Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/40C1B0F2918F11F1AC1308F8CE1D38B0.roa
File: 40C1B0F2918F11F1AC1308F8CE1D38B0.roa (raw, json)
Hash identifier: PqCR3eyPZ5fcWTbDHTu5sVUiYMpa2FK0pOIt1n5SYKM=
Subject key identifier: 9A:6D:4F:AA:56:3A:03:A4:37:2F:CC:F9:87:B8:3E:81:3D:A7:95:DA
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01DCFD
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/40C1B0F2918F11F1AC1308F8CE1D38B0.roa
Signing time: Thu 06 Aug 2026 12:06:28 +0000
ROA not before: Thu 06 Aug 2026 12:06:24 +0000
ROA not after: Tue 18 Aug 2026 12:06:24 +0000
asID: 150706
IP address blocks: 154.223.168.0/22 maxlen: 24
154.223.176.0/22 maxlen: 24
154.223.180.0/22 maxlen: 24
154.223.188.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Mon 10 Aug 2026 00:07:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 122109 (0x1dcfd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Aug 6 12:06:24 2026 GMT
Not After : Aug 18 12:06:24 2026 GMT
Subject: CN=6a7478c4-fe31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:f8:d1:6b:c4:78:7c:4d:23:8e:9d:ad:4b:94:
bd:06:80:75:4b:47:07:2a:6f:2c:46:97:d8:6c:0e:
79:21:28:f3:42:1d:93:de:af:19:cf:e7:da:7b:86:
c2:49:f5:40:01:7e:76:ec:35:d9:a9:4b:2f:17:39:
9c:c2:27:6c:99:34:56:e9:d8:df:94:3f:de:ac:86:
a2:88:f8:89:5b:b2:58:c8:18:ce:61:d1:e6:b7:0c:
5f:99:69:7f:be:39:4f:8a:5f:6b:44:81:b0:db:34:
70:ec:f3:30:c7:70:1b:b0:0b:b1:a6:23:0a:db:98:
7e:d3:97:3e:90:a3:8d:ae:00:e1:cc:14:79:55:9a:
33:01:52:4f:0c:a9:95:cb:2d:54:24:fe:a7:cc:e8:
a4:4b:ef:1d:69:bd:f6:f2:23:8e:43:e1:47:db:3f:
fd:c2:17:32:53:c7:06:ad:a0:98:fa:2e:c1:33:25:
7a:81:7d:56:73:a8:0e:af:8d:81:f0:df:80:42:35:
b8:b4:d3:10:a9:66:30:04:f6:a3:9a:a5:28:cf:19:
12:6d:34:d3:7a:68:6b:ee:ee:cf:1b:33:e3:bb:1c:
f0:9d:2e:50:53:a5:c0:4b:d4:df:b9:a5:95:58:33:
c2:f7:e0:0f:5a:52:63:1b:e4:a4:51:d2:cb:00:1c:
2c:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6D:4F:AA:56:3A:03:A4:37:2F:CC:F9:87:B8:3E:81:3D:A7:95:DA
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/40C1B0F2918F11F1AC1308F8CE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.223.168.0/22
154.223.176.0/21
154.223.188.0/22
Signature Algorithm: sha256WithRSAEncryption
16:3a:60:6a:a6:ae:26:b2:d0:b6:17:9d:b3:c8:04:b2:ad:00:
b2:3a:d3:b3:bd:22:81:9b:db:df:fb:cc:5a:62:8b:91:c2:a7:
01:a2:df:af:4f:6a:23:13:52:8e:01:68:70:da:b8:43:0d:63:
5a:20:d1:0e:1b:db:82:37:e5:86:f0:ab:f7:fd:b5:4a:94:c3:
0f:dc:a2:28:ca:3c:b9:59:19:23:57:85:db:8a:58:0e:fc:61:
c2:50:00:67:ed:66:f7:b3:f7:8a:45:3a:18:85:c7:e9:48:5e:
47:47:20:53:7f:ce:c7:90:9e:bd:bc:66:18:d8:29:71:90:e7:
2b:73:d1:e3:da:9b:6d:ea:4d:81:d7:f0:4e:11:ae:58:9e:7b:
b8:d6:50:9f:b7:ae:a2:ad:c2:d1:f6:da:8c:0c:8a:ec:6a:e4:
3d:4d:94:dc:c3:b9:ed:ad:be:ae:ec:71:8c:2a:cd:49:73:79:
8e:9a:8f:24:80:44:a8:54:b1:f6:34:78:4f:c1:5d:52:4e:db:
08:18:0e:1b:0e:76:2b:72:f9:29:7d:69:f5:ed:1a:84:e7:9c:
9b:dd:40:b7:de:d9:08:77:2e:2d:ed:2c:15:29:b3:58:88:54:
04:fe:d3:c4:1c:58:28:c2:4b:56:e7:15:33:b0:44:43:40:bc:
86:a0:7e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:05:43 2026 by rpki-client