Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/028235507CD111F1A334EDCDCE1D38B0.roa
File: 028235507CD111F1A334EDCDCE1D38B0.roa (raw, json)
Hash identifier: B3jay2WBGnK8NOY84ignhgt8w9lehcADhv7vxEoniHI=
Subject key identifier: 8E:33:2C:20:03:E3:D2:38:60:89:A0:DF:7E:AC:F3:E5:93:AF:13:79
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D826
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/028235507CD111F1A334EDCDCE1D38B0.roa
Signing time: Sat 11 Jul 2026 02:34:16 +0000
ROA not before: Sat 11 Jul 2026 02:34:10 +0000
ROA not after: Tue 10 Jul 2029 02:34:10 +0000
asID: 17561
IP address blocks: 154.198.192.0/24 maxlen: 24
154.198.193.0/24 maxlen: 24
154.198.194.0/24 maxlen: 24
154.198.195.0/24 maxlen: 24
154.198.196.0/24 maxlen: 24
154.198.197.0/24 maxlen: 24
154.198.198.0/24 maxlen: 24
154.198.199.0/24 maxlen: 24
154.198.200.0/24 maxlen: 24
154.198.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 11:51:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120870 (0x1d826)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 11 02:34:10 2026 GMT
Not After : Jul 10 02:34:10 2029 GMT
Subject: CN=6a51aba8-6830
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7f:65:95:0c:36:03:9a:9b:9a:42:27:a6:64:
93:6f:0d:35:6a:0d:2b:cb:41:6e:3c:49:3c:59:63:
ca:2b:9f:60:02:61:b7:c5:14:50:8a:24:63:72:cc:
89:fc:11:d0:0f:dc:0f:0e:f5:ff:c5:d7:86:c0:48:
65:46:4b:36:2c:d4:b6:89:7c:67:94:d7:5e:50:fe:
cd:9d:49:e5:28:92:ab:17:96:5d:21:aa:d1:48:04:
96:84:6c:e5:17:4a:3a:93:af:87:c7:a4:ae:a2:c4:
57:ec:e8:6f:0e:db:49:47:5c:d7:c0:f9:a5:bd:0a:
bc:1f:48:63:47:5d:50:79:d0:ed:11:aa:31:17:1b:
f5:33:45:ef:3b:3d:dd:cb:00:b0:ce:bc:8a:1e:68:
e0:6f:09:46:87:a9:9a:1c:ff:f9:66:c2:fe:d8:8a:
c1:98:41:c8:14:4e:8f:33:b3:ab:13:db:d6:9b:78:
7a:2e:ed:37:a3:92:db:7b:67:14:54:10:e9:ba:95:
f7:e2:a5:eb:85:d4:38:ca:20:35:3a:b8:94:0b:7c:
74:6c:64:3b:02:03:56:a0:dc:63:87:d9:e2:16:a7:
1d:8e:84:6b:2d:0b:7a:c7:96:76:ec:c2:bd:c7:bb:
ea:85:77:c6:63:f7:bd:31:14:4d:65:c0:dc:a4:09:
fc:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:33:2C:20:03:E3:D2:38:60:89:A0:DF:7E:AC:F3:E5:93:AF:13:79
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/028235507CD111F1A334EDCDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.198.192.0-154.198.201.255
Signature Algorithm: sha256WithRSAEncryption
98:92:b0:f7:bd:5f:0b:bb:7d:8f:e4:df:c6:a2:f9:fa:12:8d:
3b:35:59:0c:79:53:57:b9:fc:eb:12:0d:83:ed:0c:92:b5:92:
a3:21:e2:e2:52:80:8c:c3:0c:9c:03:06:ab:52:b9:d0:63:8d:
e6:bc:57:e8:7a:95:98:d0:59:9a:6c:b3:5e:d4:b2:df:86:0c:
53:b4:cb:e9:6d:e1:24:32:d7:4a:fc:7c:37:c0:44:1e:d6:67:
b5:69:c6:aa:37:6a:da:f6:d5:9c:e1:37:af:2c:ab:70:d2:ed:
0d:7d:e2:da:81:47:6a:15:52:be:27:57:2e:19:47:32:94:2f:
90:87:7d:bc:16:41:3d:67:1b:24:48:98:86:8e:60:97:37:5a:
35:c9:5e:6a:69:21:72:de:a6:26:41:3f:34:bc:7e:e0:de:52:
eb:56:d6:49:da:4d:a0:7b:15:c6:75:88:56:85:fb:24:ef:11:
77:96:42:b3:a4:7c:56:c9:06:48:20:d0:82:3d:09:03:68:bc:
5c:19:59:35:e4:94:bc:29:f7:22:eb:c4:51:72:6c:cd:1e:20:
45:2d:39:86:0a:4e:ad:49:08:e7:82:51:01:44:f2:8f:7e:b7:
1d:2a:eb:67:a7:ac:96:fd:51:2d:11:73:61:b4:d5:c3:b2:b6:
99:48:e3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:45:48 2026 by rpki-client