Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F2209226A2B11F1BA4483FDCE1D38B0.roa
File: 2F2209226A2B11F1BA4483FDCE1D38B0.roa (raw, json)
Hash identifier: TJplIcl8n0FNCTYZShwWECWf5WQRz5WDoN+d3J0/YrQ=
Subject key identifier: 26:51:71:60:3D:35:C5:38:9A:9B:A8:CC:D0:B8:60:44:1E:70:B8:6A
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D39C
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F2209226A2B11F1BA4483FDCE1D38B0.roa
Signing time: Wed 17 Jun 2026 09:01:53 +0000
ROA not before: Wed 17 Jun 2026 09:01:49 +0000
ROA not after: Thu 17 Jun 2027 09:01:49 +0000
asID: 139811
IP address blocks: 154.205.4.0/23 maxlen: 24
154.210.12.0/24 maxlen: 24
154.210.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Thu 25 Jun 2026 14:14:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119708 (0x1d39c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jun 17 09:01:49 2026 GMT
Not After : Jun 17 09:01:49 2027 GMT
Subject: CN=6a326281-053e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d5:a6:e3:52:76:00:ee:02:09:ad:da:fd:0f:
b0:81:67:fc:17:e1:78:93:c4:c7:f7:f9:7b:76:1b:
75:43:54:ab:29:cc:4d:97:4a:cb:1a:91:db:bc:b7:
c2:bc:50:fe:61:7e:4f:51:ae:d7:1d:26:a4:da:34:
a4:57:97:61:40:9d:05:ed:2f:2a:34:4f:29:76:6e:
c9:92:5a:7f:b4:63:5f:1c:41:5b:50:54:68:78:05:
78:af:c7:31:ab:cf:dd:7d:d1:4c:a3:53:3d:c5:8a:
4e:be:52:fa:76:c9:8d:8d:4f:39:48:eb:a3:cd:1e:
c3:fd:13:bd:3e:32:09:5a:3c:6e:b3:12:de:ec:75:
6c:b6:ac:dd:dc:29:fc:ce:7c:c9:f9:93:a8:4a:a8:
57:0d:36:b9:fd:03:32:19:ab:0e:ff:4b:38:83:74:
40:ce:7f:22:72:41:52:98:2d:85:2b:8f:07:aa:86:
d0:59:7d:4f:41:61:73:d7:0d:dd:74:21:d7:40:ac:
4c:c7:08:af:ed:88:73:8c:e5:ef:b9:7a:9a:82:60:
94:bf:1b:e9:53:db:9d:ba:0a:b7:3b:3b:27:ee:73:
c7:cb:0e:c3:db:cc:d1:a5:0a:d1:b1:40:0d:d8:6b:
bc:3e:ce:85:c7:3d:e0:93:9a:59:d7:5a:7c:f0:38:
de:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:51:71:60:3D:35:C5:38:9A:9B:A8:CC:D0:B8:60:44:1E:70:B8:6A
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/2F2209226A2B11F1BA4483FDCE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.205.4.0/23
154.210.12.0/24
154.210.15.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:95:45:7e:22:43:b3:b0:2d:af:7e:10:0f:52:cc:fe:5e:42:
d6:ca:1b:a5:ad:a6:a9:8e:cc:c9:0c:21:c5:56:b4:3a:0c:d5:
70:31:f4:6a:f5:65:11:8e:89:8a:a0:26:6a:4e:1c:ab:22:2f:
5c:9f:8c:e1:4b:65:d5:49:8f:e5:ed:30:99:54:c9:f0:b4:d6:
40:0d:56:99:b1:68:05:bc:e7:3a:d0:d9:3b:f1:0e:a5:f2:dd:
fe:d2:5a:9f:5e:83:c2:26:78:dd:c1:a8:80:24:b4:b9:27:69:
85:57:eb:5a:b9:4a:9c:1e:5e:3c:e4:f8:df:38:77:fc:91:c1:
86:d9:37:55:87:45:b5:e6:f6:c0:60:26:22:94:d6:05:86:c7:
b2:f3:9d:f3:47:d0:b8:ac:94:71:65:de:64:b4:ba:71:98:e5:
e9:cf:f1:e9:ae:7a:ce:ba:bb:a6:70:c1:23:4d:f7:9c:5c:ef:
9c:22:87:82:89:c8:1d:bf:ba:dd:07:ad:fd:d8:d1:79:ba:9b:
95:1d:26:8e:1e:5c:85:88:46:b8:b2:b8:6e:4b:ff:fc:39:b1:
81:2e:1e:eb:50:d3:9d:01:d8:88:1f:ac:ef:39:f7:16:18:fc:
80:dd:98:a2:69:8f:d6:ab:6a:f1:72:ad:80:ae:5d:bc:4b:59:
99:90:ae:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 21:51:19 2026 by rpki-client