Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/418CEFE27C5411F1A7D47ADECE1D38B0.roa
File: 418CEFE27C5411F1A7D47ADECE1D38B0.roa (raw, json)
Hash identifier: 1RttjIhNp2Zsuf6XAo1Mw59Q+dc0qX85SnOp4azFIQ8=
Subject key identifier: D9:2B:3B:E4:96:AD:AA:1A:08:50:EB:27:4E:D9:BD:67:2A:32:BA:7F
Certificate issuer: /CN=F368F2D0AF/serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Certificate serial: 01D807
Authority key identifier: 25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/418CEFE27C5411F1A7D47ADECE1D38B0.roa
Signing time: Fri 10 Jul 2026 11:41:15 +0000
ROA not before: Fri 10 Jul 2026 11:41:10 +0000
ROA not after: Tue 10 Jul 2029 11:41:10 +0000
asID: 17561
IP address blocks: 154.84.10.0/24 maxlen: 24
154.84.11.0/24 maxlen: 24
154.84.12.0/24 maxlen: 24
154.84.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.mft
rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Sun 19 Jul 2026 00:07:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120839 (0x1d807)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F368F2D0AF, serialNumber=25D63E08EABE7CFA6785D4C1D6D34116DE15B3DC
Validity
Not Before: Jul 10 11:41:10 2026 GMT
Not After : Jul 10 11:41:10 2029 GMT
Subject: CN=6a50da5b-fc4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a1:53:3c:5f:aa:18:1c:9a:19:44:1d:38:fd:
9e:e5:65:99:35:ac:12:59:14:93:aa:db:d0:c3:03:
6d:c8:c8:66:63:4f:ff:8d:64:26:1f:b1:e2:d8:e1:
83:24:f5:a5:8d:09:39:c7:a1:7a:9a:d6:ac:eb:93:
2e:96:e1:66:d6:d5:7a:ae:0e:cf:73:c6:5c:4c:ab:
ce:df:dd:22:6e:21:61:60:cc:7b:25:e8:7d:d3:70:
c2:2f:7c:b8:76:d0:66:b4:99:5e:0b:b4:bd:9b:5d:
cb:d9:ac:41:37:f9:30:80:79:a2:c6:0b:d6:56:a6:
d4:8c:3d:68:bc:2b:73:af:95:aa:55:f1:d7:df:f5:
d9:e5:10:8a:83:55:c4:07:0c:7b:bb:1f:3f:bc:c3:
ea:58:b9:e5:07:5e:da:62:15:26:cf:dc:b1:1c:55:
0c:b7:c2:c7:b7:13:c8:26:04:c7:71:13:b3:83:93:
3b:4e:64:7d:5a:82:be:08:18:de:9d:ee:0f:92:a1:
87:27:50:21:fb:b3:e9:36:33:54:61:58:c0:c9:f2:
86:24:77:0f:9a:2f:11:90:80:47:f0:55:41:d3:33:
19:d2:83:a1:56:29:02:a0:f8:20:d7:ff:14:24:8a:
e5:b1:e7:21:67:49:26:19:b5:d0:51:81:9e:b9:61:
1a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:2B:3B:E4:96:AD:AA:1A:08:50:EB:27:4E:D9:BD:67:2A:32:BA:7F
X509v3 Authority Key Identifier:
keyid:25:D6:3E:08:EA:BE:7C:FA:67:85:D4:C1:D6:D3:41:16:DE:15:B3:DC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/JdY-COq-fPpnhdTB1tNBFt4Vs9w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/JdY-COq-fPpnhdTB1tNBFt4Vs9w.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F368F2D0/7F4A98EA6E0511E89C0D6E4BF8AEA228/418CEFE27C5411F1A7D47ADECE1D38B0.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.84.10.0-154.84.13.255
Signature Algorithm: sha256WithRSAEncryption
0b:09:f2:7d:3c:f0:31:e8:64:f1:da:d3:fd:7c:60:8b:92:3e:
f1:ea:e2:46:4e:26:1f:6a:dc:14:d6:2e:58:2f:71:3e:93:76:
ed:f6:53:ea:2e:26:57:f0:27:08:ed:ae:42:80:3d:66:15:e8:
63:1e:82:42:74:56:b6:6c:9a:2c:3e:9e:ca:7a:3a:c4:99:ee:
0e:dd:62:5b:11:c1:3d:20:2d:7f:4b:68:68:52:3b:1b:88:4c:
fa:2c:8e:bd:57:40:88:9d:1e:f2:4e:56:51:b8:09:5d:6b:17:
42:bb:0d:6b:a2:c2:2c:19:08:10:d7:16:48:4b:a2:52:aa:ed:
a8:ba:38:5f:cd:27:f0:ab:49:be:aa:9a:c5:48:b2:5d:f7:24:
33:b5:32:f2:f2:a4:b8:ce:02:9a:fe:4c:b1:62:c7:53:ab:e7:
e7:ff:b6:c0:09:84:ff:c9:62:be:cb:99:04:01:2a:76:c9:08:
bb:c5:fc:ec:60:ca:a8:9a:60:8d:f0:c5:c4:8a:f4:9d:6f:1b:
78:f2:fd:0f:7e:12:5f:f3:4c:1e:33:cf:8e:2a:d2:c8:6c:6d:
db:0e:ce:a6:c7:95:d9:4d:19:6c:41:3e:98:35:c8:01:ac:2a:
65:a7:2c:8d:0a:7a:a5:03:1c:d8:e8:35:f5:c0:71:08:e6:7e:
ba:50:5a:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:27 2026 by rpki-client