:5c:e8:68:7f:cc:24:9b:f5:b7:ad:c2:
57:b9:56:67:2d:13:4e:2a:87:8a:43:0a:92:2a:69:
22:c1:b0:7d:32:15:f8:25:e8:21:03:45:a0:f8:5a:
a5:e4:1d:df:b3:ad:6b:12:76:84:dc:01:ab:20:2d:
fb:c9:d2:6e:5b:a0:d1:7e:b0:ea:87:71:33:97:80:
89:66:ce:4a:8b:cf:5e:19:47:18:98:93:fb:66:7f:
97:67:d2:2e:85:82:fc:b9:98:be:d8:b6:aa:25:a6:
ba:e7:f2:a1:6f:e4:15:06:1f:48:e2:72:70:a8:20:
c9:13:f8:b6:0c:91:7a:28:c8:c0:9a:ab:d0:b3:c9:
b8:e2:98:e4:90:4c:98:55:2c:a7:60:0f:5a:da:49:
69:84:d0:64:b9:09:30:25:da:cb:db:2d:8e:de:d2:
7f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:B9:14:51:1D:47:63:14:D8:78:C2:B5:6A:A9:43:9A:20:7F:4A:AA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/C65ADDA4713E11F1B96D14C5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.196.160.0/24
154.200.46.0/24
154.200.48.0/24
154.200.53.0-154.200.54.255
154.200.60.0/24
154.200.130.0/24
154.200.154.0/24
154.200.156.0/24
154.211.211.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:c4:d9:71:7b:e6:29:2e:46:88:39:32:9d:e1:7a:0e:73:61:
c2:27:e3:2c:e0:49:3a:1e:be:d3:05:86:7c:ef:4f:ec:53:00:
cb:2b:cf:8b:d2:82:55:99:94:4e:b1:7d:af:06:14:38:20:b5:
52:26:23:79:f7:63:38:41:8e:03:e1:6a:5e:96:99:c6:c3:aa:
1b:f8:0a:f5:e7:f9:d1:eb:5e:63:87:ad:05:c3:d8:cd:dd:68:
39:c0:37:8d:1e:96:bc:04:d3:a3:0b:33:8c:ce:6c:d3:ed:1b:
a5:6e:6c:af:d4:95:96:15:0c:a5:95:e1:8e:24:12:21:1a:00:
9e:23:63:5b:6b:e9:2d:0f:7b:37:88:f3:26:f8:aa:ed:7b:1e:
5e:4b:f3:30:ef:ce:55:f3:15:0a:ba:4d:f0:b9:d5:c9:44:11:
bb:b0:8a:81:9e:07:35:70:d9:38:15:ec:c9:19:6a:87:51:29:
a2:7f:f0:5b:f6:7b:29:f1:9c:a1:e8:6b:88:2e:13:7b:bc:cc:
3b:0e:1f:58:48:40:46:e7:63:d0:ed:29:ab:21:4c:77:ac:9e:
87:e8:a5:3f:8e:98:36:30:49:75:18:92:cb:42:c4:a5:c2:f6:
a1:24:bf:13:05:5d:b3:db:90:4f:5e:df:2a:a5:22:1f:e2:0b:
60:d6:37:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:43:12 2026 by rpki-client