Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A1AB5768B2F11F19E4871B5CE1D38B0.roa
File: 2A1AB5768B2F11F19E4871B5CE1D38B0.roa (raw, json)
Hash identifier: yhV65o6k6CGbJtH9FtE6WPDlwwXKPHB9rWEYnxgCBZI=
Subject key identifier: 18:65:C0:7B:4A:E0:EE:50:F3:FD:B5:7B:BB:05:F5:D2:95:BF:AF:63
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DBD3
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A1AB5768B2F11F19E4871B5CE1D38B0.roa
Signing time: Wed 29 Jul 2026 09:23:31 +0000
ROA not before: Wed 29 Jul 2026 09:23:27 +0000
ROA not after: Sat 05 Sep 2026 09:23:27 +0000
asID: 204548
IP address blocks: 154.222.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 121811 (0x1dbd3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 29 09:23:27 2026 GMT
Not After : Sep 5 09:23:27 2026 GMT
Subject: CN=6a69c693-47f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:65:32:38:c7:56:91:a5:24:f0:26:bd:7a:89:
8a:57:ef:78:50:2e:4f:41:59:a4:6b:f2:ff:06:56:
01:e4:30:ac:f7:f5:65:6d:be:d6:b0:13:9e:33:10:
56:8f:d1:98:b7:66:6f:2e:e2:23:6e:96:08:3b:86:
9d:0b:7f:96:5f:bf:a5:bf:c7:62:34:ff:25:d4:ff:
ed:54:46:cb:2e:0b:2c:99:02:b7:ae:b1:9f:f9:ae:
dd:57:7e:8e:d6:90:27:f8:25:26:9b:23:9d:a5:17:
30:fd:22:10:4f:de:77:d4:74:d8:bb:fb:84:8e:68:
c2:3d:5e:76:7b:ce:27:42:60:35:a3:b9:9e:00:a6:
2e:fb:3c:fe:5e:ca:59:82:37:6c:98:97:28:f5:33:
b0:7d:35:82:d4:da:d4:c7:48:18:2d:6c:d2:f1:72:
4a:04:a8:ba:54:d4:27:a6:1d:eb:de:f6:7b:c5:cc:
f9:e7:1e:6a:c7:23:ba:2a:94:70:b3:e5:f0:1d:91:
86:7b:1a:e2:2f:60:3f:72:8a:81:ca:22:c6:f4:8d:
7d:3f:32:bc:f1:2a:3e:b2:f4:31:b4:c4:a8:be:42:
0e:38:ac:37:b1:a5:09:83:48:0f:fd:dd:b6:19:36:
46:f7:20:54:f5:3f:b8:7b:bf:d7:85:4f:40:fd:1f:
6e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:65:C0:7B:4A:E0:EE:50:F3:FD:B5:7B:BB:05:F5:D2:95:BF:AF:63
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2A1AB5768B2F11F19E4871B5CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.222.133.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:77:59:f9:0a:aa:4d:00:52:7a:85:eb:fd:36:dd:f9:8f:58:
4c:ef:0f:2e:7a:ae:2c:46:93:bf:7f:82:68:69:a3:5e:50:4d:
1a:cf:a8:e9:fc:7b:7e:5f:05:f0:53:ac:49:38:32:bf:e6:d9:
94:3a:df:e5:a8:19:a1:9b:c0:13:97:8d:50:d3:5c:41:ff:a5:
d2:5d:8c:34:6c:3f:1a:16:d3:30:b5:f9:e2:b3:1d:ec:cc:2a:
63:1d:13:a0:5e:db:bc:01:73:5e:b5:c7:83:81:ed:3d:2e:83:
12:8d:2e:3d:b7:86:97:c1:6f:e9:84:d0:a2:5e:3f:7d:b8:82:
40:35:37:e8:78:48:e4:28:8f:67:c1:29:1a:98:bf:22:df:a1:
0d:02:40:78:af:20:bb:5f:bf:41:fe:b5:4d:b1:71:f3:6f:30:
9d:c0:c7:cd:14:82:0b:4f:da:63:d9:a9:e5:d4:3b:f6:3e:4e:
40:40:14:62:d9:e3:59:76:fb:1a:b0:5c:3b:8f:ce:6f:33:85:
7a:72:32:24:0f:c3:81:30:1d:8b:9f:0e:a9:ce:93:59:4a:60:
d5:7a:b2:0b:e0:0e:c3:4e:f8:84:04:85:3f:c9:42:84:50:a7:
3c:af:a8:12:e9:e7:d2:cc:75:6e:c4:34:b8:f7:39:7a:d7:d8:
31:ce:2d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:07:04 2026 by rpki-client