Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1DF862206A5F11F1A8323AB6CE1D38B0.roa
File: 1DF862206A5F11F1A8323AB6CE1D38B0.roa (raw, json)
Hash identifier: UGHynAEtTYAGt8T1a98a8PLb/cKw7tCmmPfu6JrrLac=
Subject key identifier: 24:8A:94:0C:42:69:43:BE:6F:7E:96:B0:E7:88:F0:2F:F6:A7:79:2B
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D3D8
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1DF862206A5F11F1A8323AB6CE1D38B0.roa
Signing time: Wed 17 Jun 2026 15:13:39 +0000
ROA not before: Wed 17 Jun 2026 15:13:33 +0000
ROA not after: Fri 24 Jul 2026 15:13:33 +0000
asID: 395793
IP address blocks: 154.92.205.0/24 maxlen: 24
154.92.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119768 (0x1d3d8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 17 15:13:33 2026 GMT
Not After : Jul 24 15:13:33 2026 GMT
Subject: CN=6a32b9a2-ec92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d7:50:4d:75:1e:db:45:60:e8:9f:f9:96:b0:
e4:87:3f:34:9f:18:59:ff:ed:15:ba:50:d9:c5:98:
5e:28:81:b0:b8:73:b7:f3:77:2b:45:02:ab:33:24:
1e:6e:34:0e:19:55:22:e2:e0:89:08:72:fd:2f:68:
e0:b1:f0:11:9e:6f:ad:5c:14:99:b5:15:7d:2d:f4:
f8:97:e9:46:84:65:46:ec:88:10:5f:cb:f6:06:16:
70:34:8e:6c:fd:d2:94:55:f0:fa:a7:52:d1:13:a7:
85:11:c3:1a:88:ce:f4:1f:85:f6:89:f3:40:ed:72:
a5:4d:6f:24:c8:a6:e0:f6:14:64:53:8e:41:99:f3:
7e:81:0e:b4:c7:dd:39:f1:c7:dc:9a:43:f3:3c:2b:
a6:3d:40:92:62:31:da:78:c5:06:4a:aa:1d:46:4b:
a2:fe:af:b8:b4:9b:99:ea:46:e3:4f:7d:55:69:cd:
95:5f:23:ea:7f:5d:43:15:5f:43:14:7c:ae:4a:70:
33:e4:8e:76:a0:e2:4b:73:fb:53:e6:ed:03:30:d6:
16:15:c0:6d:7f:e8:55:e6:93:87:92:7d:35:36:b8:
34:41:34:6f:83:9c:eb:ca:79:33:a1:12:d3:7c:4b:
41:40:33:03:0a:be:b1:f0:54:81:15:3a:98:f3:5b:
39:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:8A:94:0C:42:69:43:BE:6F:7E:96:B0:E7:88:F0:2F:F6:A7:79:2B
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/1DF862206A5F11F1A8323AB6CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.92.205.0/24
154.92.207.0/24
Signature Algorithm: sha256WithRSAEncryption
61:ca:94:af:bd:bc:d4:10:96:ef:b5:20:09:0c:78:92:c0:9e:
19:b3:2c:dd:9e:ae:fe:4b:f7:27:4a:ba:4d:f2:de:f8:c7:2a:
51:ba:61:7d:f7:27:86:5f:e2:e5:9f:64:24:e1:cc:2e:dd:24:
17:d0:12:6d:42:19:7a:d3:f1:f8:eb:09:67:30:60:1d:87:53:
cf:0a:6c:ae:03:2d:0a:93:5b:c5:97:7e:fd:1e:6d:0a:b2:f3:
e6:fb:24:03:7c:e1:80:55:b4:84:04:6b:ec:2d:2f:82:b3:26:
57:81:e6:34:98:aa:0d:6f:84:58:35:e6:47:43:79:06:95:94:
a5:fc:4d:15:80:12:a5:b9:6d:eb:07:c5:8e:1e:4b:0a:50:c5:
df:9c:16:70:88:79:a2:cd:74:79:c7:66:06:49:61:f4:b5:3d:
dc:65:64:09:5d:05:0b:16:83:68:08:34:30:b8:72:49:d5:a6:
48:60:b4:b6:0c:70:70:5b:80:a8:72:a5:60:c6:f6:ac:03:d6:
d9:46:47:a6:63:87:69:c7:d9:7b:2b:c4:3b:34:99:d3:60:67:
74:76:1c:f1:ce:45:92:5e:d1:54:34:35:d4:01:78:48:a9:3f:
76:56:b2:e1:e5:6d:45:db:d6:b1:72:4e:1c:15:f2:fc:19:27:
e5:01:74:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:51:35 2026 by rpki-client